Branch: refs/heads/master
Home: https://github.com/tianocore/edk2
Commit: fb008dbe01f9d30bba4ff84f1825722644da40be
https://github.com/tianocore/edk2/commit/fb008dbe01f9d30bba4ff84f1825722644da40be
Author: Min M Xu <[email protected]>
Date: 2022-09-06 (Tue, 06 Sep 2022)
Changed paths:
M EmbeddedPkg/Include/Library/PrePiLib.h
M EmbeddedPkg/Library/PrePiMemoryAllocationLib/MemoryAllocationLib.c
Log Message:
-----------
EmbeddedPkg: Add AllocateRuntimePages in PrePiMemoryAllocationLib
AllocateRuntimePages is used to allocate one or more 4KB pages of
type EfiRuntimeServicesData.
Cc: Leif Lindholm <[email protected]>
Cc: Ard Biesheuvel <[email protected]>
Cc: Abner Chang <[email protected]>
Cc: Daniel Schaefer <[email protected]>
Cc: Gerd Hoffmann <[email protected]>
Reviewed-by: Ard Biesheuvel <[email protected]>
Acked-by: Gerd Hoffmann <[email protected]>
Signed-off-by: Min Xu <[email protected]>
Commit: 0e72e8762a547eae7b0a463bb099d6fbbc9557cd
https://github.com/tianocore/edk2/commit/0e72e8762a547eae7b0a463bb099d6fbbc9557cd
Author: Min M Xu <[email protected]>
Date: 2022-09-06 (Tue, 06 Sep 2022)
Changed paths:
M OvmfPkg/Library/PeilessStartupLib/IntelTdx.c
M OvmfPkg/Library/PeilessStartupLib/PeilessStartup.c
M OvmfPkg/Library/PeilessStartupLib/PeilessStartupInternal.h
Log Message:
-----------
OvmfPkg/PeilessStartupLib: Delete TdxValidateCfv
TdxValidateCfv is used to validate the integrity of FlashNvVarStore
(PcdOvmfFlashNvStorageVariableBase) and it is not Tdx specific.
So it will be moved to PlatformInitLib and be renamed to
PlatformValidateNvVarStore in the following patch. And it will be called
before EmuVaribleNvStore is initialized with the content in
FlashNvVarStore.
Cc: Erdem Aktas <[email protected]>
Cc: James Bottomley <[email protected]>
Cc: Jiewen Yao <[email protected]>
Cc: Tom Lendacky <[email protected]>
Cc: Gerd Hoffmann <[email protected]>
Acked-by: Gerd Hoffmann <[email protected]>
Signed-off-by: Min Xu <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Commit: 4f173db8b45b97563e83847cdff45e6690561482
https://github.com/tianocore/edk2/commit/4f173db8b45b97563e83847cdff45e6690561482
Author: Min M Xu <[email protected]>
Date: 2022-09-06 (Tue, 06 Sep 2022)
Changed paths:
M OvmfPkg/Include/Library/PlatformInitLib.h
M OvmfPkg/Library/PlatformInitLib/Platform.c
M OvmfPkg/Library/PlatformInitLib/PlatformInitLib.inf
Log Message:
-----------
OvmfPkg/PlatformInitLib: Add functions for EmuVariableNvStore
There are 3 functions added for EmuVariableNvStore:
- PlatformReserveEmuVariableNvStore
- PlatformInitEmuVariableNvStore
- PlatformValidateNvVarStore
PlatformReserveEmuVariableNvStore allocate storage for NV variables early
on so it will be at a consistent address.
PlatformInitEmuVariableNvStore copies the content in
PcdOvmfFlashNvStorageVariableBase to the storage allocated by
PlatformReserveEmuVariableNvStore. This is used in the case that OVMF is
launched with -bios parameter. Because in that situation UEFI variables
will be partially emulated, and non-volatile variables may lose their
contents after a reboot. This makes the secure boot feature not working.
PlatformValidateNvVarStore is renamed from TdxValidateCfv and it is used
to validate the integrity of FlashNvVarStore
(PcdOvmfFlashNvStorageVariableBase). It should be called before
PlatformInitEmuVariableNvStore is called to copy over the content.
Cc: Erdem Aktas <[email protected]>
Cc: James Bottomley <[email protected]>
Cc: Jiewen Yao <[email protected]>
Cc: Tom Lendacky <[email protected]>
Cc: Gerd Hoffmann <[email protected]>
Acked-by: Gerd Hoffmann <[email protected]>
Signed-off-by: Min Xu <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Commit: 58eb8517ad7b56574f8f04b770a59a9cbed796c4
https://github.com/tianocore/edk2/commit/58eb8517ad7b56574f8f04b770a59a9cbed796c4
Author: Min M Xu <[email protected]>
Date: 2022-09-06 (Tue, 06 Sep 2022)
Changed paths:
M OvmfPkg/PlatformPei/Platform.c
Log Message:
-----------
OvmfPkg/PlatformPei: Update ReserveEmuVariableNvStore
ReserveEmuVariableNvStore is updated with below 2 functions defined in
PlatformInitLib:
- PlatformReserveEmuVariableNvStore
- PlatformInitEmuVariableNvStore
PlatformInitEmuVariableNvStore works when secure boot feature is enabled.
This is because secure boot needs the EFI variables (PK/KEK/DB/DBX, etc)
and EmuVariableNvStore is cleared when OVMF is launched with -bios
parameter.
