Add virtio-mmio support (VirtioMmioDeviceLib and VirtioFdtDxe). With this patch added and a new enough qemu version (6.2+) edk2 will detect virtio-mmio devices, so it is possible to boot from storage

Needed for hardware detection: virtio-mmio devices for now, later also pcie root bridge. Depends on patched qemu which actually provides an

Add fdt parser from EmbeddedPkg (FdtLib and FdtClientDxe) to MicrovmX64. Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=3689 Signed-off-by: Gerd Hoffmann <kraxel@...> ---

FdtClient is unhappy without a device tree, so add an empty fdt which we can use in case etc/fdt is not present in fw_cfg. On ARM machines a device tree is mandatory for hardware detection, thats why

Adds support for virtio-mmio devices to microvm. While being at it also add the README, the patch somehow disappeared from the first batch. v3: - uncrustify & rebase to latest master - pick up

Building grub.efi for AmdSev is difficult because it depends on patches not yet merged to upstream grub. So shortcut the grub build by simply creating an empty grub.efi file. That allows to at least

Add build test for OvmfXen. Signed-off-by: Gerd Hoffmann <kraxel@...> --- .../.azurepipelines/Ubuntu-GCC5.yml | 9 +++++ OvmfPkg/PlatformCI/XenBuild.py | 37

Add build test for OvmfPkg/AmdSev. Signed-off-by: Gerd Hoffmann <kraxel@...> Acked-by: Jiewen Yao <Jiewen.yao@...> Acked-by: Ard Biesheuvel <ardb@...> Reviewed-by: Philippe

Add build test for OvmfPkg/Bhyve. Signed-off-by: Gerd Hoffmann <kraxel@...> Acked-by: Jiewen Yao <Jiewen.yao@...> Acked-by: Ard Biesheuvel <ardb@...> ---

Add build test for OvmfPkg/Microvm. Signed-off-by: Gerd Hoffmann <kraxel@...> Acked-by: Jiewen Yao <Jiewen.yao@...> Acked-by: Ard Biesheuvel <ardb@...> Reviewed-by: Philippe

Skip the qemu boot test in case QEMU_SKIP is set to true. Signed-off-by: Gerd Hoffmann <kraxel@...> Acked-by: Jiewen Yao <Jiewen.yao@...> Acked-by: Ard Biesheuvel

v4: - pick up review tags. - rebase to latest master. v3: - pick up Acked-by: - use __file__ to extend path v2: - hook up OvmfXen too. - add CI maintainers to Cc. Gerd Hoffmann (7):

Move SettingsManager and PlatformBuilder classes to PlatformBuildLib.py file, keep only CommonPlatform class in PlatformBuild.py. Allows reusing these classes for other builds. Pure code motion, no

Hi, Thanks for the suggestion. I will carefully think about it and figure out if it is feasible. (A Poc as the first step ) Thanks Min

Fixes build failure: build.py... /home/kraxel/projects/edk2/OvmfPkg/Bhyve/BhyveX64.dsc(...): error 1001: Module type [SEC] is not supported by library instance

Gerd Hoffmann (2): OvmfPkg/Microvm: add PcdConfidentialComputingGuestAttr OvmfPkg/Bhyve: add MemEncryptSevLib OvmfPkg/Bhyve/BhyveX64.dsc | 1 + OvmfPkg/Microvm/MicrovmX64.dsc | 3 +++ 2

Fixes build failure: /home/kraxel/projects/edk2/OvmfPkg/PlatformPei/AmdSev.c: In function ‘AmdSevInitialize’: /home/kraxel/projects/edk2/MdePkg/Include/Library/PcdLib.h:511:38: error: implicit

Well, I still think there is opportunity to share code, specifically the page table handling. Have a generic page table walker which is able to set and clear bits for a given memory range. Then the

Hi MemEncryptSevClearPageEncMask () is implemented in MemEncryptSevLib. MemEncryptTdxSetPageSharedBit () is implemented in MemEncryptTdxlib. Yes, we have considered to merge these 2 EncryptLib into

Hi, MemEncryptTdxIsEnabled() is checking the ConfidentialComputing PCD. MemEncryptSevIsEnabled () has 3 implementations in SEC/PEI/DXE. In SEC/PEI phase the ConfidentialComputing PCD has not been