Re: [edk2-devel] [Patch v2 07/28] MdeModulePkg: Add Null ProtectedVariable Library

2022-05-22 Thread Wang, Jian J
Judah, Following interface has no non-Null version implemented. Consider removing them completely. ProtectedVariableLibGetStore() ProtectedVariableLibReclaim() ProtectedVariableLibGetDataInfo() ProtectedVariableLibGetNextEx() ProtectedVariableLibGetNext () Regards, Jian > -Original Message-

Re: [edk2-devel] [Patch v2 08/28] MdeModulePkg: Add new Variable functionality

2022-05-22 Thread Wang, Jian J
Judah, One general comment: please add variable store provision/recovery flow and explanations in the readme. See my other inline comments below. Regards, Jian > -Original Message- > From: Vang, Judah > Sent: Saturday, April 30, 2022 2:04 AM > To: devel@edk2.groups.io > Cc: Wang, Jian

Re: [edk2-devel] [Patch v2 10/28] SecurityPkg: Add new KeyService types and defines

2022-05-22 Thread Wang, Jian J
Judah, > -Original Message- > From: Vang, Judah > Sent: Saturday, April 30, 2022 2:04 AM > To: devel@edk2.groups.io > Cc: Wang, Jian J ; Yao, Jiewen ; > Mistry, Nishant C > Subject: [Patch v2 10/28] SecurityPkg: Add new KeyService types and defines > > REF: https://bugzilla.tianocore.o

Re: [edk2-devel] [Patch v2 11/28] SecurityPkg: Update RPMC APIs with index

2022-05-22 Thread Wang, Jian J
Reviewed-by: Jian J Wang Regards, Jian > -Original Message- > From: Vang, Judah > Sent: Saturday, April 30, 2022 2:04 AM > To: devel@edk2.groups.io > Cc: Wang, Jian J ; Yao, Jiewen ; > Mistry, Nishant C > Subject: [Patch v2 11/28] SecurityPkg: Update RPMC APIs with index > > REF: http

Re: [edk2-devel] [Patch v2 12/28] SecurityPkg: Add new variable types and functions

2022-05-22 Thread Wang, Jian J
Judah, Patch 11 is a library instance of RpmcLib which relies on changes introduced in this patch (12). You need to put this patch before patch 11. Regards, Jian > -Original Message- > From: Vang, Judah > Sent: Saturday, April 30, 2022 2:04 AM > To: devel@edk2.groups.io > Cc: Wang, Jia

Re: [edk2-devel] [Patch v2 13/28] SecurityPkg: Fix GetVariableKey API

2022-05-22 Thread Wang, Jian J
Judah, My comments below > -Original Message- > From: Vang, Judah > Sent: Saturday, April 30, 2022 2:04 AM > To: devel@edk2.groups.io > Cc: Wang, Jian J ; Yao, Jiewen ; > Mistry, Nishant C > Subject: [Patch v2 13/28] SecurityPkg: Fix GetVariableKey API > > REF: https://bugzilla.tianoco

Re: [edk2-devel] [Patch v2 14/28] SecurityPkg: Add null encryption variable libs

2022-05-22 Thread Wang, Jian J
Judah, My comments below > -Original Message- > From: Vang, Judah > Sent: Saturday, April 30, 2022 2:04 AM > To: devel@edk2.groups.io > Cc: Wang, Jian J ; Yao, Jiewen ; > Mistry, Nishant C > Subject: [Patch v2 14/28] SecurityPkg: Add null encryption variable libs > > REF: https://bugzi

Re: [edk2-devel] [PATCH 5/5] CpuException: Add InitializeSeparateExceptionStacks

2022-05-22 Thread Wang, Jian J
Reviewed-by: Jian J Wang Regards, Jian > -Original Message- > From: Ni, Ray > Sent: Friday, May 20, 2022 10:16 PM > To: devel@edk2.groups.io > Cc: Dong, Eric ; Wang, Jian J > Subject: [PATCH 5/5] CpuException: Add InitializeSeparateExceptionStacks > > Today InitializeCpuExceptionHan

Re: [edk2-devel] [PATCH 4/5] CpuException: Remove InitializeCpuInterruptHandlers

2022-05-22 Thread Wang, Jian J
Hi Ray, Both CpuDxe.c and CpuExceptionCommon.h have CPU_INTERRUPT_NUM defined. I'd suggest to move it to a common place, such as BaseLib.h. I don't see any issue if they are defined to different value. It just gives me a feeling that it might cause potential problems sometimes in the future. R

Re: [edk2-devel] [PATCH 3/5] CpuException: Avoid allocating page but using global variables

