|
Re: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF
Totally agree with this. Confidential Computing is a very niche use case, and there is no justification for exploding the complexity of the standard OVMF build.
If, several years from now, it ever
Totally agree with this. Confidential Computing is a very niche use case, and there is no justification for exploding the complexity of the standard OVMF build.
If, several years from now, it ever
|
By
Michael Brown
·
#76068
·
|
|
Re: [PATCH v1 0/8] Measured SEV boot with kernel/initrd/cmdline
Thank you Laszlo for reviewing this.
James explained the difference from Secure Boot setup and our choice of
hash validation of kernel+initrd+cmdline.
[Skipping...]
Brijesh's approach mandates
Thank you Laszlo for reviewing this.
James explained the difference from Secure Boot setup and our choice of
hash validation of kernel+initrd+cmdline.
[Skipping...]
Brijesh's approach mandates
|
By
Dov Murik
·
#76067
·
|
|
Re: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF
thank you Laszlo. Your feedback is received.
I am waiting for comment from other people.
thank you!
Yao, Jiewen
thank you Laszlo. Your feedback is received.
I am waiting for comment from other people.
thank you!
Yao, Jiewen
|
By
Yao, Jiewen
·
#76066
·
|
|
Re: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF
I mean option (B). Create a completely separate DSC+FDF for Intel TDX.
In my mind, there are two (very high level) stages for developing the
"Confidential Computing with TDX" feature in edk2.
Stage
I mean option (B). Create a completely separate DSC+FDF for Intel TDX.
In my mind, there are two (very high level) stages for developing the
"Confidential Computing with TDX" feature in edk2.
Stage
|
By
Laszlo Ersek
·
#76065
·
|
|
[Patch V3 9/9] UefiPayloadPkg: Creat gPldAcpiTableGuid Hob
From SysTableInfo Hob, get ACPI table address, and creat gPldAcpiTableGuid =
Hob
to store it. Remove diretly adding ACPI table to ConfigurationTable.
Dxe ACPI driver will parse it and install ACPI
From SysTableInfo Hob, get ACPI table address, and creat gPldAcpiTableGuid =
Hob
to store it. Remove diretly adding ACPI table to ConfigurationTable.
Dxe ACPI driver will parse it and install ACPI
|
By
Zhiguang Liu
·
#76064
·
|
|
[Patch V3 8/9] MdeModulePkg/ACPI: Install ACPI table from HOB.
V1:
If HOB contains APCI table information, entry point of AcpiTableDxe.inf
should parse the APCI table from HOB, and install these tables.
We assume the whole ACPI table (starting with
V1:
If HOB contains APCI table information, entry point of AcpiTableDxe.inf
should parse the APCI table from HOB, and install these tables.
We assume the whole ACPI table (starting with
|
By
Zhiguang Liu
·
#76063
·
|
|
[Patch V3 7/9] MdeModulePkg: Add new structure for the Universal Payload ACPI Table Info Hob
Cc: Liming Gao <gaoliming@...>
Cc: Jian J Wang <jian.j.wang@...>
Cc: Hao A Wu <hao.a.wu@...>
Signed-off-by: Zhiguang Liu <zhiguang.liu@...>
---
Cc: Liming Gao <gaoliming@...>
Cc: Jian J Wang <jian.j.wang@...>
Cc: Hao A Wu <hao.a.wu@...>
Signed-off-by: Zhiguang Liu <zhiguang.liu@...>
---
|
By
Zhiguang Liu
·
#76062
·
|
|
[Patch V3 6/9] UefiPayloadPkg: Creat gPldSmbiosTableGuid Hob
From SysTableInfo Hob, get Smbios table address, and creat gPldSmbiosTableG=
uid Hob
to store it. Remove diretly adding smbios table to ConfigurationTable.
Dxe module SmbiosDxe will parse it and
From SysTableInfo Hob, get Smbios table address, and creat gPldSmbiosTableG=
uid Hob
to store it. Remove diretly adding smbios table to ConfigurationTable.
Dxe module SmbiosDxe will parse it and
|
By
Zhiguang Liu
·
#76061
·
|
|
[Patch V3 5/9] MdeModulePkg/Universal/SmbiosDxe: Scan for existing tables
V1:
The default EfiSmbiosProtocol operates on an empty SMBIOS table.
The SMBIOS tables are provided by the bootloader on UefiPayloadPkg.
Scan for existing tables in SmbiosDxe and load them if they
V1:
The default EfiSmbiosProtocol operates on an empty SMBIOS table.
The SMBIOS tables are provided by the bootloader on UefiPayloadPkg.
Scan for existing tables in SmbiosDxe and load them if they
|
By
Zhiguang Liu
·
#76060
·
|
|
[Patch V3 4/9] MdeModulePkg: Add new structure for the Universal Payload SMBios Table Info Hob
Cc: Liming Gao <gaoliming@...>
Cc: Jian J Wang <jian.j.wang@...>
Cc: Hao A Wu <hao.a.wu@...>
Signed-off-by: Zhiguang Liu <zhiguang.liu@...>
---
Cc: Liming Gao <gaoliming@...>
Cc: Jian J Wang <jian.j.wang@...>
Cc: Hao A Wu <hao.a.wu@...>
Signed-off-by: Zhiguang Liu <zhiguang.liu@...>
---
|
By
Zhiguang Liu
·
#76059
·
|
|
[Patch V3 3/9] UefiPayloadPkg: UefiPayload retrieve PCI root bridge from Guid Hob
UefiPayload parse gPldPciRootBridgeInfoGuid Guid Hob to retrieve PCI root b=
ridges
information. gPldPciRootBridgeInfoGuid Guid Hob should be created by Bootlo=
ader.
