Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Ard Biesheuvel
On Tue, 6 Oct 2020 at 17:09, François Ozog wrote: > > > On Tue, 6 Oct 2020 at 16:46, Ard Biesheuvel wrote: > >> >> >> On Tue, 6 Oct 2020 at 16:22, François Ozog >> wrote: >> >>> Ard, there is a question for you in the below thread ;-) >>> >>> On Tue, 6 Oct 2020 at 15:02, Grant Likely wrote:

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread François Ozog
On Tue, 6 Oct 2020 at 17:08, François Ozog wrote: > > > On Tue, 6 Oct 2020 at 16:46, Ard Biesheuvel wrote: > >> >> >> On Tue, 6 Oct 2020 at 16:22, François Ozog >> wrote: >> >>> Ard, there is a question for you in the below thread ;-) >>> >>> On Tue, 6 Oct 2020 at 15:02, Grant Likely wrote:

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread François Ozog
On Tue, 6 Oct 2020 at 16:46, Ard Biesheuvel wrote: > > > On Tue, 6 Oct 2020 at 16:22, François Ozog > wrote: > >> Ard, there is a question for you in the below thread ;-) >> >> On Tue, 6 Oct 2020 at 15:02, Grant Likely wrote: >> >>> >>> >>> On 06/10/2020 13:52, Heinrich Schuchardt wrote: >>> >

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Ard Biesheuvel
On Tue, 6 Oct 2020 at 16:22, François Ozog wrote: > Ard, there is a question for you in the below thread ;-) > > On Tue, 6 Oct 2020 at 15:02, Grant Likely wrote: > >> >> >> On 06/10/2020 13:52, Heinrich Schuchardt wrote: >> > On 06.10.20 14:43, Grant Likely wrote: >> > >> >> >> >> Current

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread François Ozog
Ard, there is a question for you in the below thread ;-) On Tue, 6 Oct 2020 at 15:02, Grant Likely wrote: > > > On 06/10/2020 13:52, Heinrich Schuchardt wrote: > > On 06.10.20 14:43, Grant Likely wrote: > > > >> > >> Current U-Boot by default uses the same DT image for both U-Boot > >> internal

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread François Ozog
On Tue, 6 Oct 2020 at 15:12, Heinrich Schuchardt wrote: > On 06.10.20 14:46, Grant Likely wrote: > > > > > > On 06/10/2020 13:41, Ilias Apalodimas wrote: > >> Hi Grant, > >> > >> [...] > > > > Hi Heinrich, > > > > I've got concerns about this approach. Even though it uses the

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Heinrich Schuchardt
On 06.10.20 14:46, Grant Likely wrote: > > > On 06/10/2020 13:41, Ilias Apalodimas wrote: >> Hi Grant, >> >> [...] > > Hi Heinrich, > > I've got concerns about this approach. Even though it uses the UEFI > infrastructure, images deployed in this way are U-Boot specific and

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Grant Likely
On 06/10/2020 13:52, Heinrich Schuchardt wrote: On 06.10.20 14:43, Grant Likely wrote: Current U-Boot by default uses the same DT image for both U-Boot internal setup and to provide to the OS. This should be split so that the U-Boot internal version has what U-Boot needs without needs to

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread François Ozog
On Tue, 6 Oct 2020 at 14:36, Heinrich Schuchardt wrote: > On 06.10.20 14:04, François Ozog wrote: > > As always, Ard made a good point, and I feel compelled to top post and > > restate stuff. > > > > Here is the supporting deck: > > >

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Heinrich Schuchardt
On 06.10.20 14:43, Grant Likely wrote: > > Current U-Boot by default uses the same DT image for both U-Boot > internal setup and to provide to the OS. This should be split so that > the U-Boot internal version has what U-Boot needs without needs to track > mainline Linux DTB schema. > > I've been

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Grant Likely
On 06/10/2020 13:41, Ilias Apalodimas wrote: Hi Grant, [...] Hi Heinrich, I've got concerns about this approach. Even though it uses the UEFI infrastructure, images deployed in this way are U-Boot specific and won't ever be applicable on EDK2 or other UEFI implementations. However there

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Grant Likely
On 06/10/2020 13:36, Heinrich Schuchardt wrote: On 06.10.20 14:04, François Ozog wrote: As always, Ard made a good point, and I feel compelled to top post and restate stuff. Here is the supporting deck:

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Ilias Apalodimas
Hi Grant, [...] > > > > > > Hi Heinrich, > > > > > > I've got concerns about this approach. Even though it uses the UEFI > > > infrastructure, images deployed in this way are U-Boot specific and > > > won't ever be applicable on EDK2 or other UEFI implementations. > > > > > > However there is

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Grant Likely
On 06/10/2020 13:04, François Ozog wrote: As always, Ard made a good point, and I feel compelled to top post and restate stuff. Here is the supporting deck: https://docs.google.com/presentation/d/1JK00su6e7vt8lRfwSt2C9EuuzwcBHLyoLRRrdcYfVWY/edit?usp=sharing We have two boot flows under

