Re: [edk2-devel] [PATCH V1] OvmfPkg/PeilessStartupLib: Updated with PcdSecureBootSupported
Reviewed-by: Erdem Aktas On Sun, Jul 16, 2023 at 6:55 PM Yao, Jiewen wrote: > > Reviewed-by: Jiewen Yao > > > -Original Message- > > From: devel@edk2.groups.io On Behalf Of Gerd > > Hoffmann > > Sent: Monday, July 10, 2023 6:36 PM > > To: devel@edk2.groups.io; Sun, CepingX > > Cc: Aktas, Erdem ; James Bottomley > > ; Yao, Jiewen ; Xu, Min M > > ; Tom Lendacky ; Michael > > Roth > > Subject: Re: [edk2-devel] [PATCH V1] OvmfPkg/PeilessStartupLib: Updated with > > PcdSecureBootSupported > > > > On Mon, Jul 10, 2023 at 06:05:39PM +0800, sunceping wrote: > > > SECURE_BOOT_FEATURE_ENABLED was dropped by the commit(92da8a154f), > > but the > > > PeilessStartupLib was not updated with PcdSecureBootSupported, that made > > > SecureBoot no longer work in IntelTdxX64. > > > > > > Fix this by replacing SECURE_BOOT_FEATURE_ENABLED with > > > PcdSecureBootSupported in PeilessStartupLib. > > > > > > Cc: Erdem Aktas > > > Cc: James Bottomley > > > Cc: Jiewen Yao > > > Cc: Gerd Hoffmann > > > Cc: Min Xu > > > Cc: Tom Lendacky > > > Cc: Michael Roth > > > Signed-off-by: Ceping Sun > > > > Acked-by: Gerd Hoffmann > > > > > > > > > > > -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#106971): https://edk2.groups.io/g/devel/message/106971 Mute This Topic: https://groups.io/mt/100054785/21656 Group Owner: devel+ow...@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [edk2-devel] [PATCH V1] OvmfPkg/PeilessStartupLib: Updated with PcdSecureBootSupported
Reviewed-by: Jiewen Yao > -Original Message- > From: devel@edk2.groups.io On Behalf Of Gerd > Hoffmann > Sent: Monday, July 10, 2023 6:36 PM > To: devel@edk2.groups.io; Sun, CepingX > Cc: Aktas, Erdem ; James Bottomley > ; Yao, Jiewen ; Xu, Min M > ; Tom Lendacky ; Michael > Roth > Subject: Re: [edk2-devel] [PATCH V1] OvmfPkg/PeilessStartupLib: Updated with > PcdSecureBootSupported > > On Mon, Jul 10, 2023 at 06:05:39PM +0800, sunceping wrote: > > SECURE_BOOT_FEATURE_ENABLED was dropped by the commit(92da8a154f), > but the > > PeilessStartupLib was not updated with PcdSecureBootSupported, that made > > SecureBoot no longer work in IntelTdxX64. > > > > Fix this by replacing SECURE_BOOT_FEATURE_ENABLED with > > PcdSecureBootSupported in PeilessStartupLib. > > > > Cc: Erdem Aktas > > Cc: James Bottomley > > Cc: Jiewen Yao > > Cc: Gerd Hoffmann > > Cc: Min Xu > > Cc: Tom Lendacky > > Cc: Michael Roth > > Signed-off-by: Ceping Sun > > Acked-by: Gerd Hoffmann > > > > > -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#106953): https://edk2.groups.io/g/devel/message/106953 Mute This Topic: https://groups.io/mt/100054785/21656 Group Owner: devel+ow...@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [edk2-devel] [PATCH V1] OvmfPkg/PeilessStartupLib: Updated with PcdSecureBootSupported
On Mon, Jul 10, 2023 at 06:05:39PM +0800, sunceping wrote: > SECURE_BOOT_FEATURE_ENABLED was dropped by the commit(92da8a154f), but the > PeilessStartupLib was not updated with PcdSecureBootSupported, that made > SecureBoot no longer work in IntelTdxX64. > > Fix this by replacing SECURE_BOOT_FEATURE_ENABLED with > PcdSecureBootSupported in PeilessStartupLib. > > Cc: Erdem Aktas > Cc: James Bottomley > Cc: Jiewen Yao > Cc: Gerd Hoffmann > Cc: Min Xu > Cc: Tom Lendacky > Cc: Michael Roth > Signed-off-by: Ceping Sun Acked-by: Gerd Hoffmann -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#106765): https://edk2.groups.io/g/devel/message/106765 Mute This Topic: https://groups.io/mt/100054785/21656 Group Owner: devel+ow...@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[edk2-devel] [PATCH V1] OvmfPkg/PeilessStartupLib: Updated with PcdSecureBootSupported
SECURE_BOOT_FEATURE_ENABLED was dropped by the commit(92da8a154f), but the PeilessStartupLib was not updated with PcdSecureBootSupported, that made SecureBoot no longer work in IntelTdxX64. Fix this by replacing SECURE_BOOT_FEATURE_ENABLED with PcdSecureBootSupported in PeilessStartupLib. Cc: Erdem Aktas Cc: James Bottomley Cc: Jiewen Yao Cc: Gerd Hoffmann Cc: Min Xu Cc: Tom Lendacky Cc: Michael Roth Signed-off-by: Ceping Sun --- OvmfPkg/Library/PeilessStartupLib/PeilessStartup.c | 6 +++--- OvmfPkg/Library/PeilessStartupLib/PeilessStartupLib.inf | 1 + 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/OvmfPkg/Library/PeilessStartupLib/PeilessStartup.c b/OvmfPkg/Library/PeilessStartupLib/PeilessStartup.c index 164aa2d619..1632a23177 100644 --- a/OvmfPkg/Library/PeilessStartupLib/PeilessStartup.c +++ b/OvmfPkg/Library/PeilessStartupLib/PeilessStartup.c @@ -82,9 +82,9 @@ InitializePlatform ( VariableStore = PlatformReserveEmuVariableNvStore (); PlatformInfoHob->PcdEmuVariableNvStoreReserved = (UINT64)(UINTN)VariableStore; - #ifdef SECURE_BOOT_FEATURE_ENABLED - PlatformInitEmuVariableNvStore (VariableStore); - #endif + if (FeaturePcdGet (PcdSecureBootSupported)) { +PlatformInitEmuVariableNvStore (VariableStore); + } if (TdIsEnabled ()) { PlatformTdxPublishRamRegions (); diff --git a/OvmfPkg/Library/PeilessStartupLib/PeilessStartupLib.inf b/OvmfPkg/Library/PeilessStartupLib/PeilessStartupLib.inf index 7719b5031d..585d504637 100644 --- a/OvmfPkg/Library/PeilessStartupLib/PeilessStartupLib.inf +++ b/OvmfPkg/Library/PeilessStartupLib/PeilessStartupLib.inf @@ -83,3 +83,4 @@ gEfiMdeModulePkgTokenSpaceGuid.PcdNullPointerDetectionPropertyMask## CONSUMES gUefiOvmfPkgTokenSpaceGuid.PcdOvmfDxeMemFvBase gUefiOvmfPkgTokenSpaceGuid.PcdOvmfDxeMemFvSize + gUefiOvmfPkgTokenSpaceGuid.PcdSecureBootSupported -- 2.34.1 -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#106764): https://edk2.groups.io/g/devel/message/106764 Mute This Topic: https://groups.io/mt/100054785/21656 Group Owner: devel+ow...@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-