Cc: Maurice Ma
UefiPayload parse gPldPciRootBridgeInfoGuid Guid Hob to retrieve PCI root b=
ridges
information. gPldPciRootBridgeInfoGuid Guid Hob should be created by Bootlo=
ader.
Cc: Maurice Ma
|
By
Zhiguang Liu
·
#76058
·
|
|
[Patch V3 2/9] MdeModulePkg: Add new structure for the PCI Root Bridge Info Hob
Cc: Liming Gao <gaoliming@...>
Cc: Jian J Wang <jian.j.wang@...>
Cc: Hao A Wu <hao.a.wu@...>
Signed-off-by: Zhiguang Liu <zhiguang.liu@...>
---
Cc: Liming Gao <gaoliming@...>
Cc: Jian J Wang <jian.j.wang@...>
Cc: Hao A Wu <hao.a.wu@...>
Signed-off-by: Zhiguang Liu <zhiguang.liu@...>
---
|
By
Zhiguang Liu
·
#76057
·
|
|
[Patch V3 0/9] Create multiple Hobs for Universal Payload
V1:
This patch set is based on Universal Payload on https://universalpayload.github.io/documentation/payload-interfaces/index.html
This patch set introduce one general header, three different hob
V1:
This patch set is based on Universal Payload on https://universalpayload.github.io/documentation/payload-interfaces/index.html
This patch set introduce one general header, three different hob
|
By
Zhiguang Liu
·
#76056
·
|
|
[Patch V3 1/9] MdeModulePkg: Add Universal Payload general defination header file
V1:
Add Universal Payload general defination header file according to
Universal Payload’s documentation
V2:
Add a macro funtion to check the Revision
Cc: Liming Gao <gaoliming@...>
Cc:
V1:
Add Universal Payload general defination header file according to
Universal Payload’s documentation
V2:
Add a macro funtion to check the Revision
Cc: Liming Gao <gaoliming@...>
Cc:
|
By
Zhiguang Liu
·
#76055
·
|
|
Re: [RESEND PATCH RFC v3 00/22] Add AMD Secure Nested Paging (SEV-SNP) support
Hi Brijesh,
That series ("[PATCH v3 00/13] Add GHCBv2 macro and helpers") has been
merged at this point, as commit range dbc22a178546..adfa3327d4fc. [*]
So, I'm having trouble applying this series.
Hi Brijesh,
That series ("[PATCH v3 00/13] Add GHCBv2 macro and helpers") has been
merged at this point, as commit range dbc22a178546..adfa3327d4fc. [*]
So, I'm having trouble applying this series.
|
By
Laszlo Ersek
·
#76054
·
|
|
Re: [PATCH v2 0/6] Add CLANGDWARF toolchain for universal payload needs
Created a PR https://github.com/tianocore/edk2/pull/1688
Thanks,
Bob
Created a PR https://github.com/tianocore/edk2/pull/1688
Thanks,
Bob
|
By
Bob Feng
·
#76053
·
|
|
Re: [edk2-platforms PATCH v2] Platform/RaspberryPi: Enable default Secure Boot variables initialization
Internally reviewed this patch before sending the edk2 mailing list and it looks good to me.
Reviewed-by: Sunny Wang <sunny.wang@...
Internally reviewed this patch before sending the edk2 mailing list and it looks good to me.
Reviewed-by: Sunny Wang <sunny.wang@...
|
By
Sunny Wang
·
#76052
·
|
|
Re: [PATCH v2 6/6] SecurityPkg: Add option to reset secure boot keys.
Internally reviewed this patch before sending the edk2 mailing list and Greg already addressed all my comments, so It looks good to me.
Reviewed-by: Sunny Wang <sunny.wang@...>
Internally reviewed this patch before sending the edk2 mailing list and Greg already addressed all my comments, so It looks good to me.
Reviewed-by: Sunny Wang <sunny.wang@...>
|
By
Sunny Wang
·
#76051
·
|
|
Re: [PATCH v2 5/6] SecurityPkg: Add new modules to Security package.
Internally reviewed this patch before sending the edk2 mailing list and It looks good to me. Please also address Pete's good catches/comments.
Reviewed-by: Sunny Wang <sunny.wang@...>
Internally reviewed this patch before sending the edk2 mailing list and It looks good to me. Please also address Pete's good catches/comments.
Reviewed-by: Sunny Wang <sunny.wang@...>
|
By
Sunny Wang
·
#76050
·
|
|
Re: [PATCH v2 4/6] SecurityPkg: Add EnrollFromDefaultKeys application.
Internally reviewed this patch before sending the edk2 mailing list and Greg already addressed all my comments, so It looks good to me.
Reviewed-by: Sunny Wang <sunny.wang@...>
As for Bret's
Internally reviewed this patch before sending the edk2 mailing list and Greg already addressed all my comments, so It looks good to me.
Reviewed-by: Sunny Wang <sunny.wang@...>
As for Bret's
|
By
Sunny Wang
·
#76049
·
|