[PATCH 3/3] verifiers: Add TPM documentation

2018-11-09 Thread Matthew Garrett
Describe the behaviour of grub when the TPM module is in use. --- docs/grub.texi | 38 ++ 1 file changed, 38 insertions(+) diff --git a/docs/grub.texi b/docs/grub.texi index 471d97c95..6bd3783a4 100644 --- a/docs/grub.texi +++ b/docs/grub.texi @@ -5545,6 +5545,

[PATCH 1/3] verifiers: Verify commands executed by grub

2018-11-09 Thread Matthew Garrett
From: Matthew Garrett Pass all commands executed by grub to the verifiers layer. Most verifiers will ignore this, but some (such as the TPM verifier) want to be able to measure and log each command executed in order to ensure that the boot state is as expected. --- grub-core/script/execute.c | 2

[PATCH 2/3] verifiers: Core TPM support

2018-11-09 Thread Matthew Garrett
From: Matthew Garrett Add support for performing basic TPM measurements. Right now this only supports extending PCRs statically and only on UEFI. In future we might want to have some sort of mechanism for choosing which events get logged to which PCRs, but this seems like a good default policy an

[PATCH 2/3] verifiers: Core TPM support

2018-11-09 Thread Matthew Garrett
From: Matthew Garrett Add support for performing basic TPM measurements. Right now this only supports extending PCRs statically and only on UEFI. In future we might want to have some sort of mechanism for choosing which events get logged to which PCRs, but this seems like a good default policy an

[PATCH 3/3] verifiers: Add TPM documentation

2018-11-09 Thread Matthew Garrett
Describe the behaviour of grub when the TPM module is in use. --- docs/grub.texi | 38 ++ 1 file changed, 38 insertions(+) diff --git a/docs/grub.texi b/docs/grub.texi index 471d97c95..6bd3783a4 100644 --- a/docs/grub.texi +++ b/docs/grub.texi @@ -5545,6 +5545,

[PATCH 1/3] verifiers: Verify commands executed by grub

2018-11-09 Thread Matthew Garrett
From: Matthew Garrett Pass all commands executed by grub to the verifiers layer. Most verifiers will ignore this, but some (such as the TPM verifier) want to be able to measure and log each command executed in order to ensure that the boot state is as expected. --- grub-core/script/execute.c | 2

Re: [PATCH v4 17/19] xen_pvh: support building a standalone image

2018-11-09 Thread Daniel Kiper
On Fri, Nov 02, 2018 at 01:37:36PM +0100, Juergen Gross wrote: > Support mkimage for xen_pvh. > > In order to avoid using plain integers for the ELF notes use the > available Xen include instead. While at it replace the plain numbers > for Xen PV mode, too. > > Signed-off-by: Juergen Gross > Revie

Re: [PATCH v4 14/19] xen: init memory regions for PVH

2018-11-09 Thread Daniel Kiper
On Fri, Nov 02, 2018 at 01:37:33PM +0100, Juergen Gross wrote: > Add all usable memory regions to grub memory management and add the > needed mmap iterate code, which will be used by grub core (e.g. > grub-core/lib/relocator.c or grub-core/mmap/mmap.c). > > As we are running in 32-bit mode don't ad

Re: [PATCH v4 13/19] xen: setup Xen specific data for PVH

2018-11-09 Thread Daniel Kiper
On Fri, Nov 02, 2018 at 01:37:32PM +0100, Juergen Gross wrote: > Initialize the needed Xen specific data. This is: > > - the Xen start of day page containing the console and Xenstore ring > page PFN and event channel > - the grant table > - the shared info page > > Write back the possibly modifie

Re: [PATCH v4 12/19] xen: add PCI MMIO areas to memory map

2018-11-09 Thread Daniel Kiper
On Fri, Nov 02, 2018 at 01:37:31PM +0100, Juergen Gross wrote: > Add possible PCI space MMIO areas as "Reserved" to the memory map in > order to avoid using those areas for special Xen pages later. > > Signed-off-by: Juergen Gross Reviewed-by: Daniel Kiper but I would like to here something from

Re: [PATCH v4 11/19] xen: get memory map from hypervisor for PVH

2018-11-09 Thread Daniel Kiper
On Fri, Nov 02, 2018 at 01:37:30PM +0100, Juergen Gross wrote: > Retrieve the memory map from the hypervisor and normalize it to contain > no overlapping entries and to be sorted by address. > > Signed-off-by: Juergen Gross One nit pick below. Otherwise Reviewed-by: Daniel Kiper > --- > V3: u

Re: [PATCH v4 10/19] xen: setup hypercall page for PVH

2018-11-09 Thread Daniel Kiper
On Fri, Nov 02, 2018 at 01:37:29PM +0100, Juergen Gross wrote: > Add the needed code to setup the hypercall page for calling into the > Xen hypervisor. > > Signed-off-by: Juergen Gross > --- > V3: grub_xen_early_halt->grub_xen_panic (Roger Pau Monné) > issue panic message (Roger Pau Monné) >

Re: [Xen-devel] [PATCH v4 08/19] xen: add basic hooks for PVH in current code

2018-11-09 Thread Daniel Kiper
On Thu, Nov 08, 2018 at 08:23:20PM +0100, Juergen Gross wrote: > On 08/11/2018 16:45, Daniel Kiper wrote: > > On Fri, Nov 02, 2018 at 01:37:27PM +0100, Juergen Gross wrote: > >> Add the hooks to current code needed for Xen PVH. They will be filled > >> with code later when the related functionality

Re: [PATCH V10] Add support for BTRFS raid5/6 to GRUB

2018-11-09 Thread Daniel Kiper
On Wed, Oct 31, 2018 at 07:48:08PM +0100, Goffredo Baroncelli wrote: > On 31/10/2018 13.06, Daniel Kiper wrote: > [...] > > > > v11 pushed. > > > > Goffredo, thank you for doing the work. > > Great ! Many thanks for your support !! You are welcome! Daniel