2022-05-22 Thread Wang, Jian J
Reviewed-by: Jian J Wang Regards, Jian > -Original Message- > From: devel@edk2.groups.io On Behalf Of Ni, Ray > Sent: Friday, May 20, 2022 10:16 PM > To: devel@edk2.groups.io > Cc: Dong, Eric > Subject: [edk2-devel] [PATCH 3/5] CpuException: Avoid allocating page but > using > globa

Re: [edk2-devel] [PATCH 2/5] CpuException: Init global variables in-place

2022-05-22 Thread Wang, Jian J
Reviewed-by: Jian J Wang Regards, Jian > -Original Message- > From: devel@edk2.groups.io On Behalf Of Ni, Ray > Sent: Friday, May 20, 2022 10:16 PM > To: devel@edk2.groups.io > Cc: Dong, Eric > Subject: [edk2-devel] [PATCH 2/5] CpuException: Init global variables in-place > > Additi

Re: [edk2-devel] [PATCH 1/5] CpuException: Avoid allocating code pages for DXE instance

2022-05-22 Thread Wang, Jian J
Ray, You changed "%rep 32" to "%rep 256" in Ia32/ExceptionHandlerAsm.nasm. According to my understanding and your comments, this should be done only to X64 code, right? Regards, Jian > -Original Message- > From: devel@edk2.groups.io On Behalf Of Ni, Ray > Sent: Friday, May 20, 2022 10:1

[edk2-devel] [PATCH v1] UefiPayloadPkg: Add support for logging to CBMEM console

2022-05-22 Thread Benjamin Doron
Writes TianoCore debug logs into the CBMEM console ringbuffer, from where the user can retrieve them with the `cbmem` userspace utility. The intention is to aid in debugging non-fatal issues even in release builds, or simply make TianoCore's logs available to those interested. Consequently, MDEPKG

[edk2-devel] [PATCH v2] UefiPayloadPkg: Add support for logging to CBMEM console

2022-05-22 Thread Benjamin Doron
Writes TianoCore debug logs into the CBMEM console ringbuffer, from where the user can retrieve them with the `cbmem` userspace utility. The intention is to aid in debugging non-fatal issues even in release builds, or simply make TianoCore's logs available to those interested. Consequently, MDEPKG

[edk2-devel] [PATCH v3 2/4] MdePkg: Add PcdSevSnpSecretsAddress to export SEV-SNP secrets page

2022-05-22 Thread Michael Roth via groups.io
OvmfPkg will initially use this to hand off the secrets page address to UefiCpuPkg, which will need this PCD to access the SEV-SNP secrets page address. Define this as an MdePkg PCD so it can be accessed by other packages alongside the secrets page struct defined in MdePkg/Include. Signed-off-by:

[edk2-devel] [PATCH v3 1/4] MdePkg: Add header for SEV-SNP secrets page struct

2022-05-22 Thread Michael Roth via groups.io
This will be needed so that the AP Jump Table address can be stored for use by the operating system later, and possibly for other things in the future. Signed-off-by: Michael Roth --- MdePkg/Include/Register/Amd/SnpSecretsPage.h | 56 1 file changed, 56 insertions(+) create

[edk2-devel] [PATCH v3 3/4] OvmfPkg: Initialize the PcdSevSnpSecretsAddress PCD during PEI phase

2022-05-22 Thread Michael Roth via groups.io
This needs to be set so that UefiCpuPkg can locate the SEV-SNP secrets page later to set the AP Jump Table address. Signed-off-by: Michael Roth --- OvmfPkg/AmdSev/AmdSevX64.dsc| 3 +++ OvmfPkg/CloudHv/CloudHvX64.dsc | 3 +++ OvmfPkg/IntelTdx/IntelTdxX64.dsc| 3 +++ OvmfPkg/Micro

[edk2-devel] [PATCH v3 4/4] UefiCpuPkg: Store SEV-SNP AP jump table in the secrets page

2022-05-22 Thread Michael Roth via groups.io
A full-featured SEV-SNP guest will not rely on the AP jump table, and will instead use the AP Creation interface defined by the GHCB. However, a guest is still allowed to use the AP jump table if desired. However, unlike with SEV-ES guests, SEV-SNP guests should not store/retrieve the jump table a

[edk2-devel] [PATCH v3 0/4] Fix AP Jump Table Handling for SEV-SNP

2022-05-22 Thread Michael Roth via groups.io
A full-featured SEV-SNP guest will not rely on the AP jump table, and will instead use the AP Creation interface defined by the GHCB. However, a guest is still allowed to use the AP jump table if desired. However, unlike with SEV-ES guests, SEV-SNP guests should not store/retrieve the jump table a

