Re: [PATCH v3 0/5] Support Secure Boot for multiboot2 Xen

2021-02-23 Thread Bob Eshleman
On 2/22/21 11:16 PM, Jan Beulich wrote: > It is on my list of things to look at. While probably not a good excuse, > my looking at previous versions of this makes we somewhat hesitant to > open any of these patch mails ... But I mean to get to it. > > Jan > Thanks for this response. I did comb

Re: [PATCH v3 0/5] Support Secure Boot for multiboot2 Xen

2021-02-22 Thread Jan Beulich
On 22.02.2021 19:04, Bobby Eshleman wrote: > I just wanted to request more feedback on this series and put it on the > radar, while acknowledging > that I'm sure given the recent code freeze it is a busy time for everybody. It is on my list of things to look at. While probably not a good excuse,

Re: [PATCH v3 0/5] Support Secure Boot for multiboot2 Xen

2021-02-22 Thread Bobby Eshleman
Hey all, I just wanted to request more feedback on this series and put it on the radar, while acknowledging that I'm sure given the recent code freeze it is a busy time for everybody. Best, Bob

Re: [PATCH v3 0/5] Support Secure Boot for multiboot2 Xen

2021-01-25 Thread Jan Beulich
On 22.01.2021 22:18, Bobby Eshleman wrote: > On Fri, Jan 22, 2021 at 10:39:28AM +0100, Jan Beulich wrote: >> On 22.01.2021 01:51, Bobby Eshleman wrote: >>> I followed with v2 feedback and attempted to convert the PE/COFF header >>> into C instead of ASM. Unfortunately, this was only possible for

Re: [PATCH v3 0/5] Support Secure Boot for multiboot2 Xen

2021-01-22 Thread Bobby Eshleman
On Fri, Jan 22, 2021 at 10:39:28AM +0100, Jan Beulich wrote: > On 22.01.2021 01:51, Bobby Eshleman wrote: > > I followed with v2 feedback and attempted to convert the PE/COFF header > > into C instead of ASM. Unfortunately, this was only possible for the > > first part (Legacy) of the PE/COFF

Re: [PATCH v3 0/5] Support Secure Boot for multiboot2 Xen

2021-01-22 Thread Jan Beulich
On 22.01.2021 01:51, Bobby Eshleman wrote: > This is version 3 for a patch set sent out to the ML in 2018 [1] to > support UEFI Secure Boot for Xen on multiboot2 platforms. > > A new binary, xen.mb.efi, is built. It contains the mb2 header as well > as a hand-crafted PE/COFF header. The dom0

[PATCH v3 0/5] Support Secure Boot for multiboot2 Xen

2021-01-21 Thread Bobby Eshleman
This is version 3 for a patch set sent out to the ML in 2018 [1] to support UEFI Secure Boot for Xen on multiboot2 platforms. A new binary, xen.mb.efi, is built. It contains the mb2 header as well as a hand-crafted PE/COFF header. The dom0 kernel is verified using the shim lock protocol. I