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Heinrich Schuchardt
On 06.10.20 14:04, François Ozog wrote: > As always, Ard made a good point, and I feel compelled to top post and > restate stuff. > > Here is the supporting deck: > https://docs.google.com/presentation/d/1JK00su6e7vt8lRfwSt2C9EuuzwcBHLyoLRRrdcYfVWY/edit?usp=sharing >   > We have two boot flows

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread François Ozog
On Tue, 6 Oct 2020 at 14:05, Heinrich Schuchardt wrote: > On 06.10.20 12:38, Grant Likely wrote: > > > > > > On 06/10/2020 05:35, Heinrich Schuchardt wrote: > >> Am 6. Oktober 2020 00:37:58 MESZ schrieb Grant Likely > >> : > >>> > >>> > >>> On 03/10/2020 09:51, Heinrich Schuchardt wrote: >

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Heinrich Schuchardt
On 06.10.20 12:38, Grant Likely wrote: > > > On 06/10/2020 05:35, Heinrich Schuchardt wrote: >> Am 6. Oktober 2020 00:37:58 MESZ schrieb Grant Likely >> : >>> >>> >>> On 03/10/2020 09:51, Heinrich Schuchardt wrote: Hello Ilias, hello Christian, with commit ec80b4735a59 ("efi_loader:

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread François Ozog
As always, Ard made a good point, and I feel compelled to top post and restate stuff. Here is the supporting deck: https://docs.google.com/presentation/d/1JK00su6e7vt8lRfwSt2C9EuuzwcBHLyoLRRrdcYfVWY/edit?usp=sharing We have two boot flows under consideration (not saying others are bad, just to

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Grant Likely
On 06/10/2020 05:35, Heinrich Schuchardt wrote: Am 6. Oktober 2020 00:37:58 MESZ schrieb Grant Likely : On 03/10/2020 09:51, Heinrich Schuchardt wrote: Hello Ilias, hello Christian, with commit ec80b4735a59 ("efi_loader: Implement FileLoad2 for initramfs loading") Ilias provided the

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Ard Biesheuvel
On Tue, 6 Oct 2020 at 12:13, François Ozog wrote: > > > On Tue, 6 Oct 2020 at 10:06, Ard Biesheuvel wrote: > >> >> >> On Tue, 6 Oct 2020 at 10:00, François Ozog >> wrote: >> >>> >>> >>> Le mar. 6 oct. 2020 à 09:21, Ard Biesheuvel a écrit : >>> On Tue, 6 Oct 2020 at 06:35, Heinrich

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread François Ozog
On Tue, 6 Oct 2020 at 10:06, Ard Biesheuvel wrote: > > > On Tue, 6 Oct 2020 at 10:00, François Ozog > wrote: > >> >> >> Le mar. 6 oct. 2020 à 09:21, Ard Biesheuvel a écrit : >> >>> On Tue, 6 Oct 2020 at 06:35, Heinrich Schuchardt >>> wrote: >>> > >>> > Am 6. Oktober 2020 00:37:58 MESZ schrieb

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Daniel Thompson
On Tue, Oct 06, 2020 at 10:00:40AM +0200, François Ozog wrote: > Le mar. 6 oct. 2020 à 09:21, Ard Biesheuvel a écrit : > > > On Tue, 6 Oct 2020 at 06:35, Heinrich Schuchardt > > wrote: > > > > > > Am 6. Oktober 2020 00:37:58 MESZ schrieb Grant Likely < > > grant.lik...@arm.com>: > > > > > > > >

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Ard Biesheuvel
On Tue, 6 Oct 2020 at 10:00, François Ozog wrote: > > > Le mar. 6 oct. 2020 à 09:21, Ard Biesheuvel a écrit : > >> On Tue, 6 Oct 2020 at 06:35, Heinrich Schuchardt >> wrote: >> > >> > Am 6. Oktober 2020 00:37:58 MESZ schrieb Grant Likely < >> grant.lik...@arm.com>: >> > > >> > > >> > >On

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread François Ozog
Le mar. 6 oct. 2020 à 09:21, Ard Biesheuvel a écrit : > On Tue, 6 Oct 2020 at 06:35, Heinrich Schuchardt > wrote: > > > > Am 6. Oktober 2020 00:37:58 MESZ schrieb Grant Likely < > grant.lik...@arm.com>: > > > > > > > > >On 03/10/2020 09:51, Heinrich Schuchardt wrote: > > >> Hello Ilias, hello

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-06 Thread Ard Biesheuvel
On Tue, 6 Oct 2020 at 06:35, Heinrich Schuchardt wrote: > > Am 6. Oktober 2020 00:37:58 MESZ schrieb Grant Likely : > > > > > >On 03/10/2020 09:51, Heinrich Schuchardt wrote: > >> Hello Ilias, hello Christian, > >> > >> with commit ec80b4735a59 ("efi_loader: Implement FileLoad2 for > >initramfs >

