Xu, Min M ; Tom Lendacky
> ; Leif Lindholm ; Sami
> Mujawar
> Subject: Re: [edk2-devel] [PATCH v4 00/11] Measured SEV boot with
> kernel/initrd/cmdline
>
> On Mon, 2021-07-26 at 00:55 +, Yao, Jiewen wrote:
> > Hi James
> > "However, this ran into problems
On Mon, 2021-07-26 at 00:55 +, Yao, Jiewen wrote:
> Hi James
> "However, this ran into problems when it was decided AmdSev shouldn't
> have it's own Library."
>
> I am not clear on the history. Would you please clarify why AmdSev
> should not have its own library?
The history predates me.
man-Fitzthum
> ; Jim Cadden ; Hubertus Franke
> ; Ard Biesheuvel ; Justen,
> Jordan L ; Ashish Kalra ;
> Brijesh Singh ; Erdem Aktas
> ; Xu, Min M ; Tom Lendacky
> ; Leif Lindholm ; Sami
> Mujawar
> Subject: Re: [edk2-devel] [PATCH v4 00/11] Measured SEV boot with
> kernel
On Sun, 2021-07-25 at 10:52 +0300, Dov Murik wrote:
> And I do have one question:
> > May I know what is criteria to put a SEV module to OvmfPkg\AmdSev
> > or OvmfPkg directly?
> >
> > My original understanding is:
> > If a module is required by OvmfPkg{Ia32,Ia32X64,X64}.{dsc,fdf},
> > then it
> Cc: Tobin Feldman-Fitzthum ; Tobin Feldman-Fitzthum
>> ; Jim Cadden ; James Bottomley
>> ; Hubertus Franke ; Ard Biesheuvel
>> ; Justen, Jordan L ;
>> Ashish Kalra ; Brijesh Singh ;
>> Erdem Aktas ; Xu, Min M ;
>> Tom Lendacky ; Leif Lindholm
>> ; Sami Mujawa
Biesheuvel
> ; Justen, Jordan L ;
> Ashish Kalra ; Brijesh Singh ;
> Erdem Aktas ; Xu, Min M ;
> Tom Lendacky ; Leif Lindholm
> ; Sami Mujawar ; Dov Murik
>
> Subject: Re: [edk2-devel] [PATCH v4 00/11] Measured SEV boot with
> kernel/initrd/cmdline
>
> Hi Jiewen,
>
&g
ps.io
>> Cc: Dov Murik ; Tobin Feldman-Fitzthum
>> ; Tobin Feldman-Fitzthum ; Jim
>> Cadden ; James Bottomley ;
>> Hubertus Franke ; Ard Biesheuvel
>> ; Justen, Jordan L ;
>> Ashish Kalra ; Brijesh Singh ;
>> Erdem Aktas ; Yao, Jiewen ;
>> Xu, Min M ; Tom
holm ; Sami
> Mujawar
> Subject: [edk2-devel] [PATCH v4 00/11] Measured SEV boot with
> kernel/initrd/cmdline
>
> BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3457
>
> Booting with SEV prevented the loading of kernel, initrd, and kernel
> command-line via QEMU fw_cfg
BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3457
Booting with SEV prevented the loading of kernel, initrd, and kernel
command-line via QEMU fw_cfg interface because they arrive from the VMM
which is untrusted in SEV.
However, in some cases the kernel, initrd, and cmdline are not secret
