Re: [edk2-devel] [PATCH 1/1] BaseTools GenFw: Fix regression issue to convert the image to ACPI data

2021-06-04 Thread Bob Feng
Reviewed-by: Bob Feng -Original Message- From: devel@edk2.groups.io On Behalf Of gaoliming Sent: Saturday, June 5, 2021 9:19 AM To: devel@edk2.groups.io Cc: Ni, Ray ; Leif Lindholm ; Feng, Bob C Subject: [edk2-devel] [PATCH 1/1] BaseTools GenFw: Fix regression issue to convert the

回复: [edk2-devel] [PATCH v2 2/6] BaseTools GenFw: Support CLANG8ELF with conversion ELF to PE/COFF image

2021-06-04 Thread gaoliming
Ray: When convert the image to ACPI data, only data section is required. So, we can update GenFw tool not do this check when convert ACPI data. I just send the patch to update GenFw tool. This issue happens on GCC49 tool chain. So, it is not detected in open CI with GCC5 tool chain.

Re: [edk2-devel] [PATCH 1/1] BaseTools GenFw: Fix regression issue to convert the image to ACPI data

2021-06-04 Thread Ni, Ray
Cool! Thank you so much!! It answers my question that why CI cannot detect such failure because it's using GCC5+. Leif, Can you verify that this can resolve your GCC49 issue? Thanks, Ray > -Original Message- > From: devel@edk2.groups.io On Behalf Of > gaoliming > Sent: Saturday, June

Re: [edk2-devel] [PATCH v2 2/6] BaseTools GenFw: Support CLANG8ELF with conversion ELF to PE/COFF image

2021-06-04 Thread Ni, Ray
Leif, OVMF Bhyve GCC build succeeds without GenFW assertion issue. I dumped the ELF image generated for OvmfPkg/Bhyve/AcpiTables/AcpiTables. Below output shows that .text does have "AX" set: --- $ readelf -S Hpet.dll ... [ 1] .text PROGBITS 0140

[edk2-devel] [PATCH 1/1] BaseTools GenFw: Fix regression issue to convert the image to ACPI data

2021-06-04 Thread gaoliming
With GCC49 tool chain, aslc file is compiled into elf image. But, its text section has no CODE attribute. So, it can't be detected by new GenFw tool.For this type file. its text section is not required. Its data section will be converted to acpi table. This fix is to remove assert check when the

Re: [edk2-devel] [PATCH v2 2/6] BaseTools GenFw: Support CLANG8ELF with conversion ELF to PE/COFF image

2021-06-04 Thread Ni, Ray
Leif, Sorry to hear that. It seems a CI gap that doesn't capture such errors. It looks like the logic update to detect .text section doesn't work in your case. I am trying to build the OVMF Bhyve because I saw it contains an AcpiTables module that has .aslc file. Thanks, Ray > -Original

Re: [edk2-devel] [edk2-platforms][PATCH v2 14/32] AmpereAltraPkg: Add PcieCoreLib library instance

2021-06-04 Thread Leif Lindholm
On Wed, May 26, 2021 at 17:07:06 +0700, Nhi Pham wrote: > From: Vu Nguyen > > Provides essential functions to initialize the PCIe Root Complex of > Ampere Altra processor. > > Cc: Thang Nguyen > Cc: Chuong Tran > Cc: Phong Vo > Cc: Leif Lindholm > Cc: Michael D Kinney > Cc: Ard Biesheuvel

Re: [edk2-devel] [edk2-platforms][PATCH v2 12/32] AmperePlatformPkg: Add AcpiHelperLib to update ACPI DSDT table

2021-06-04 Thread Leif Lindholm
On Wed, May 26, 2021 at 17:07:04 +0700, Nhi Pham wrote: > The AcpiHelperLib provides functions to update the ACPI DSDT table after > this table is installed. > > Cc: Thang Nguyen > Cc: Chuong Tran > Cc: Phong Vo > Cc: Leif Lindholm > Cc: Michael D Kinney > Cc: Ard Biesheuvel > Cc: Nate

Re: [edk2-devel] [edk2-platforms][PATCH v2 11/32] AmperePlatformPkg: Add AcpiPccLib to support ACPI PCCT Table

