Re: VMM avoid duplication and reduce atack surface with octboot(4)

2022-03-22 Thread Bryan Steele
On Wed, Mar 23, 2022 at 04:27:40AM +, Alexis wrote: > Indeed I understood both octboot and vmm seabios/uefi initialazation process. > > But has its done with kexec and linuxboot coreboot payload octboot could be > ported to act in the same way. Explaining now again for the 3rd time, to >

Re: VMM avoid duplication and reduce atack surface with octboot(4)

2022-03-22 Thread Mike Larkin
On Wed, Mar 23, 2022 at 04:27:40AM +, Alexis wrote: > Indeed I understood both octboot and vmm seabios/uefi initialazation process. > > But has its done with kexec and linuxboot coreboot payload octboot could be > ported to act in the same way. Explaining now again for the 3rd time, to >

Re: VMM avoid duplication and reduce atack surface with octboot(4)

2022-03-22 Thread Philip Guenther
On Tue, Mar 22, 2022 at 6:04 PM Alexis wrote: > > english is not my native language my point is octboot good be used to > make openbsd the bootloader on vmm therefore no need to maintaine other > upstream stacks, therefore avoiding duplication and reducing atack surface > like it was done on that

Re: VMM avoid duplication and reduce atack surface with octboot(4)

2022-03-22 Thread Mike Larkin
On Wed, Mar 23, 2022 at 12:58:41AM +, Alexis wrote: > Have vmm/vmd core developers ever thought of using octboot has a way to u > se openbsd has a bootloader to avoid stack duplication, and attached atack > surface reduction. Avoiding to maintain 2 stacks, seabios/uefi and host > vm, could be

Re: VMM avoid duplication and reduce atack surface with octboot(4)

2022-03-22 Thread Theo de Raadt
Alexis wrote: > That is the beauty of it. > With octboot(4) only 1 would be necessary Don't be stupid.

Re: VMM avoid duplication and reduce atack surface with octboot(4)

2022-03-22 Thread Theo de Raadt
Alexis wrote: > Have vmm/vmd core developers ever thought of using octboot has a way to u > se openbsd has a bootloader to avoid stack duplication, and attached atack > surface reduction. Avoiding to maintain 2 stacks, seabios/uefi and host > vm, could be a simple way to improve vmm for HVM or