Re: [PATCH v4 2/2] efi: Add API for retrieving the EFI secret for cryptodisk

2022-02-14 Thread Glenn Washburn
On Mon, 7 Feb 2022 10:29:44 -0500 James Bottomley wrote: > This module is designed to provide an efisecret provider which > interrogates the EFI configuration table to find the location of the > confidential computing secret and tries to register the secret with > the cryptodisk. > > The secret

Re: [PATCH v4 2/2] efi: Add API for retrieving the EFI secret for cryptodisk

2022-02-07 Thread James Bottomley
On Mon, 2022-02-07 at 17:00 +, Dr. David Alan Gilbert wrote: > * James Bottomley (j...@linux.ibm.com) wrote: [...] > > +static grub_err_t > > +grub_efi_secret_put (const char *arg __attribute__((unused)), int > > have_it, > > +grub_uint8_t **ptr) > > +{ > > + struct secret_entr

Re: [PATCH v4 2/2] efi: Add API for retrieving the EFI secret for cryptodisk

2022-02-07 Thread Dr. David Alan Gilbert
* James Bottomley (j...@linux.ibm.com) wrote: > This module is designed to provide an efisecret provider which > interrogates the EFI configuration table to find the location of the > confidential computing secret and tries to register the secret with > the cryptodisk. > > The secret is stored in

[PATCH v4 2/2] efi: Add API for retrieving the EFI secret for cryptodisk

2022-02-07 Thread James Bottomley
This module is designed to provide an efisecret provider which interrogates the EFI configuration table to find the location of the confidential computing secret and tries to register the secret with the cryptodisk. The secret is stored in a boot allocated area, usually a page in size. The layout