2021-06-04 Thread Leif Lindholm
On Wed, May 26, 2021 at 17:07:03 +0700, Nhi Pham wrote: > The AcpiPccLib provides functions to allocate and get the physical > address of PCC shared memory. > > Cc: Thang Nguyen > Cc: Chuong Tran > Cc: Phong Vo > Cc: Leif Lindholm > Cc: Michael D Kinney > Cc: Ard Biesheuvel > Cc: Nate

Re: [edk2-devel] [edk2-platforms][PATCH v2 10/32] AmpereSiliconPkg: Add PlatformManagerUiLib library instance

2021-06-04 Thread Leif Lindholm
On Wed, May 26, 2021 at 17:07:02 +0700, Nhi Pham wrote: > From: Vu Nguyen > > The idea came from DeviceManagerUiLib that all related menu settings can be > placed under a common entry. This change intends to provide a central point > for all platform menus by creating a Platform Manager entry

Re: [edk2-devel] [edk2-platforms][PATCH v2 09/32] AmpereAltraPkg: Support non-volatile variables

2021-06-04 Thread Leif Lindholm
On Wed, May 26, 2021 at 17:07:01 +0700, Nhi Pham wrote: > From: Vu Nguyen > > Non-volatile variables now can be stored on flash. MM communication > protocol is used to access storage on flash. > > Included in this change are: > * FlashPei module is used to compare saved UUID with firmware's >

Re: [edk2-devel] [edk2-platforms][PATCH v2 08/32] AmpereAltraPkg: Add BootProgress support

2021-06-04 Thread Leif Lindholm
On Wed, May 26, 2021 at 17:07:00 +0700, Nhi Pham wrote: > From: Quan Nguyen > > BootProgress will send 32-bit UEFI Status Code via doorbell to report > its progress status. > Currently support reporting Progress Status Code and Error Status Code > only. Other types of Status Code are ignored.

Re: [edk2-devel] [edk2-platforms][PATCH v2 07/32] JadePkg: Implement RealTimeClockLib for PCF85063

2021-06-04 Thread Leif Lindholm
On Wed, May 26, 2021 at 17:06:59 +0700, Nhi Pham wrote: > From: Vu Nguyen > > This library adds the support for retrieving and updating system > datetime over real RTC PCF85063 device on Mt. Jade platform instead of > using virtual RTC. > > Cc: Thang Nguyen > Cc: Chuong Tran > Cc: Phong Vo >

Re: [edk2-devel] [edk2-platforms][PATCH v2 06/32] AmpereAltraPkg: Add DwGpioLib library

2021-06-04 Thread Leif Lindholm
On Wed, May 26, 2021 at 17:06:58 +0700, Nhi Pham wrote: > From: Vu Nguyen > > The DwGpioLib library provides basic functions to control the GPIO > controller on Ampere Altra processor. > > Cc: Thang Nguyen > Cc: Chuong Tran > Cc: Phong Vo > Cc: Leif Lindholm > Cc: Michael D Kinney > Cc:

Re: [edk2-devel] [edk2-platforms][PATCH v2 05/32] AmpereAltraPkg: Add DwI2cLib library

2021-06-04 Thread Leif Lindholm
On Wed, May 26, 2021 at 17:06:57 +0700, Nhi Pham wrote: > From: Vu Nguyen > > The DwI2cLib library provides basic functions to control the I2C > controller on Ampere Altra processor. > > Cc: Thang Nguyen > Cc: Chuong Tran > Cc: Phong Vo > Cc: Leif Lindholm > Cc: Michael D Kinney > Cc: Ard

Re: [edk2-devel] [edk2-platforms][PATCH v2 04/32] AmperePlatformPkg: Add FailSafe and WDT support

2021-06-04 Thread Leif Lindholm
On Wed, May 26, 2021 at 17:06:56 +0700, Nhi Pham wrote: > The FailSafeDxe driver reverts the system's configuration to known good > values if the system fails to boot up multiple times. It also implements > the Watchdog Timer Architectural Protocol to reset the system if it > hangs. > > By

Re: [edk2-devel] [edk2-platforms][PATCH v2 03/32] AmperePlatformPkg: Implement FailSafe library

