From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from bedivere.hansenpartnership.com (bedivere.hansenpartnership.com [96.44.175.130])
 by mx.groups.io with SMTP id smtpd.web09.10698.1619540928242042904
 for <devel@edk2.groups.io>;
 Tue, 27 Apr 2021 09:28:48 -0700
Authentication-Results: mx.groups.io;
 dkim=pass header.i=@hansenpartnership.com header.s=20151216 header.b=q5QX6rfR;
 spf=pass (domain: hansenpartnership.com, ip: 96.44.175.130, mailfrom: james.bottomley@hansenpartnership.com)
Received: from localhost (localhost [127.0.0.1])
	by bedivere.hansenpartnership.com (Postfix) with ESMTP id 8F20912802F9;
	Tue, 27 Apr 2021 09:28:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=hansenpartnership.com; s=20151216; t=1619540927;
	bh=sDE4OtWe978sxyQOUlZl2uKwoLN/YkkBV157BYF9iTo=;
	h=Message-ID:Subject:From:To:Date:In-Reply-To:References:From;
	b=q5QX6rfRietJG2UoQpiejmmdQ4sBR8RgW5frs6M7+PUJ6/tpm0mSIzjg0j3wTRXTK
	 /mA4rSAx8P2dfyz6hFVomszYosZES43/9mEw0BP4FPeLiz02pz+yZD3CaE9wTG3n1w
	 rkZLWRvc2f6WTuKB694BXp/wOJk8uXVXhalu7m9o=
Received: from bedivere.hansenpartnership.com ([127.0.0.1])
	by localhost (bedivere.hansenpartnership.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id oa9be2PBuy2x; Tue, 27 Apr 2021 09:28:47 -0700 (PDT)
Received: from jarvis.int.hansenpartnership.com (unknown [IPv6:2601:600:8280:66d1::527])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by bedivere.hansenpartnership.com (Postfix) with ESMTPSA id 2275212802E5;
	Tue, 27 Apr 2021 09:28:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=hansenpartnership.com; s=20151216; t=1619540927;
	bh=sDE4OtWe978sxyQOUlZl2uKwoLN/YkkBV157BYF9iTo=;
	h=Message-ID:Subject:From:To:Date:In-Reply-To:References:From;
	b=q5QX6rfRietJG2UoQpiejmmdQ4sBR8RgW5frs6M7+PUJ6/tpm0mSIzjg0j3wTRXTK
	 /mA4rSAx8P2dfyz6hFVomszYosZES43/9mEw0BP4FPeLiz02pz+yZD3CaE9wTG3n1w
	 rkZLWRvc2f6WTuKB694BXp/wOJk8uXVXhalu7m9o=
Message-ID: <b2d2468a6b4dc815ccde425f5c27ab3be088c662.camel@HansenPartnership.com>
Subject: Re: [edk2-devel] Problem: TPM 2.0 event log by OVMF is shown empty in Linux kernel versions after 5.8
From: "James Bottomley" <James.Bottomley@HansenPartnership.com>
To: devel@edk2.groups.io, thomas.lendacky@amd.com, public@thson.de
Cc: lersek@redhat.com, ardb+tianocore@kernel.org
Date: Tue, 27 Apr 2021 09:28:45 -0700
In-Reply-To: <2e82d24c-2cf2-1681-646d-3f848818ade8@amd.com>
References: <ef28092c-88a3-0726-b5d7-7b154fd344c1@thson.de>
	 <8f68431ac5e7ef1f28037856f92da8327cdfb737.camel@HansenPartnership.com>
	 <76f91d91-9eb9-3e31-b09b-3ecfc0c03a4f@thson.de>
	 <2e82d24c-2cf2-1681-646d-3f848818ade8@amd.com>
User-Agent: Evolution 3.34.4 
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit

On Tue, 2021-04-27 at 09:00 -0500, Lendacky, Thomas wrote:
> On 4/27/21 2:40 AM, Thore Sommer via groups.io wrote:
> > > I don't confirm this.  I have Linux version 5.12.0-rc5+ installed
> > > and I
> > > see the attached in my binary_bios_measurements (I've run it
> > > through
> > > tpm2-eventlog so you can see the actual events).
> > Ok that is interesting.
> > 
> > Here are the steps to reproduce my findings.
> > Necessary tools: Build chain for edk2, swtpm 0.5.2 and qemu 5.2.0
> > 
> > 1. Build OVMF from edk2-stable202102 with
> > -a X64 -a IA32 \
> > -b RELEASE \
> > -D NETWORK_IP6_ENABLE \
> > -D TPM_ENABLE \
> 
> Shouldn't you also have '-D TPM_CONFIG_ENABLE' ?

You only need that if you want the TPM configuration option for the
bios menu.  Without it the TPM should self configure ... I tried it
without and it still works for me (produces the bios log).

James