Hi All, Sorry, my bad for not providing the details. Below is the build configuration.
Passing: stuart_build -c OvmfPkg/PlatformCI/PlatformBuild.py TOOL_CHAIN_TAG=GCC5 TARGET=NOOPT -a IA32,X64 Failing: stuart_build -c OvmfPkg/PlatformCI/PlatformBuild.py TOOL_CHAIN_TAG=GCC5 TARGET=NOOPT -a IA32,X64 BLD_*_SECURE_BOOT_ENABLE=1 BLD_*_SMM_REQUIRE=1 BLD_*_TPM_ENABLE=1 BLD_*_TPM_CONFIG_ENABLE=1 BLD_*_NETWORK_TLS_ENABLE=1 BLD_*_NETWORK_IP6_ENABLE=1 BLD_*_NETWORK_HTTP_BOOT_ENABLE=1 The failure is happening while generating DXEFV.FVINFO - Generating DXEFV FV INFO - ##### ['GenFv', '-F', 'FALSE', '-a', '/home/ubuntu/src/edk2/Build/Ovmf3264/NOOPT_GCC5/FV/Ffs/DXEFV.inf', '-o', '/home/ubuntu/src/edk2/Build/Ovmf3264/NOOPT_GCC5/FV/DXEFV.Fv', '-i', '/home/ubuntu/src/edk2/Build/Ovmf3264/NOOPT_GCC5/FV/DXEFV.inf'] INFO - Return Value = 2 INFO - GenFv: ERROR 3000: Invalid INFO - the required fv image size 0xcb2ac0 exceeds the set fv image size 0xc00000 The difference I see without ecc change and with the change is the increase in file sizes for below ffs files,(other .ffs files remained unchanged) Without ecc change: 794742 /home/ubuntu/src/edk2/Build/Ovmf3264/NOOPT_GCC5/FV/Ffs/F80697E9-7FD6-4665-8646-88E33EF71DFCSecurityStubDxe/F80697E9-7FD6-4665-8646-88E33EF71DFC.ffs 653470 /home/ubuntu/src/edk2/Build/Ovmf3264/NOOPT_GCC5/FV/Ffs/F0E6A44F-7195-41c3-AC64-54F202CD0A21SecureBootConfigDxe/F0E6A44F-7195-41c3-AC64-54F202CD0A21.ffs 1174654 /home/ubuntu/src/edk2/Build/Ovmf3264/NOOPT_GCC5/FV/Ffs/3aceb0c0-3c72-11e4-9a56-74d435052646TlsDxe/3aceb0c0-3c72-11e4-9a56-74d435052646.ffs 872594 /home/ubuntu/src/edk2/Build/Ovmf3264/NOOPT_GCC5/FV/Ffs/23A089B3-EED5-4ac5-B2AB-43E3298C2343VariableSmm/23A089B3-EED5-4ac5-B2AB-43E3298C2343.ffs With ecc change: 1058678 /home/ubuntu/src/edk2/Build/Ovmf3264/NOOPT_GCC5/FV/Ffs/F80697E9-7FD6-4665-8646-88E33EF71DFCSecurityStubDxe/F80697E9-7FD6-4665-8646-88E33EF71DFC.ffs 917214 /home/ubuntu/src/edk2/Build/Ovmf3264/NOOPT_GCC5/FV/Ffs/F0E6A44F-7195-41c3-AC64-54F202CD0A21SecureBootConfigDxe/F0E6A44F-7195-41c3-AC64-54F202CD0A21.ffs 1470718 /home/ubuntu/src/edk2/Build/Ovmf3264/NOOPT_GCC5/FV/Ffs/3aceb0c0-3c72-11e4-9a56-74d435052646TlsDxe/3aceb0c0-3c72-11e4-9a56-74d435052646.ffs 1134738 /home/ubuntu/src/edk2/Build/Ovmf3264/NOOPT_GCC5/FV/Ffs/23A089B3-EED5-4ac5-B2AB-43E3298C2343VariableSmm/23A089B3-EED5-4ac5-B2AB-43E3298C2343.ffs Below is the size of DXEFV.Fv in successful build(without ecc change) ubuntu@ubuntuubuntu:~/src/edk2$ ls -l /home/ubuntu/src/edk2/Build/Ovmf3264/NOOPT_GCC5/FV/DXEFV.Fv -rw-rw-r-- 1 ubuntu ubuntu 12582912(0xC0000) Nov 9 19:18 /home/ubuntu/src/edk2/Build/Ovmf3264/NOOPT_GCC5/FV/DXEFV.Fv We haven't looked at porting to OpenSSL 3.0. I am wondering, removing existing ciphers might impact other platforms. Could you please suggest any less intrusive options without impacting other platforms. I am new to EDK and what compile time options are you referring to? Please let me know if any other information is needed from the build. Thanks in advance, Vineel On Tue, Nov 9, 2021 at 12:58 AM Gerd Hoffmann <kra...@redhat.com> wrote: > > 2. Remove unnecessary algo in openssl config > > * Do you really want to enable all those algorithms? Such as SM2? > Maybe revisit them again to see if they are really needed. I could see it > might break other platform potentially. > > Enabling only those algorithms which are actually used by tianocore > certainly makes sense ... > > > 3. Provide 2 profiles – with ECC and without ECC. > > ... and if it gets down the size enough would be better than yet another > compile time option. > > take care, > Gerd > > -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#83571): https://edk2.groups.io/g/devel/message/83571 Mute This Topic: https://groups.io/mt/86257810/21656 Group Owner: devel+ow...@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