2021-06-04 Thread Leif Lindholm
On Wed, May 26, 2021 at 17:06:55 +0700, Nhi Pham wrote: > The Ampere Altra System Firmware provides a fail-safe feature to help > recover the system if there are setting changes such as Core voltage, > DRAM parameters that cause the UEFI failed to boot. > > The FailSafeLib supports API calls to

Re: [edk2-devel] [edk2-platforms][PATCH v2 02/32] AmpereAltraPkg: Add MmCommunication modules

2021-06-04 Thread Leif Lindholm
On Wed, May 26, 2021 at 17:06:54 +0700, Nhi Pham wrote: > From: Vu Nguyen > > The MmCommunicationDxe module is derived from > ArmPkg/Drivers/MmCommunicationDxe/MmCommunication.inf. > > The MmCommunication PEI and DXE modules implement the MM Communication > protocol

Re: [edk2-devel] [edk2-platforms][PATCH v2 01/32] Ampere: Initial support for Ampere Altra processor and Mt. Jade platform

2021-06-04 Thread Leif Lindholm
On Wed, May 26, 2021 at 17:06:52 +0700, Nhi Pham wrote: > From: Vu Nguyen > > This commit adds the support for Ampere’s Altra processor-based Mt. Jade > platform that provides up to 160 processor cores in a dual socket > configuration. The essential modules are wired up enough to boot system >

Re: [edk2-devel] [PATCH 00/43] OvmfPkg: remove Xen support from OvmfPkg*.dsc, in favor of OvmfXen.dsc

2021-06-04 Thread Laszlo Ersek
On 06/04/21 16:02, Anthony PERARD via groups.io wrote: > On Wed, Jun 02, 2021 at 10:36:49AM +0200, Laszlo Ersek wrote: >> Anthony, Julien, >> >> (or anyone else subscribed to xen-devel -- CC'd now), >> >> On 05/26/21 22:14, Laszlo Ersek wrote: >>> Bugzilla:

Re: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF

2021-06-04 Thread James Bottomley
On Fri, 2021-06-04 at 15:52 +0100, Michael Brown wrote: > On 04/06/2021 11:43, Michael Brown wrote: > > On 04/06/2021 11:11, Laszlo Ersek wrote: > > > And, to reiterate, just because Confidential Computing is the > > > new hot thing, the use cases for OvmfPkgIa32, OvmfPkgIa32X64, > > > OvmfPkgX64

Re: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF

2021-06-04 Thread Michael Brown
On 04/06/2021 11:43, Michael Brown wrote: On 04/06/2021 11:11, Laszlo Ersek wrote: And, to reiterate, just because Confidential Computing is the new hot thing, the use cases for OvmfPkgIa32, OvmfPkgIa32X64, OvmfPkgX64 do not disappear. Regressing them, or making them unmaintainable due to

Re: [edk2-devel] [PATCH 00/43] OvmfPkg: remove Xen support from OvmfPkg*.dsc, in favor of OvmfXen.dsc

2021-06-04 Thread Laszlo Ersek
On 06/04/21 16:02, Anthony PERARD wrote: > On Wed, Jun 02, 2021 at 10:36:49AM +0200, Laszlo Ersek wrote: >> Anthony, Julien, >> >> (or anyone else subscribed to xen-devel -- CC'd now), >> >> On 05/26/21 22:14, Laszlo Ersek wrote: >>> Bugzilla: https://bugzilla.tianocore.org/show_bug.cgi?id=2122

Re: [edk2-devel] [PATCH RFC v3 03/22] OvmfPkg/MemEncryptSevLib: extend the workarea to include SNP enabled field

2021-06-04 Thread Laszlo Ersek
On 05/27/21 01:10, Brijesh Singh wrote: > BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3275 > > Extend the workarea to include the SEV-SNP enabled fields. This will be set > when SEV-SNP is active in the guest VM. > > Cc: James Bottomley > Cc: Min Xu > Cc: Jiewen Yao > Cc: Tom Lendacky

Re: [edk2-devel] [PATCH 00/43] OvmfPkg: remove Xen support from OvmfPkg*.dsc, in favor of OvmfXen.dsc

