AMD Root Guest patches for EPYC 9006 SEV-SNP live migration target Q1 2027

AMD disclosed AMD Root Guest (ARG), a new confidential computing feature for its upcoming EPYC 9006 'Venice' server processors, at the KVM Forum 2026 in Vancouver. ARG extends SEV-SNP capabilities to provide a signed, privileged virtual machine that serves as a root of trust for platform services, with only one active ARG permitted per system. The primary near-term benefit is improved live migration for SEV-SNP protected guests without requiring changes to the guest VM image or guest OS.

Linux enablement remains in the prototyping phase with no public patches available yet. AMD engineers David Kaplan and Tom Lendacky presented the architecture at KVM Forum, and the company anticipates releasing initial ARG Linux patches around the first quarter of 2027. The feature was also documented in a technical whitepaper published by AMD in the same timeframe as the EPYC 9006 Venice series announcement.

ARG architecture and SEV-SNP extension

• Privileged VM model: ARG implements a signed SEV-SNP virtual machine with elevated privileges, functioning as a system-wide root of trust with strictly one active instance per physical host.
• Live migration focus: The initial use case centers on enabling live migration for SEV-SNP protected guests without requiring modifications to either the guest VM image or the guest operating system.
• Platform service extension: ARG expands beyond base SEV-SNP by supporting additional platform services that were previously inaccessible to standard confidential guests.
• Kernel timeline: Linux implementation is currently in internal prototyping at AMD; initial public patches are targeted for Q1 2027, with mainline kernel integration timeline dependent on community review cycles.
• Hardware binding: The feature is designed specifically for the EPYC 9006 'Venice' processor generation, aligning with AMD's latest server platform disclosure.

Why it matters

For cloud providers and enterprise operators running confidential computing workloads on AMD EPYC hardware, ARG addresses a longstanding operational limitation of SEV-SNP: the inability to migrate protected VMs without breaking attestation or modifying guest environments. This advancement could accelerate adoption of confidential computing in production Kubernetes and OpenStack deployments where live migration is essential for maintenance and load balancing. The Q1 2027 patch target suggests the feature may stabilize in time for enterprise Linux distributions shipping kernel cycles in late 2027 or 2028.