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-05 Thread Heinrich Schuchardt
Am 6. Oktober 2020 00:37:58 MESZ schrieb Grant Likely : > > >On 03/10/2020 09:51, Heinrich Schuchardt wrote: >> Hello Ilias, hello Christian, >> >> with commit ec80b4735a59 ("efi_loader: Implement FileLoad2 for >initramfs >> loading") Ilias provided the possibility to specify a device path >>

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-05 Thread Grant Likely
On 03/10/2020 09:51, Heinrich Schuchardt wrote: Hello Ilias, hello Christian, with commit ec80b4735a59 ("efi_loader: Implement FileLoad2 for initramfs loading") Ilias provided the possibility to specify a device path (CONFIG_EFI_INITRD_FILESPEC) from which an initial RAM disk can be served

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-05 Thread François Ozog
On Mon, 5 Oct 2020 at 17:25, Daniel Thompson wrote: > On Mon, Oct 05, 2020 at 04:12:11PM +0200, François Ozog wrote: > > The driving idea is that there is an existing bootflow, non UEFI that > > allows vmlinuz, initrd and DTB to be protected in a single FIT. The > > trustworthiness of the

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-05 Thread Daniel Thompson
On Mon, Oct 05, 2020 at 04:12:11PM +0200, François Ozog wrote: > The driving idea is that there is an existing bootflow, non UEFI that > allows vmlinuz, initrd and DTB to be protected in a single FIT. The > trustworthiness of the solution is higher that regular distro on pure UEFI > systems but

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-05 Thread François Ozog
The driving idea is that there is an existing bootflow, non UEFI that allows vmlinuz, initrd and DTB to be protected in a single FIT. The trustworthiness of the solution is higher that regular distro on pure UEFI systems but does not allow initrd changes as you install stuff. We need to keep in

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-05 Thread Ilias Apalodimas
On Sat, Oct 03, 2020 at 03:12:30PM +0200, Ard Biesheuvel wrote: > On Sat, 3 Oct 2020 at 13:16, François Ozog wrote: > > > > >> that looks super interesting. [...] > >> I propose something (in the latest desk preparing oct 14th) similar > >> except the an efi application boots the FIT. > >> I

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-04 Thread Cristian Ciocaltea
Hello Heinrich, On Sat, Oct 03, 2020 at 10:51:24AM +0200, Heinrich Schuchardt wrote: > Hello Ilias, hello Christian, > > with commit ec80b4735a59 ("efi_loader: Implement FileLoad2 for initramfs > loading") Ilias provided the possibility to specify a device path > (CONFIG_EFI_INITRD_FILESPEC)

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-03 Thread Ard Biesheuvel
On Sat, 3 Oct 2020 at 18:35, Heinrich Schuchardt wrote: > > On 10/3/20 3:12 PM, Ard Biesheuvel wrote: > > > > > > On Sat, 3 Oct 2020 at 13:16, François Ozog > > wrote: > > > > > > > > Le sam. 3 oct. 2020 à 13:14, François Ozog >

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-03 Thread Heinrich Schuchardt
On 10/3/20 3:12 PM, Ard Biesheuvel wrote: > > > On Sat, 3 Oct 2020 at 13:16, François Ozog > wrote: > > > > Le sam. 3 oct. 2020 à 13:14, François Ozog > a écrit : > > > > Le sam. 3 oct. 2020 à 10:51, Heinrich

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-03 Thread Ard Biesheuvel
On Sat, 3 Oct 2020 at 13:16, François Ozog wrote: > > > Le sam. 3 oct. 2020 à 13:14, François Ozog a > écrit : > >> >> >> Le sam. 3 oct. 2020 à 10:51, Heinrich Schuchardt a >> écrit : >> >>> Hello Ilias, hello Christian, >>> >>> >>> >>> with commit ec80b4735a59 ("efi_loader: Implement

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-03 Thread François Ozog
Le sam. 3 oct. 2020 à 13:14, François Ozog a écrit : > > > Le sam. 3 oct. 2020 à 10:51, Heinrich Schuchardt a > écrit : > >> Hello Ilias, hello Christian, >> >> >> >> with commit ec80b4735a59 ("efi_loader: Implement FileLoad2 for initramfs >> >> loading") Ilias provided the possibility to

Re: Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-03 Thread François Ozog
Le sam. 3 oct. 2020 à 10:51, Heinrich Schuchardt a écrit : > Hello Ilias, hello Christian, > > > > with commit ec80b4735a59 ("efi_loader: Implement FileLoad2 for initramfs > > loading") Ilias provided the possibility to specify a device path > > (CONFIG_EFI_INITRD_FILESPEC) from which an initial

Fit images and EFI_LOAD_FILE2_PROTOCOL

2020-10-03 Thread Heinrich Schuchardt
Hello Ilias, hello Christian, with commit ec80b4735a59 ("efi_loader: Implement FileLoad2 for initramfs loading") Ilias provided the possibility to specify a device path (CONFIG_EFI_INITRD_FILESPEC) from which an initial RAM disk can be served via the EFI_FILE_LOAD2_PROTOCOL. Ard extended the