2021-06-04 Thread Anthony PERARD via groups.io
On Wed, Jun 02, 2021 at 10:36:49AM +0200, Laszlo Ersek wrote: > Anthony, Julien, > > (or anyone else subscribed to xen-devel -- CC'd now), > > On 05/26/21 22:14, Laszlo Ersek wrote: > > Bugzilla: https://bugzilla.tianocore.org/show_bug.cgi?id=2122 > > Repo: https://pagure.io/lersek/edk2.git

Re: [edk2-devel] [edk2-platforms][PATCH v2 00/32] Add new Ampere Mt. Jade platform

2021-06-04 Thread Leif Lindholm
Hi Nhi, Apologies, this dragged out a bit longer than I intended. Some high-level comments before I get into the contents: In order to build this against current upstream, I needed to go back to edk2 commit c1aa3bab1259 ("BaseTools: Add ClangBase.lds for CLANG8 tool chain with max-page-size")

Re: [edk2-devel] [PATCH RFC v3 02/22] OvmfPkg/MemEncryptSevLib: add MemEncryptSevSnpEnabled()

2021-06-04 Thread Laszlo Ersek
On 05/27/21 01:10, Brijesh Singh wrote: > BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3275 > > Create a function that can be used to determine if VM is running as an > SEV-SNP guest. > > Cc: James Bottomley > Cc: Min Xu > Cc: Jiewen Yao > Cc: Tom Lendacky > Cc: Jordan Justen > Cc:

Re: [edk2-devel] [edk2-non-osi][PATCH v3 0/2] Introduce Silicon/Ampere and AmpereAltraBinPkg package

2021-06-04 Thread Leif Lindholm
Hi Vu, For this set: Reviewed-by: Leif Lindholm Is there any value to you in me pushing this before the edk2-platforms set goes in? If not, I'll hold back and push them both at the same time. Best Regards, Leif On Wed, May 26, 2021 at 17:18:28 +0700, Vu Nguyen wrote: > Create edk2-non-osi

Re: [edk2-devel] [PATCH v2 2/6] BaseTools GenFw: Support CLANG8ELF with conversion ELF to PE/COFF image

2021-06-04 Thread Leif Lindholm
Hi Ray, On Wed, Jun 02, 2021 at 16:11:41 +0800, Ni, Ray wrote: > From: Liming Gao > > CLANG8ELF tool chain generated ELF image with the different attributes > in section. Update GenFw to handle them. > 1. .text section with writable attribute (support) > 2. .reloc section has the symbol for

Re: [edk2-devel] [RESEND PATCH RFC v3 00/22] Add AMD Secure Nested Paging (SEV-SNP) support

2021-06-04 Thread Laszlo Ersek
On 06/04/21 13:50, Brijesh Singh wrote: > Hi Laszlo, > > On 6/4/21 4:32 AM, Laszlo Ersek wrote: >> Hi Brijesh, >> >> On 05/27/21 01:10, Brijesh Singh wrote: >>> (I missed adding devel@edk2.groups.io, resending the series) >>> >>> BZ: >>>

Re: [edk2-devel] [RESEND PATCH RFC v3 00/22] Add AMD Secure Nested Paging (SEV-SNP) support

2021-06-04 Thread Brijesh Singh via groups.io
Hi Laszlo, On 6/4/21 4:32 AM, Laszlo Ersek wrote: > Hi Brijesh, > > On 05/27/21 01:10, Brijesh Singh wrote: >> (I missed adding devel@edk2.groups.io, resending the series) >> >> BZ: >>

Re: [edk2-devel] [PATCH v1 0/8] Measured SEV boot with kernel/initrd/cmdline

2021-06-04 Thread Laszlo Ersek
On 06/04/21 12:30, Dov Murik wrote: > So I argue to keep the existing approach with two separate areas: > existing one for injected secrets, and new one for a table of approved > hashes (filled by QEMU and updated as initial encrypted measured guest > memory). OK. > If the issue is MEMFD space,

Re: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF

2021-06-04 Thread Michael Brown
On 04/06/2021 11:11, Laszlo Ersek wrote: And, to reiterate, just because Confidential Computing is the new hot thing, the use cases for OvmfPkgIa32, OvmfPkgIa32X64, OvmfPkgX64 do not disappear. Regressing them, or making them unmaintainable due to skyrocketing complexity, is not acceptable.

