Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-11-01 Thread Jarkko Sakkinen
On Sat Nov 2, 2024 at 12:04 AM EET, Thomas Gleixner wrote: > On Fri, Nov 01 2024 at 23:19, Jarkko Sakkinen wrote: > > On Fri Nov 1, 2024 at 11:13 PM EET, Jarkko Sakkinen wrote: > >> I think we can sort them out independently as long as we find a > >> conclusion how to address locality change. > > >

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-11-01 Thread Thomas Gleixner
On Fri, Nov 01 2024 at 23:19, Jarkko Sakkinen wrote: > On Fri Nov 1, 2024 at 11:13 PM EET, Jarkko Sakkinen wrote: >> I think we can sort them out independently as long as we find a >> conclusion how to address locality change. > > And to be fair: there was no reaction from anyone. It is mostly x86

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-11-01 Thread Jarkko Sakkinen
On Fri Nov 1, 2024 at 11:13 PM EET, Jarkko Sakkinen wrote: > On Fri Nov 1, 2024 at 10:34 PM EET, Thomas Gleixner wrote: > > On Fri, Nov 01 2024 at 12:28, Jarkko Sakkinen wrote: > > > On Fri Sep 13, 2024 at 11:04 PM EEST, Ross Philipson wrote: > > >> A quick note on terminology. The larger open sour

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-11-01 Thread Jarkko Sakkinen
On Fri Nov 1, 2024 at 10:34 PM EET, Thomas Gleixner wrote: > On Fri, Nov 01 2024 at 12:28, Jarkko Sakkinen wrote: > > On Fri Sep 13, 2024 at 11:04 PM EEST, Ross Philipson wrote: > >> A quick note on terminology. The larger open source project itself is > >> called > >> TrenchBoot, which is hosted

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-11-01 Thread Thomas Gleixner
On Fri, Nov 01 2024 at 12:28, Jarkko Sakkinen wrote: > On Fri Sep 13, 2024 at 11:04 PM EEST, Ross Philipson wrote: >> A quick note on terminology. The larger open source project itself is called >> TrenchBoot, which is hosted on Github (links below). The kernel feature >> enabling >> the use of Dy

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-11-01 Thread Jarkko Sakkinen
On Fri Nov 1, 2024 at 1:08 AM EET, Thomas Gleixner wrote: > On Fri, Nov 01 2024 at 00:37, Jarkko Sakkinen wrote: > > On Thu Oct 31, 2024 at 9:25 PM EET, Thomas Gleixner wrote: > >> So this looks pretty reasonable to me by now and I'm inclined to take it > >> through the tip x86 tree, but that needs

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-11-01 Thread Jarkko Sakkinen
On Fri Sep 13, 2024 at 11:04 PM EEST, Ross Philipson wrote: > The larger focus of the TrenchBoot project (https://github.com/TrenchBoot) is > to > enhance the boot security and integrity in a unified manner. The first area of > focus has been on the Trusted Computing Group's Dynamic Launch for >

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-11-01 Thread Jarkko Sakkinen
On Fri Nov 1, 2024 at 11:18 AM EET, Jarkko Sakkinen wrote: > On Fri Nov 1, 2024 at 10:50 AM EET, Ard Biesheuvel wrote: > > On Fri, 1 Nov 2024 at 01:40, Jarkko Sakkinen wrote: > > > > > > On Fri Nov 1, 2024 at 2:33 AM EET, Jarkko Sakkinen wrote: > > > > On Fri Nov 1, 2024 at 1:08 AM EET, Thomas Gle

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-11-01 Thread Jarkko Sakkinen
On Fri Nov 1, 2024 at 10:50 AM EET, Ard Biesheuvel wrote: > On Fri, 1 Nov 2024 at 01:40, Jarkko Sakkinen wrote: > > > > On Fri Nov 1, 2024 at 2:33 AM EET, Jarkko Sakkinen wrote: > > > On Fri Nov 1, 2024 at 1:08 AM EET, Thomas Gleixner wrote: > > > > On Fri, Nov 01 2024 at 00:37, Jarkko Sakkinen wr

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-11-01 Thread Ard Biesheuvel
On Fri, 1 Nov 2024 at 01:40, Jarkko Sakkinen wrote: > > On Fri Nov 1, 2024 at 2:33 AM EET, Jarkko Sakkinen wrote: > > On Fri Nov 1, 2024 at 1:08 AM EET, Thomas Gleixner wrote: > > > On Fri, Nov 01 2024 at 00:37, Jarkko Sakkinen wrote: > > > > On Thu Oct 31, 2024 at 9:25 PM EET, Thomas Gleixner wro

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-10-31 Thread Jarkko Sakkinen
On Fri Nov 1, 2024 at 2:33 AM EET, Jarkko Sakkinen wrote: > On Fri Nov 1, 2024 at 1:08 AM EET, Thomas Gleixner wrote: > > On Fri, Nov 01 2024 at 00:37, Jarkko Sakkinen wrote: > > > On Thu Oct 31, 2024 at 9:25 PM EET, Thomas Gleixner wrote: > > >> So this looks pretty reasonable to me by now and I'm

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-10-31 Thread Jarkko Sakkinen
On Fri Nov 1, 2024 at 1:08 AM EET, Thomas Gleixner wrote: > On Fri, Nov 01 2024 at 00:37, Jarkko Sakkinen wrote: > > On Thu Oct 31, 2024 at 9:25 PM EET, Thomas Gleixner wrote: > >> So this looks pretty reasonable to me by now and I'm inclined to take it > >> through the tip x86 tree, but that needs

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-10-31 Thread Thomas Gleixner
On Fri, Nov 01 2024 at 00:37, Jarkko Sakkinen wrote: > On Thu Oct 31, 2024 at 9:25 PM EET, Thomas Gleixner wrote: >> So this looks pretty reasonable to me by now and I'm inclined to take it >> through the tip x86 tree, but that needs reviewed/acked-by's from the >> crypto and TPM folks. EFI has bee

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-10-31 Thread Jarkko Sakkinen
On Thu Oct 31, 2024 at 9:25 PM EET, Thomas Gleixner wrote: > On Fri, Sep 13 2024 at 13:04, Ross Philipson wrote: > > The larger focus of the TrenchBoot project (https://github.com/TrenchBoot) > > is to > > enhance the boot security and integrity in a unified manner. The first area > > of > > focu

Re: [PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-10-31 Thread Thomas Gleixner
On Fri, Sep 13 2024 at 13:04, Ross Philipson wrote: > The larger focus of the TrenchBoot project (https://github.com/TrenchBoot) is > to > enhance the boot security and integrity in a unified manner. The first area of > focus has been on the Trusted Computing Group's Dynamic Launch for > establis

[PATCH v11 00/20] x86: Trenchboot secure dynamic launch Linux kernel support

2024-09-13 Thread Ross Philipson
The larger focus of the TrenchBoot project (https://github.com/TrenchBoot) is to enhance the boot security and integrity in a unified manner. The first area of focus has been on the Trusted Computing Group's Dynamic Launch for establishing a hardware Root of Trust for Measurement, also know as DRTM