Hi, Jiewen I try to explant what means “more than once authentication(e.g. VerifyImageWithDenylist and VerifyImageWithAllowlist)”. When we confirm the image is effective, we have to confirm not

I think another problem that we need to consider is that to my knowledge, the MP services do not allow for thread scheduling at all. You can run a call back on multiple processors, but that won't

Patch looks sane to me. Reviewed-by: Gerd Hoffmann <kraxel@...> How you are going to use the extra space you got? Do you add kernel + initrd as ffs files to FVMAIN_COMPACT? take care,

Sorry, I hardly understand the explanation. Do you have a URL for the POC code?

Hi, Well, their design review document lists two configurations, one (named "config-a" in the slides) following the existing boot flow and another ("config-b") which skips PEI. The motivation for

Hi Some explanation for confusion. Is the result of the parallel hash identical to the current hash? The result of parallelhash256 do not identical to the current hash. And we are not intention

Hi, Who populates the page? qemu? sev-snp firmware? Yes, that is the background. Avoiding vmexits would be one advantage. Being able to test the code without SNP-capable hardware (for example in

Likewise the expected behavior. For example whenever the protocol driver or the memory core should update the GCD maps. Yes. Same for booting the OS, the kernel must have enough memory so it can

Does that work with tdx? I had the impression that ovmf can't choose whenever it uses 4-level or 5-level paging in case tdx is enabled, but instead has to use what the tdx firmware (or hardware?)

Since the time is sent to the EC byte-by-byte, perform shift by a byte multiple of bits. Also update some comments. Cc: Chasel Chiu <chasel.chiu@...> Cc: Nate DeSimone

Check that Data pointer is not NULL. Also update some notes on this library. The documented return values are updated. Cc: Chasel Chiu <chasel.chiu@...> Cc: Nate DeSimone

The largest size flash image currently available for OVMF builds, 4MiB, is too small to insert a Linux kernel and initramfs into the DXEFV, and is thus insufficient for testing Linuxboot builds via

A 4MiB OVMF image is too small for building Linuxboot firmware images to test with QEMU. This patchset adds the ability to build 16MiB OVMF images. Bugzilla:

Since the time is sent to the EC byte-by-byte, perform shift by a byte multiple of bits. Also update some comments. Cc: Chasel Chiu <chasel.chiu@...> Cc: Nate DeSimone

Check that Data pointer is not NULL. Also update some notes on this library. Cc: Chasel Chiu <chasel.chiu@...> Cc: Nate DeSimone <nathaniel.l.desimone@...> Signed-off-by: Benjamin Doron

Since the time is sent to the EC byte-by-byte, perform shift by a byte multiple of bits. Also update some comments. Cc: Chasel Chiu <chasel.chiu@...> Cc: Nate DeSimone

Check that Data pointer is not NULL. Also update some notes on this library. Cc: Chasel Chiu <chasel.chiu@...> Cc: Nate DeSimone <nathaniel.l.desimone@...> Signed-off-by: Benjamin Doron

That is good info. I recommend to add microvm feature to the https://github.com/tianocore/edk2/blob/master/Maintainers.txt OvmfPkg: microvm-related modules F: OvmfPkg/microvm/ F:

Pushed via: PR - https://github.com/tianocore/edk2/pull/1948 Commit - https://github.com/tianocore/edk2/commit/81d71fb86e1ad676e94becb7ffffb403cefd3019 Best Regards, Hao Wu

Pushed via: PR - https://github.com/tianocore/edk2/pull/1947 Commit - https://github.com/tianocore/edk2/commit/c5e805ffe1098601e84fd501d5fa1d45e9d96a62 Best Regards, Hao Wu