Re: [edk2-devel] [PATCH v1 0/8] Measured SEV boot with kernel/initrd/cmdline

2021-06-04 Thread Dov Murik
Thank you Laszlo for reviewing this. On 01/06/2021 15:11, Laszlo Ersek wrote: > Ard, > > I'll have a specific question for you below; please feel free to jump > forward (search for your name). Thanks. > > Dov, my comments below: > > On 05/25/21 07:31, Dov Murik wrote: >> Booting with SEV

Re: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF

2021-06-04 Thread Yao, Jiewen
thank you Laszlo. Your feedback is received. I am waiting for comment from other people. thank you! Yao, Jiewen > 在 2021年6月4日,下午6:11,Laszlo Ersek 写道: > > On 06/04/21 01:19, Yao, Jiewen wrote: >> Hi Laszlo. >> >> To clarify your "one binary" feedback below, do you mean you suggest A) >>

Re: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF

2021-06-04 Thread Laszlo Ersek
On 06/04/21 01:19, Yao, Jiewen wrote: > Hi Laszlo. > > To clarify your "one binary" feedback below, do you mean you suggest A) > create a separate DSC (for example OvmfPkg/ConfidentialComputing.dsc) for a > full solution including AMD SEC + Intel TDX + NonConfidentialComputing? > Or B) to

[edk2-devel] [Patch V3 9/9] UefiPayloadPkg: Creat gPldAcpiTableGuid Hob

2021-06-04 Thread Zhiguang Liu
>From SysTableInfo Hob, get ACPI table address, and creat gPldAcpiTableGuid Hob to store it. Remove diretly adding ACPI table to ConfigurationTable. Dxe ACPI driver will parse it and install ACPI table from Guid Hob. Cc: Maurice Ma Cc: Guo Dong Cc: Benjamin You Cc: Ray Ni Signed-off-by:

[edk2-devel] [Patch V3 6/9] UefiPayloadPkg: Creat gPldSmbiosTableGuid Hob

2021-06-04 Thread Zhiguang Liu
>From SysTableInfo Hob, get Smbios table address, and creat gPldSmbiosTableGuid >Hob to store it. Remove diretly adding smbios table to ConfigurationTable. Dxe module SmbiosDxe will parse it and install smbios table from it. Cc: Maurice Ma Cc: Guo Dong Cc: Benjamin You Reviewed-by: Guo Dong

[edk2-devel] [Patch V3 5/9] MdeModulePkg/Universal/SmbiosDxe: Scan for existing tables

2021-06-04 Thread Zhiguang Liu
V1: The default EfiSmbiosProtocol operates on an empty SMBIOS table. The SMBIOS tables are provided by the bootloader on UefiPayloadPkg. Scan for existing tables in SmbiosDxe and load them if they seem valid. This fixes the settings menu not showing any hardware information, instead only "0 MB

[edk2-devel] [Patch V3 8/9] MdeModulePkg/ACPI: Install ACPI table from HOB.

2021-06-04 Thread Zhiguang Liu
V1: If HOB contains APCI table information, entry point of AcpiTableDxe.inf should parse the APCI table from HOB, and install these tables. We assume the whole ACPI table (starting with EFI_ACPI_2_0_ROOT_SYSTEM_DESCRIPTION_POINTER) is contained by a single gEfiAcpiTableGuid HOB. V2: If error

[edk2-devel] [Patch V3 4/9] MdeModulePkg: Add new structure for the Universal Payload SMBios Table Info Hob

2021-06-04 Thread Zhiguang Liu
Cc: Michael D Kinney Cc: Liming Gao Cc: Jian J Wang Cc: Hao A Wu Signed-off-by: Zhiguang Liu --- MdeModulePkg/Include/UniversalPayload/SmbiosTable.h | 28 MdeModulePkg/MdeModulePkg.dec | 6 ++ 2 files changed, 34 insertions(+) diff

[edk2-devel] [Patch V3 7/9] MdeModulePkg: Add new structure for the Universal Payload ACPI Table Info Hob