Cc: Erdem Aktas <[email protected]>
Cc: James Bottomley <[email protected]>
Cc: Jiewen Yao <[email protected]>
Cc: Tom Lendacky <[email protected]>
Cc: Gerd Hoffmann <[email protected]>
Acked-by: Gerd Hoffmann <[email protected]>
Signed-off-by: Min Xu <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Commit: ee91d9ef2493a96a4886c4a94651718c8c708401
https://github.com/tianocore/edk2/commit/ee91d9ef2493a96a4886c4a94651718c8c708401
Author: Min M Xu <[email protected]>
Date: 2022-09-06 (Tue, 06 Sep 2022)
Changed paths:
M OvmfPkg/Library/PeilessStartupLib/PeilessStartup.c
Log Message:
-----------
OvmfPkg: Reserve and init EmuVariableNvStore in Pei-less Startup
EmuVariableNvStore is reserved and init with below 2 functions defined in
PlatformInitLib:
- PlatformReserveEmuVariableNvStore
- PlatformInitEmuVariableNvStore
PlatformInitEmuVariableNvStore works when secure boot feature is enabled.
This is because secure boot needs the EFI variables (PK/KEK/DB/DBX, etc)
and EmuVariableNvStore is cleared when OVMF is launched with -bios
parameter.
Cc: Erdem Aktas <[email protected]>
Cc: James Bottomley <[email protected]>
Cc: Jiewen Yao <[email protected]>
Cc: Tom Lendacky <[email protected]>
Cc: Gerd Hoffmann <[email protected]>
Acked-by: Gerd Hoffmann <[email protected]>
Signed-off-by: Min Xu <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Commit: 70165fa6e2820e4a5d33737bc490b6241b9ac018
https://github.com/tianocore/edk2/commit/70165fa6e2820e4a5d33737bc490b6241b9ac018
Author: Min M Xu <[email protected]>
Date: 2022-09-06 (Tue, 06 Sep 2022)
Changed paths:
M OvmfPkg/Library/NvVarsFileLib/NvVarsFileLib.c
Log Message:
-----------
OvmfPkg/NvVarsFileLib: Shortcut ConnectNvVarsToFileSystem in secure-boot
OvmfPkg/Library/NvVarsFileLib allows loading variables into emulated
varstore from a on-disk NvVars file. We can't allow that when secure
boot is active. So check secure-boot feature and shortcut the
ConnectNvVarsToFileSystem() function when sb is enabled.
Cc: Erdem Aktas <[email protected]>
Cc: James Bottomley <[email protected]>
Cc: Jiewen Yao <[email protected]>
Cc: Tom Lendacky <[email protected]>
Cc: Gerd Hoffmann <[email protected]>
Suggested-by: Gerd Hoffmann <[email protected]>
Acked-by: Gerd Hoffmann <[email protected]>
Signed-off-by: Min Xu <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Commit: 3abaa281d35857cd83f9ba3fe2c5638d26388b95
https://github.com/tianocore/edk2/commit/3abaa281d35857cd83f9ba3fe2c5638d26388b95
Author: Min M Xu <[email protected]>
Date: 2022-09-06 (Tue, 06 Sep 2022)
Changed paths:
M OvmfPkg/TdxDxe/TdxDxe.c
M OvmfPkg/TdxDxe/TdxDxe.inf
Log Message:
-----------
OvmfPkg/TdxDxe: Set PcdEmuVariableNvStoreReserved
Set PcdEmuVariableNvStoreReserved with the value in PlatformInfoHob. It
is the address of the EmuVariableNvStore reserved in Pei-less startup.
Cc: Erdem Aktas <[email protected]>
Cc: James Bottomley <[email protected]>
Cc: Jiewen Yao <[email protected]>
Cc: Tom Lendacky <[email protected]>
Cc: Gerd Hoffmann <[email protected]>
Acked-by: Gerd Hoffmann <[email protected]>
Signed-off-by: Min Xu <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Commit: 39596c41c82d9472f8a9f448b435e77afccc23a5
https://github.com/tianocore/edk2/commit/39596c41c82d9472f8a9f448b435e77afccc23a5
Author: Min M Xu <[email protected]>
Date: 2022-09-06 (Tue, 06 Sep 2022)
Changed paths:
M OvmfPkg/CloudHv/CloudHvX64.dsc
M OvmfPkg/IntelTdx/IntelTdxX64.dsc
M OvmfPkg/OvmfPkgIa32.dsc
M OvmfPkg/OvmfPkgIa32X64.dsc
M OvmfPkg/OvmfPkgX64.dsc
Log Message:
-----------
OvmfPkg: Add build-flag SECURE_BOOT_FEATURE_ENABLED
SECURE_BOOT_FEATURE_ENABLED is the build-flag defined when secure boot
is enabled. Currently this flag is used in below lib:
- OvmfPkg/PlatformPei
- PeilessStartupLib
So it is defined in below 5 .dsc
- OvmfPkg/CloudHv/CloudHvX64.dsc
- OvmfPkg/IntelTdx/IntelTdxX64.dsc
- OvmfPkg/OvmfPkgIa32.dsc
- OvmfPkg/OvmfPkgIa32X64.dsc
- OvmfPkg/OvmfPkgX64.dsc
Cc: Erdem Aktas <[email protected]>
Cc: James Bottomley <[email protected]>
Cc: Jiewen Yao <[email protected]>
Cc: Tom Lendacky <[email protected]>
Cc: Gerd Hoffmann <[email protected]>
Acked-by: Gerd Hoffmann <[email protected]>
Signed-off-by: Min Xu <[email protected]>
Reviewed-by: Jiewen Yao <[email protected]>
Compare: https://github.com/tianocore/edk2/compare/7cc7c5267068...39596c41c82d
_______________________________________________
edk2-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/edk2-commits