[edk2-devel] Debugging Ovmf with GDB: No symbol is recognized

2022-05-22 Thread koenig_regina via groups.io
Hi, I am trying to debug OVMF as suggested in https://retrage.github.io/2019/12/05/debugging-ovmf-en.html. Almost every step seems to work fine. I built edk2 as follow: -- $ git clone g...@github.com:tianocore/edk2.git \ $ cd edk2$ git submodule update --init --recursi

[edk2-devel] Cancelled Event: TianoCore Bug Triage - APAC / NAMO - Tuesday, May 24, 2022 #cal-cancelled

2022-05-22 Thread Group Notification
BEGIN:VCALENDAR VERSION:2.0 PRODID:-//Groups.io Inc//Groups.io Calendar//EN METHOD:CANCELLED REFRESH-INTERVAL;VALUE=DURATION:PT1H X-PUBLISHED-TTL:PT1H CALSCALE:GREGORIAN BEGIN:VTIMEZONE TZID:America/Los_Angeles LAST-MODIFIED:20220317T223602Z TZURL:http://tzurl.org/zoneinfo-outlook/America/Los_Angel

Re: [edk2-devel] Some questions about Azure CI

2022-05-22 Thread Chao Li
Hi All, Are you still following this issue? I have been waiting for the best way, thank you! Thanks, Chao > -原始邮件- > 发件人: "Michael Kubacki" > 发送时间: 2022-05-17 00:12:51 (星期二) > 收件人: devel@edk2.groups.io, lic...@loongson.cn, "Shenglei Zhang" , "Bob Feng" > 抄送: "michael.d.kin...@intel.

Re: [edk2-devel] [PATCH v3 5/6] [edk2-platforms] Silicon/SynQuacer: add DBG2 ACPI table

2022-05-22 Thread Masahisa Kojima
Hi Leif, Ard, A gentle ping on this on behalf of Masami, since he left Linaro. Thanks, Masahisa Kojima On Fri, 10 Dec 2021 at 15:51, Masami Hiramatsu wrote: > > Add DBG2 table to ACPI tables. The COM1 uart port will be used > for OS debug, and it is 16550 compatible. > > Signed-off-by: Masami

[edk2-devel] [PATCH 0/4] Measure kernel blob

2022-05-22 Thread Min Xu
Kernel blobs include the kernel image, initrd, command line. These are external inputs from host VMM. In some platforms,such as Tdx environment, Host VMM is treated as un-trusted. So these external inputs should be measured. This patch-set imports a new library class (BlobMeasurementLib). It is de

[edk2-devel] [PATCH 1/4] OvmfPkg: Add library class BlobMeasurementLib with null implementation

2022-05-22 Thread Min Xu
BlobMeasurementLib will be used to measure blobs fetching from QEMU's firmware config (fw_cfg) in platforms which implments EFI_CC_MEASUREMENT_PROTOCOL. The null implementation BlobMeasurementLibNull always return EFI_SUCCESS. Cc: Ard Biesheuvel Cc: Jordan Justen Cc: Ashish Kalra Cc: Brijesh S

[edk2-devel] [PATCH 2/4] OvmfPkg: Add BlobMeasurementLibNull to dsc

2022-05-22 Thread Min Xu
This prepares the ground for calling MeasureKernelBlob() in QemuKernelLoaderFsDxe. Cc: Ard Biesheuvel Cc: Jordan Justen Cc: Ashish Kalra Cc: Brijesh Singh Cc: Erdem Aktas Cc: James Bottomley Cc: Jiewen Yao Cc: Tom Lendacky Cc: Sami Mujawar Cc: Gerd Hoffmann Signed-off-by: Min Xu --- Ar

[edk2-devel] [PATCH 3/4] OvmfPkg: Implement BlobMeasurementLibTdx

2022-05-22 Thread Min Xu
OvmfPkg/IntelTdx/BlobMeasurementLibTdx is implemented for measurement of Kernel blob. It calls EFI_CC_MEASUREMENT_PROTOCOL to do the measurement. Cc: Ard Biesheuvel Cc: Jordan Justen Cc: Ashish Kalra Cc: Brijesh Singh Cc: Erdem Aktas Cc: James Bottomley Cc: Jiewen Yao Cc: Sami Mujawar Cc:

[edk2-devel] [PATCH 4/4] OvmfPkg: Call MeasureKernelBlob after fetch from fw_cfg

2022-05-22 Thread Min Xu
In QemuKernelLoaderFsDxeEntrypoint we use FetchBlob to read the content of the kernel/initrd/cmdline from the QEMU fw_cfg interface. Insert a call to MeasureKernelBlob after fetching to allow BlobMeasurementLib implementations to add a measurement step for these blobs. This will allow confidentia