2021-06-04 Thread Zhiguang Liu
Cc: Michael D Kinney Cc: Liming Gao Cc: Jian J Wang Cc: Hao A Wu Signed-off-by: Zhiguang Liu --- MdeModulePkg/Include/UniversalPayload/AcpiTable.h | 28 MdeModulePkg/MdeModulePkg.dec | 3 +++ 2 files changed, 31 insertions(+) diff --git

[edk2-devel] [Patch V3 3/9] UefiPayloadPkg: UefiPayload retrieve PCI root bridge from Guid Hob

2021-06-04 Thread Zhiguang Liu
UefiPayload parse gPldPciRootBridgeInfoGuid Guid Hob to retrieve PCI root bridges information. gPldPciRootBridgeInfoGuid Guid Hob should be created by Bootloader. Cc: Maurice Ma Cc: Guo Dong Cc: Benjamin You Signed-off-by: Zhiguang Liu ---

[edk2-devel] [Patch V3 0/9] Create multiple Hobs for Universal Payload

2021-06-04 Thread Zhiguang Liu
V1: This patch set is based on Universal Payload on https://universalpayload.github.io/documentation/payload-interfaces/index.html This patch set introduce one general header, three different hob types and how Universal Payload consume these hobs. V2: Move all the header files and Guid define

[edk2-devel] [Patch V3 2/9] MdeModulePkg: Add new structure for the PCI Root Bridge Info Hob

2021-06-04 Thread Zhiguang Liu
Cc: Michael D Kinney Cc: Liming Gao Cc: Jian J Wang Cc: Hao A Wu Signed-off-by: Zhiguang Liu --- MdeModulePkg/Include/UniversalPayload/PciRootBridges.h | 89 + MdeModulePkg/MdeModulePkg.dec

[edk2-devel] [Patch V3 1/9] MdeModulePkg: Add Universal Payload general defination header file

2021-06-04 Thread Zhiguang Liu
V1: Add Universal Payload general defination header file according to Universal Payload’s documentation V2: Add a macro funtion to check the Revision Cc: Michael D Kinney Cc: Liming Gao Cc: Jian J Wang Cc: Hao A Wu Signed-off-by: Zhiguang Liu ---

Re: [edk2-devel] [RESEND PATCH RFC v3 00/22] Add AMD Secure Nested Paging (SEV-SNP) support

2021-06-04 Thread Laszlo Ersek
Hi Brijesh, On 05/27/21 01:10, Brijesh Singh wrote: > (I missed adding devel@edk2.groups.io, resending the series) > > BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3275 > > SEV-SNP builds upon existing SEV and SEV-ES functionality while adding > new hardware-based memory protections.

Re: [edk2-devel] [PATCH v2 0/6] Add CLANGDWARF toolchain for universal payload needs

2021-06-04 Thread Bob Feng
Created a PR https://github.com/tianocore/edk2/pull/1688 Thanks, Bob -Original Message- From: devel@edk2.groups.io On Behalf Of gaoliming Sent: Friday, June 4, 2021 1:42 PM To: devel@edk2.groups.io; Ni, Ray Subject: 回复: [edk2-devel] [PATCH v2 0/6] Add CLANGDWARF toolchain for universal

Re: [edk2-devel] [edk2-platforms PATCH v2] Platform/RaspberryPi: Enable default Secure Boot variables initialization

2021-06-04 Thread Sunny Wang
Internally reviewed this patch before sending the edk2 mailing list and it looks good to me. Reviewed-by: Sunny Wang Sent: Tuesday, June 1, 2021 9:12 PM To: devel@edk2.groups.io Cc: l...@nuviainc.com; ardb+tianoc...@kernel.org; Samer El-Haj-Mahmoud ; Sunny Wang ; m...@semihalf.com;

Re: [edk2-devel] [PATCH v2 6/6] SecurityPkg: Add option to reset secure boot keys.

