Re: [PATCH v2 20/22] x86/slaunch: support EFI boot

2025-05-15 Thread Sergii Dmytruk
On Wed, May 14, 2025 at 11:58:49AM -0400, Demi Marie Obenour wrote: > On 5/14/25 10:24 AM, Sergii Dmytruk wrote: > > On Tue, May 13, 2025 at 09:25:44PM -0400, Demi Marie Obenour wrote: > >> On 5/13/25 1:05 PM, Sergii Dmytruk wrote: > > That sentence in the commit message is worth rewording. GRUB i

Re: [PATCH v2 20/22] x86/slaunch: support EFI boot

2025-05-14 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Wed, May 14, 2025 at 11:58:49AM -0400, Demi Marie Obenour wrote: > Why is it better for Xen to rely on the bootloader to implement the > specification, instead of xen.efi itself implementing secure launch? > That would make secure launch significa

Re: [PATCH v2 20/22] x86/slaunch: support EFI boot

2025-05-14 Thread Demi Marie Obenour
On 5/14/25 10:24 AM, Sergii Dmytruk wrote: > On Tue, May 13, 2025 at 09:25:44PM -0400, Demi Marie Obenour wrote: >> On 5/13/25 1:05 PM, Sergii Dmytruk wrote: >>> When running on an EFI-enabled system, Xen needs to have access to Boot >>> Services in order to initialize itself properly and reach a s

Re: [PATCH v2 20/22] x86/slaunch: support EFI boot

2025-05-14 Thread Sergii Dmytruk
On Tue, May 13, 2025 at 09:25:44PM -0400, Demi Marie Obenour wrote: > On 5/13/25 1:05 PM, Sergii Dmytruk wrote: > > When running on an EFI-enabled system, Xen needs to have access to Boot > > Services in order to initialize itself properly and reach a state in > > which a dom0 kernel can operate wi

Re: [PATCH v2 20/22] x86/slaunch: support EFI boot

2025-05-13 Thread Demi Marie Obenour
On 5/13/25 1:05 PM, Sergii Dmytruk wrote: > When running on an EFI-enabled system, Xen needs to have access to Boot > Services in order to initialize itself properly and reach a state in > which a dom0 kernel can operate without issues. > > This means that DRTM must be started in the middle of Xen

[PATCH v2 20/22] x86/slaunch: support EFI boot

2025-05-13 Thread Sergii Dmytruk
When running on an EFI-enabled system, Xen needs to have access to Boot Services in order to initialize itself properly and reach a state in which a dom0 kernel can operate without issues. This means that DRTM must be started in the middle of Xen's initialization process. This effect is achieved