Re: [coreboot] Neither seaBIOS or GRUB payloads are able to boot gentoo [amd_pmu_init performance counters freeze] [KGPE-D16]

> The stack trace would help. This is probably a kernel issue; Gentoo may > have enabled a little-used feature and it may not work correctly under > coreboot. Need the trace to debug further. Completely on the same page with Timothy. Without the logs nothing could be achieved. Please, could you

[coreboot] Request on AGESA testing

Hello folks I am about to flip AGESA boards to have MMCONF_SUPPORT_DEFAULT=y. If you don't know what that means, just ignore it. Nevertheless, now would be a good time to do a fresh build of your board and have it recorded in our supported boards database. Also, I would be interested in runs

Re: [coreboot] DMA protection? [AMD-Vi]

Interesting thread. I would like to thank you to all for very/extremely interesting read. And this thread forced me to start thinking/focusing about these problems you have outlined here. I have no idea how things are handled in Coreboot regarding VT-x and VT-d. I do know how these two HW

Re: [coreboot] DMA protection? [AMD-Vi]

On Mon, Nov 21, 2016 at 10:54 AM Rudolf Marek wrote: > > > BME is ignored by Intel integrated graphics - the DMA runs even if the BME > is > clear (this happens on core i7 chipsets for example) Thus thatswhy it > needs RMRR > IOMMU range for VGA... > > wow. It's amazing

Re: [coreboot] DMA protection? [AMD-Vi]

Hi all, Let me jump in. From the OS point of view the BME should be set for: 1) PCI bridges 2) for PCI class of IOAPIC devices (otherwise OS will not get any interrupt!) This PCI IOAPIC is for example on more high-end Xeons 3) sometimes it needs to be set on internal chipset devices. I

Re: [coreboot] DMA protection? [AMD-Vi]

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/21/2016 11:26 AM, ron minnich wrote: > > > On Mon, Nov 21, 2016 at 9:21 AM Timothy Pearson > > > wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > >

Re: [coreboot] DMA protection? [AMD-Vi]

On Mon, Nov 21, 2016 at 9:21 AM Timothy Pearson < tpear...@raptorengineering.com> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 11/21/2016 10:43 AM, ron minnich wrote: > > Talidan, just be aware, you can spend the money on enabling IOMMU in > > coreboot, but you should not just

Re: [coreboot] DMA protection? [AMD-Vi]

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/21/2016 10:43 AM, ron minnich wrote: > Talidan, just be aware, you can spend the money on enabling IOMMU in > coreboot, but you should not just assumed that it gets upstreamed. That's why I was suggesting we discuss mitigating DMA attacks

Re: [coreboot] DMA protection? [AMD-Vi]

Talidan, just be aware, you can spend the money on enabling IOMMU in coreboot, but you should not just assumed that it gets upstreamed. Enabling IOMMU on one implementation of one CPU from one vendor for one generation is not a really compelling idea, at least for me. You don't want to confuse

Re: [coreboot] DMA protection? [AMD-Vi]

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/21/2016 10:16 AM, ron minnich wrote: > > > On Mon, Nov 21, 2016 at 7:53 AM Timothy Pearson > > > wrote: > > > > A quick check through the source seems to indicate

Re: [coreboot] DMA protection? [AMD-Vi]

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/19/2016 02:24 PM, taii...@gmx.com wrote: > > > You the man! Very informative >:D > > > Was the card malicious or just horribly programmed? > > How much would it run for you fellas to make DMA protection happen? At this point I'm not

Re: [coreboot] DMA protection? [AMD-Vi]

On Mon, Nov 21, 2016 at 7:53 AM Timothy Pearson < tpear...@raptorengineering.com> wrote: > > > A quick check through the source seems to indicate that the generic > pci_set_resource function will enable bus mastering on any PCI bridges. > From that point on, if I'm not mistaken, any malicious

Re: [coreboot] Neither seaBIOS or GRUB payloads are able to boot gentoo [amd_pmu_init performance counters freeze] [KGPE-D16]

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/20/2016 01:29 PM, taii...@gmx.com wrote: > I have tried booting with multiple gentoo kernels but every time it > either hangs on amd_pmu_init ("amd performance counters") with a stack > trace or simply black screens and reboots quickly. The

Re: [coreboot] DMA protection? [AMD-Vi]

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/20/2016 05:56 PM, ron minnich wrote: > man. Most of these BME things revolve around intel. Not surprising, but > not good. > > Does anyone care about the realtek 8168? And why on earth does it need > BME? Can it just be initialized but not have

Re: [coreboot] using overlayfs to have several coreboot dev envs

I've been working on adding configs (miniconfigs) for abuild as well. The plan is to have a coreboot/configs directory with all of the configs there. Two alternatives that were discussed were coreboot/configs/VENDOR/MAINBOARD and just putting the configs in the existing