Hi, > +/** > + This Function checks if TDX is available, if present then it sets > + the dynamic PCDs for Tdx guest. It also builds Guid hob which contains > + the Host Bridge DevId. > + **/ > +VOID > +IntelTdxInitialize ( > + VOID > + ) > +{ > + #ifdef MDE_CPU_X64 > + EFI_HOB_PLATFORM_INFO PlatformInfoHob; > + RETURN_STATUS PcdStatus; > + > + if (!TdIsEnabled ()) { > + return; > + } > + > + PcdStatus = PcdSet64S (PcdConfidentialComputingGuestAttr, CCAttrIntelTdx); > + ASSERT_RETURN_ERROR (PcdStatus); > + > + PcdStatus = PcdSetBoolS (PcdIa32EferChangeAllowed, FALSE); > + ASSERT_RETURN_ERROR (PcdStatus); > + > + PcdStatus = PcdSet64S (PcdTdxSharedBitMask, TdSharedPageMask ()); > + ASSERT_RETURN_ERROR (PcdStatus); > + > + PcdStatus = PcdSetBoolS (PcdSetNxForStack, TRUE); > + ASSERT_RETURN_ERROR (PcdStatus); > + > + ZeroMem (&PlatformInfoHob, sizeof (PlatformInfoHob)); > + PlatformInfoHob.HostBridgePciDevId = mHostBridgeDevId; > + > + BuildGuidDataHob (&gUefiOvmfPkgTdxPlatformGuid, &PlatformInfoHob, sizeof > (EFI_HOB_PLATFORM_INFO)); > + #endif > +}
So, what is the plan for this with pei-less boot? I think we should move this to PlatformInitLib, then link either into PlatformPei or the early dxe module for pei-less boot? take care, Gerd -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#86113): https://edk2.groups.io/g/devel/message/86113 Mute This Topic: https://groups.io/mt/88617550/21656 Group Owner: devel+ow...@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-