2021-06-04 Thread Sunny Wang
Internally reviewed this patch before sending the edk2 mailing list and Greg already addressed all my comments, so It looks good to me. Reviewed-by: Sunny Wang -Original Message- From: Grzegorz Bernacki Sent: Tuesday, June 1, 2021 9:12 PM To: devel@edk2.groups.io Cc: l...@nuviainc.com;

Re: [edk2-devel] [PATCH v2 5/6] SecurityPkg: Add new modules to Security package.

2021-06-04 Thread Sunny Wang
Internally reviewed this patch before sending the edk2 mailing list and It looks good to me. Please also address Pete's good catches/comments. Reviewed-by: Sunny Wang -Original Message- From: Grzegorz Bernacki Sent: Tuesday, June 1, 2021 9:12 PM To: devel@edk2.groups.io Cc:

Re: [edk2-devel] [PATCH v2 4/6] SecurityPkg: Add EnrollFromDefaultKeys application.

2021-06-04 Thread Sunny Wang
Internally reviewed this patch before sending the edk2 mailing list and Greg already addressed all my comments, so It looks good to me. Reviewed-by: Sunny Wang As for Bret's comment, the "#define FAIL(fmt...).. " was added for addressing my internal review comment for better maintenance. If

Re: [edk2-devel] [PATCH v2 0/6] Secure Boot default keys

2021-06-04 Thread Min Xu
Grzegorz Have you built this feature with different tool chains, such as VS2017/VS2019/GCC5? And test it in IA32/X64/AARCH64? Would you post your test result in the mail? Thanks much! > -Original Message- > From: Grzegorz Bernacki > Sent: Tuesday, June 1, 2021 9:12 PM > To:

Re: [edk2-devel] [PATCH v2 3/6] SecurityPkg: Add SecureBootDefaultKeysDxe driver

2021-06-04 Thread Sunny Wang
Internally reviewed this patch before sending the edk2 mailing list and It looks good to me. Please also address Pete's good catches/comments. Reviewed-by: Sunny Wang -Original Message- From: Grzegorz Bernacki Sent: Tuesday, June 1, 2021 9:12 PM To: devel@edk2.groups.io Cc:

Re: [edk2-devel] [PATCH v2 2/6] SecurityPkg: Create include file for default key content.

2021-06-04 Thread Sunny Wang
Internally reviewed this patch before sending the edk2 mailing list and It looks good to me. Please also address Min M's good catch/comment. Reviewed-by: Sunny Wang Hi Laszlo, if you have time, I think you can still review this patch because this patch is a simple one and is based on your

Re: [edk2-devel] [PATCH v2 5/6] SecurityPkg: Add new modules to Security package.

2021-06-04 Thread Min Xu
On June 1, 2021 9:12 PM, Grzegorz Bernacki Wrote: > This commits adds modules related to initialization and usage of default > Secure Boot key variables to SecurityPkg. > > Signed-off-by: Grzegorz Bernacki > --- > SecurityPkg/SecurityPkg.dec | 14 ++ > SecurityPkg/SecurityPkg.dsc |

Re: [edk2-devel] [PATCH v2 3/6] SecurityPkg: Add SecureBootDefaultKeysDxe driver

2021-06-04 Thread Min Xu
On June 1, 2021 9:12 PM, Grzegorz Bernacki Wrote: > This driver initializes default Secure Boot keys and databases based on keys > embedded in flash. > > Signed-off-by: Grzegorz Bernacki > --- > > SecurityPkg/VariableAuthenticated/SecureBootDefaultKeysDxe/SecureBootD > efaultKeysDxe.inf | 46

Re: [edk2-devel] [PATCH v2 1/6] SecurityPkg: Create library for setting Secure Boot variables.

2021-06-04 Thread Sunny Wang
Internally reviewed this patch before sending the edk2 mailing list and Greg already addressed all my comments, so It looks good to me. Please also address Bret and Min M's good catches/comments. Moreover, for Bret's comment about CreateTimeBasedPayload (), I think we only missed one instance

Re: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF

2021-06-04 Thread Min Xu
On 06/04/2021 12:12 AM, Laszlo wrote: > On 06/03/21 15:51, Yao, Jiewen wrote: > > Hi, All > > We plan to do a design review for TDVF in OVMF package. > > > > > > The TDVF Design slides for TinaoCore Design Review Meeting (Jun 11) is > > now available in blow link: > >