Re: [Qemu-devel] [edk2] [PATCH v2 0/8] RFC: ovmf: preliminary TPM2 support
It works in my side after specify the full path to swtpm tpmemu.sock in qemu command options. Thanks! Steven Shi Intel\SSG\STO\UEFI Firmware Tel: +86 021-61166522 iNet: 821-6522 > -Original Message- > From: Stefan Berger [mailto:stef...@linux.vnet.ibm.com] > Sent: Friday, March 9, 2018 9:54 PM > To: Shi, Steven ; Marc-André Lureau > > Cc: edk2-de...@lists.01.org; ler...@redhat.com; pjo...@redhat.com; Yao, > Jiewen ; qemu-devel@nongnu.org; > javi...@redhat.com > Subject: Re: [edk2] [PATCH v2 0/8] RFC: ovmf: preliminary TPM2 support > > On 03/08/2018 10:03 PM, Shi, Steven wrote: > > Hi Marcandre, > > Thanks for your command steps and I tried them, but my qemu failed to > connect the socket tpmemu.sock. When I added the control channel to the > TPM, the swtpm socket command stuck there and never exit. Not sure > whether it was successful. > > Below are the command steps running output in my side > > > >> Then you can run: > >> mkdir tpmstatedir > >> swtpm_setup.sh --tpm2 --tpm-state tpmstatedir > > $ swtpm_setup.sh --tpm2 --tpm-state tpmstatedir > > Starting vTPM manufacturing as jshi19:jshi19 @ 2018年03月09日 星期 > 五 10时28分39秒 > > TPM is listening on TCP port 47364. > > Successfully authored TPM state. > > Ending vTPM manufacturing @ 2018年03月09日 星期五 10时28分39 > 秒 > > > >> Run the emulator: > >> swtpm socket --tpmstate dir=tpmstatedir --ctrl > type=unixio,path=tpmemu.sock --tpm2 > > $ swtpm socket --tpmstate dir=tpmstatedir --ctrl > type=unixio,path=tpmemu.sock --tpm2 > > (the swtpm socket command stuck there and never exit) > > > >> Run qemu (from git) with ovmf (with this series): > >> qemu ... -chardev socket,id=chrtpm,path=tpmemu.sock -tpmdev > >> emulator,id=tpm0,chardev=chrtpm -device tpm-crb,tpmdev=tpm0 > >> -drive if=pflash,format=raw,file=OVMF_CODE.fd,readonly -drive > >> if=pflash,format=raw,file=OVMF_VARS.fd .. > > $ qemu-system-x86_64 -serial file:serial.log -m 5120 -hda fat:. -monitor > stdio --enable-kvm -smp 4 -bios ../Ovmf3264/NOOPT_GCC5/FV/OVMF.fd - > chardev socket,id=chrtpm,path=tpmemu.sock -tpmdev > emulator,id=tpm0,chardev=chrtpm -device tpm-crb,tpmdev=tpm0 > > qemu-system-x86_64: -chardev socket,id=chrtpm,path=tpmemu.sock: > Failed to connect socket tpmemu.sock: No such file or directory > > Try giving it both, swtpm and qemu, the full path to the socket. > > > > > > I use the latest version qemu as below: > > $ qemu-system-x86_64 --version > > QEMU emulator version 2.11.50 (v2.10.0-4184-g930b01138b-dirty) > > Copyright (c) 2003-2017 Fabrice Bellard and the QEMU Project developers > > > > Thanks > > Steven Shi > >
Re: [Qemu-devel] [edk2] [PATCH v2 0/8] RFC: ovmf: preliminary TPM2 support
On 03/08/2018 10:03 PM, Shi, Steven wrote: Hi Marcandre, Thanks for your command steps and I tried them, but my qemu failed to connect the socket tpmemu.sock. When I added the control channel to the TPM, the swtpm socket command stuck there and never exit. Not sure whether it was successful. Below are the command steps running output in my side Then you can run: mkdir tpmstatedir swtpm_setup.sh --tpm2 --tpm-state tpmstatedir $ swtpm_setup.sh --tpm2 --tpm-state tpmstatedir Starting vTPM manufacturing as jshi19:jshi19 @ 2018年03月09日 星期五 10时28分39秒 TPM is listening on TCP port 47364. Successfully authored TPM state. Ending vTPM manufacturing @ 2018年03月09日 星期五 10时28分39秒 Run the emulator: swtpm socket --tpmstate dir=tpmstatedir --ctrl type=unixio,path=tpmemu.sock --tpm2 $ swtpm socket --tpmstate dir=tpmstatedir --ctrl type=unixio,path=tpmemu.sock --tpm2 (the swtpm socket command stuck there and never exit) Run qemu (from git) with ovmf (with this series): qemu ... -chardev socket,id=chrtpm,path=tpmemu.sock -tpmdev emulator,id=tpm0,chardev=chrtpm -device tpm-crb,tpmdev=tpm0 -drive if=pflash,format=raw,file=OVMF_CODE.fd,readonly -drive if=pflash,format=raw,file=OVMF_VARS.fd .. $ qemu-system-x86_64 -serial file:serial.log -m 5120 -hda fat:. -monitor stdio --enable-kvm -smp 4 -bios ../Ovmf3264/NOOPT_GCC5/FV/OVMF.fd -chardev socket,id=chrtpm,path=tpmemu.sock -tpmdev emulator,id=tpm0,chardev=chrtpm -device tpm-crb,tpmdev=tpm0 qemu-system-x86_64: -chardev socket,id=chrtpm,path=tpmemu.sock: Failed to connect socket tpmemu.sock: No such file or directory Try giving it both, swtpm and qemu, the full path to the socket. I use the latest version qemu as below: $ qemu-system-x86_64 --version QEMU emulator version 2.11.50 (v2.10.0-4184-g930b01138b-dirty) Copyright (c) 2003-2017 Fabrice Bellard and the QEMU Project developers Thanks Steven Shi
