devel@edk2.groups.io

[PATCH V4 04/12] OvmfPkg/IntelTdx: Update tdx measurement in SEC phase

From: Min M Xu <min.m.xu@...> BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=4243 After TdxHelperLib is instroduced, the SecMain.c in IntelTdx is updated with the new functions provided by

By Min Xu · #99111 ·

[PATCH V4 03/12] OvmfPkg/IntelTdx: Add SecTdxHelperLib

From: Min M Xu <min.m.xu@...> BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=4243 TdxHelperLib provides below helper functions for a td-guest. - TdxHelperProcessTdHob -

By Min Xu · #99110 ·

[PATCH V4 02/12] OvmfPkg/IntelTdx: Add TdxHelperLibNull

From: Min M Xu <min.m.xu@...> BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=4243 TdxHelperLib provides below helper functions for a td-guest. - TdxHelperProcessTdHob -

By Min Xu · #99109 ·

[PATCH V4 01/12] OvmfPkg: Add Tdx measurement data structure in WorkArea

From: Min M Xu <min.m.xu@...> BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=4243 From the perspective of security any external input should be measured and extended to some registers (TPM

By Min Xu · #99108 ·

[PATCH V4 00/12] Enable Tdx measurement in OvmfPkgX64

BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=4243 Tdx measurement (RTMR based measurement) is enabled in OvmfPkg/IntelTdx. This patch-set enables the feature in OvmfPkgX64 as well. Patch #1:

By Min Xu · #99107 ·

Re: [PATCH v11 2/4] MdePkg: Introduce the SevMemoryAcceptance protocol

Might want to fix up the commit title from MdePkg to OvmfPkg before committing. Thanks, Tom

By Lendacky, Thomas · #99106 ·

Re: [PATCH v11 0/4] Add safe unaccepted memory behavior

For the series, Reviewed-by: Ard Biesheuvel <ardb@...> Thanks a lot for your persistence. Queued as #3954

By Ard Biesheuvel · #99105 ·

Re: [PATCH v11 4/4] OvmfPkg/PlatformPei: SEV-SNP make >=4GB unaccepted

Ah, yes that sounds right. -- -Dionna Glaze, PhD (she/her)

By Dionna Glaze · #99104 ·

Re: [PATCH v11 4/4] OvmfPkg/PlatformPei: SEV-SNP make >=4GB unaccepted

Shouldn't this check be inside the if () below? Or are all resources that start at or above 4 GiB guaranteed to be system memory? No need to resend - if needed, I can fix that up when applying.

By Ard Biesheuvel · #99103 ·

[PATCH v11 4/4] OvmfPkg/PlatformPei: SEV-SNP make >=4GB unaccepted

Instead of eagerly accepting all memory in PEI, only accept memory under the 4GB address. This allows a loaded image to use the MEMORY_ACCEPTANCE_PROTOCOL to disable the accept behavior and

By Dionna Glaze · #99102 ·

[PATCH v11 3/4] OvmfPkg: Implement AcceptAllUnacceptedMemory in AmdSevDxe

This protocol implementation disables the accept-all-memory behavior of the BeforeExitBootServices event this driver adds. Cc: James Bottomley <jejb@...> Cc: Tom Lendacky

By Dionna Glaze · #99101 ·

[PATCH v11 2/4] MdePkg: Introduce the SevMemoryAcceptance protocol

The default behavior for unaccepted memory in SEV-SNP is to accept all memory when ExitBootServices is called. An OS loader can use this protocol to disable this behavior to assume responsibility for

By Dionna Glaze · #99100 ·

[PATCH v11 1/4] OvmfPkg: Add memory acceptance event in AmdSevDxe

The added behavior is to accept all unaccepted memory at ExitBootServices if the behavior is not disabled. This allows safe upgrades for OS loaders to affirm their support for the unaccepted memory

By Dionna Glaze · #99099 ·

[PATCH v11 0/4] Add safe unaccepted memory behavior

We make eager memory acceptance the default behavior at ExitBootServices for SEV-SNP machines by using the standard-enforced behavior that if the call returns an error code, then the map key

By Dionna Glaze · #99098 ·

[PATCH v2] OvmfPkg: Create additional PML1 entries for large SEV-SNP VMs

Edk2 was failing, rather than creating more PML4 entries, when they weren't present in the initial memory acceptance flow. Because of that VMs with more than 512G memory were crashing. This code fixes

By Mikolaj Lisik · #99097 ·

[PATCH v1 1/1] uefi-sct/SctPkg: update path to edk2-test-parser, check for repo

buildzip.sh was referencing the obsolete sct_parser project which has been replaced with edk2-test-parser. The script now checks for the edk2-test-parser repo in $pwd, if not present then the script

By Abhimanyu Singh · #99096 ·

[PATCH v1 0/1] update path to edk2-test-parser, checks for repo

buildzip.sh was referencing the obsolete sct_parser project which has been replaced with edk2-test-parser. The script now checks for the edk2-test-parser repo in $pwd, if not present then the script

By Abhimanyu Singh · #99095 ·

[PATCH] MdeModulePkg/SmmLockBoxLib: Remove dead code

Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=3D4317 The "if" condition on line 554 ensures that Guid won't be NULL (or 0) on li= ne 600. So, there will never be a situation where the "else"

By icegambit91@... · #99094 ·

Re: [PATCH v2 2/2] ArmVirtPkg/ArmVirtQemu: Avoid early ID map on ThunderX

Gerd Hoffmann <kraxel@...> wrote: I suspect that it is that last point that has broken. The kernel handling of that configuration has always been super sketchy, and it would take almost nothing

By Marc Zyngier <maz@...> · #99093 ·

Re: [PATCH v2 2/2] ArmVirtPkg/ArmVirtQemu: Avoid early ID map on ThunderX

Gerd Hoffmann <kraxel@...> wrote: RPi3 as a host? Using the QEMU-provided GIC emulation? I wouldn't be surprised if that broke ages ago as nobody really tests this configuration. If you can

By Marc Zyngier <maz@...> · #99092 ·

Messages