From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from us-smtp-1.mimecast.com (us-smtp-1.mimecast.com [207.211.31.120]) by mx.groups.io with SMTP id smtpd.web10.4665.1578398120810247457 for ; Tue, 07 Jan 2020 03:55:21 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=DSfFlzX7; spf=pass (domain: redhat.com, ip: 207.211.31.120, mailfrom: lersek@redhat.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1578398119; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=g74ttVkinreEQoGg+5lwxmF6p9S6HSpK+nkOA0I24FQ=; b=DSfFlzX7RhpqJNuOeV9oetMF5jU3zlyezhbmD53xG9SQERjFcxzsr7xGCxZtE3QHB+GDLq quD2Fvkolw6wT3+vaOe/Y76EpTGsd3TyqgYXtn0W0Uafw/TPrbSjDSPdbg/FG9dSdumW9z MxZXt17eFpHT1DLkOLqQT+SJvqqfre0= Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-37-7V43fPuDOiuuSzSv2qpnmA-1; Tue, 07 Jan 2020 06:55:10 -0500 Received: from smtp.corp.redhat.com (int-mx08.intmail.prod.int.phx2.redhat.com [10.5.11.23]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id 2D410593AE; Tue, 7 Jan 2020 11:55:09 +0000 (UTC) Received: from lacos-laptop-7.usersys.redhat.com (ovpn-117-126.ams2.redhat.com [10.36.117.126]) by smtp.corp.redhat.com (Postfix) with ESMTP id 8B2DE272AA; Tue, 7 Jan 2020 11:55:08 +0000 (UTC) Subject: Re: [PATCH 0/4] ArmVirtPkg: implement measured boot for ArmVirtQemu To: Ard Biesheuvel , devel@edk2.groups.io References: <20200107094800.4488-1-ard.biesheuvel@linaro.org> From: "Laszlo Ersek" Message-ID: Date: Tue, 7 Jan 2020 12:55:07 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <20200107094800.4488-1-ard.biesheuvel@linaro.org> X-Scanned-By: MIMEDefang 2.84 on 10.5.11.23 X-MC-Unique: 7V43fPuDOiuuSzSv2qpnmA-1 X-Mimecast-Spam-Score: 0 Content-Language: en-US Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit On 01/07/20 10:47, Ard Biesheuvel wrote: > Wire up the various existing pieces so that we can implemented measured > boot on ArmVirtQemu based on the TPM support in QEMU, just like it has > been implemented for x86 in OvmfPkg. > > The main difference is that on ARM, we first need to discover the TPM base > address from the device tree provided by QEMU, as well as the PSCI method > used to perform a cold reset, so this is added to the existing implementation > of PlatformPeiLib. > > The associated QEMU changes are under development in Linaro, and will be > sent out for review to the appropriate mailing list shortly. We usually merge firmware patches after merging the QEMU patches. Will that work for you in this case? Thanks! Laszlo > Ard Biesheuvel (4): > OvmfPkg/Tcg2ConfigPei: introduce a signalling PPI to depex on > ArmVirtPkg/PlatformPeiLib: discover the TPM base address from the DT > ArmVirtPkg/PlatformPeiLib: implement Reset2 PPI based on PSCI > ArmVirtPkg/ArmVirtQemu: add optional support for TPM2 measured boot > > ArmVirtPkg/ArmVirtPkg.dec | 5 + > OvmfPkg/OvmfPkg.dec | 4 + > ArmVirtPkg/ArmVirtQemu.dsc | 71 +++++++ > ArmVirtPkg/ArmVirtQemu.fdf | 5 + > ArmVirtPkg/Library/PlatformPeiLib/PlatformPeiLib.inf | 15 +- > OvmfPkg/Tcg/Tcg2Config/Tcg2ConfigPei.inf | 6 +- > ArmVirtPkg/Library/PlatformPeiLib/PlatformPeiLib.c | 205 +++++++++++++++++++- > ArmVirtPkg/ArmVirtQemuFvMain.fdf.inc | 10 + > 8 files changed, 308 insertions(+), 13 deletions(-) >