Re: [Qemu-devel] [edk2] [PATCH v2 0/8] RFC: ovmf: preliminary TPM2 support
Hi Marcandre, Thanks for your command steps and I tried them, but my qemu failed to connect the socket tpmemu.sock. When I added the control channel to the TPM, the swtpm socket command stuck there and never exit. Not sure whether it was successful. Below are the command steps running output in my side > Then you can run: > mkdir tpmstatedir > swtpm_setup.sh --tpm2 --tpm-state tpmstatedir $ swtpm_setup.sh --tpm2 --tpm-state tpmstatedir Starting vTPM manufacturing as jshi19:jshi19 @ 2018年03月09日 星期五 10时28分39秒 TPM is listening on TCP port 47364. Successfully authored TPM state. Ending vTPM manufacturing @ 2018年03月09日 星期五 10时28分39秒 > Run the emulator: > swtpm socket --tpmstate dir=tpmstatedir --ctrl type=unixio,path=tpmemu.sock > --tpm2 $ swtpm socket --tpmstate dir=tpmstatedir --ctrl type=unixio,path=tpmemu.sock --tpm2 (the swtpm socket command stuck there and never exit) > Run qemu (from git) with ovmf (with this series): > qemu ... -chardev socket,id=chrtpm,path=tpmemu.sock -tpmdev > emulator,id=tpm0,chardev=chrtpm -device tpm-crb,tpmdev=tpm0 > -drive if=pflash,format=raw,file=OVMF_CODE.fd,readonly -drive > if=pflash,format=raw,file=OVMF_VARS.fd .. $ qemu-system-x86_64 -serial file:serial.log -m 5120 -hda fat:. -monitor stdio --enable-kvm -smp 4 -bios ../Ovmf3264/NOOPT_GCC5/FV/OVMF.fd -chardev socket,id=chrtpm,path=tpmemu.sock -tpmdev emulator,id=tpm0,chardev=chrtpm -device tpm-crb,tpmdev=tpm0 qemu-system-x86_64: -chardev socket,id=chrtpm,path=tpmemu.sock: Failed to connect socket tpmemu.sock: No such file or directory I use the latest version qemu as below: $ qemu-system-x86_64 --version QEMU emulator version 2.11.50 (v2.10.0-4184-g930b01138b-dirty) Copyright (c) 2003-2017 Fabrice Bellard and the QEMU Project developers Thanks Steven Shi
Re: [Qemu-devel] [edk2] [PATCH v2 0/8] RFC: ovmf: preliminary TPM2 support
Hi On Thu, Mar 8, 2018 at 1:31 PM, Shi, Steven wrote: > Hi Marcandre, >> I test with qemu & swtpm/libtpms (tpm2 branches, swtpm_setup.sh --tpm2 >> --tpm-state tpmstatedir) >> $ swtpm socket --tpmstate tpmstatedir --ctrl type=unixio,path=tpmsock >> --tpm2 & > > Where is the swtpm_setup.sh? And could you tell how to build & install the > swtpm? > You need to compile & install libtpms & swtpm : git clone -b tpm2-preview.rev146.v2 https://github.com/stefanberger/libtpms cd libtpms autoreconf -vfi && ./configure --with-tpm2 --with-openssl && make install git clone -b tpm2-preview.v2 https://github.com/stefanberger/swtpm cd swtpm autoreconf -vfi && ./configure --with-openssl && make install Then you can run: mkdir tpmstatedir swtpm_setup.sh --tpm2 --tpm-state tpmstatedir Run the emulator: swtpm socket --tpmstate dir=tpmstatedir --ctrl type=unixio,path=tpmemu.sock --tpm2 Run qemu (from git) with ovmf (with this series): qemu ... -chardev socket,id=chrtpm,path=tpmemu.sock -tpmdev emulator,id=tpm0,chardev=chrtpm -device tpm-crb,tpmdev=tpm0 -drive if=pflash,format=raw,file=OVMF_CODE.fd,readonly -drive if=pflash,format=raw,file=OVMF_VARS.fd .. cheers -- Marc-André Lureau
Re: [Qemu-devel] [edk2] [PATCH v2 0/8] RFC: ovmf: preliminary TPM2 support
Hi Marcandre, > I test with qemu & swtpm/libtpms (tpm2 branches, swtpm_setup.sh --tpm2 > --tpm-state tpmstatedir) > $ swtpm socket --tpmstate tpmstatedir --ctrl type=unixio,path=tpmsock --tpm2 > & Where is the swtpm_setup.sh? And could you tell how to build & install the swtpm? Thanks Steven Shi