20 messages in com.xensource.lists.xen-develRE: [Xense-devel] RE: [Xen-devel] [PA...
FromSent OnAttachments
Cihula, Joseph26 Oct 2007 18:56.patch
Keir Fraser27 Oct 2007 01:14 
Cihula, Joseph27 Oct 2007 13:38 
Keir Fraser27 Oct 2007 23:24 
Keir Fraser29 Oct 2007 02:29 
Cihula, Joseph29 Oct 2007 08:38 
Keir Fraser29 Oct 2007 08:48 
Cihula, Joseph29 Oct 2007 09:53 
Keir Fraser29 Oct 2007 09:56 
Cihula, Joseph29 Oct 2007 10:05 
Keir Fraser29 Oct 2007 10:16 
Cihula, Joseph29 Oct 2007 10:40 
Keir Fraser29 Oct 2007 10:51 
Keir Fraser29 Oct 2007 11:00 
Cihula, Joseph29 Oct 2007 11:00 
Keir Fraser29 Oct 2007 11:04 
Cihula, Joseph29 Oct 2007 11:34 
Keir Fraser29 Oct 2007 11:46 
Cihula, Joseph29 Oct 2007 12:26 
Cihula, Joseph29 Oct 2007 18:08.patch
Subject:RE: [Xense-devel] RE: [Xen-devel] [PATCH] Intel(R) Trusted ExecutionTechnology support
From:Cihula, Joseph (jose@intel.com)
Date:10/29/2007 06:08:46 PM
List:com.xensource.lists.xen-devel
Attachments:

Attached is a patch with a new Makefile (diff'ed from vanilla Xen) that creates optional targets for tboot and uses the newly-posted release (20071029) from SF. I have also added some text at the end of the README file to describe Intel(R) TXT and tboot and how to build them using the targets.

The new tboot release implements the 'tboot=0x1234' command line interface described below for passing the physical address of the tboot shared page to Xen. It includes a few other cleanups as well, as can be seen in the changelog.

Joe

On Monday, October 29, 2007 11:47 AM, Keir Fraser wrote:

On 29/10/07 18:34, "Cihula, Joseph" <jose@intel.com> wrote:

Okay, we should limit the scan to page-aligned addresses in UNUSABLE regions below 1MB. It makes sense to put the UNUSABLE->RESERVED hack in Xen itself, rather than in tboot. Once the interface is baked into 3.2.0 it's not changing on our side.

I'd like to allow for the shared page to be moved to a higher memory location in the future, so I'd prefer not to limit the search to below 1MB. Since only tboot is using the UNUSABLE type and it should find the shared page in the first UNUSABLE section anyway (whether it gets moved or not), the search should still be quick. Also, I'll only change the type from UNUSABLE->RESERVED if it is found in the lower 1MB.

Actually I have a better idea to avoid the scan entirely. tboot should append 'tboot=<address of shared area>' to Xen's command line (e.g., tboot=0x71000). This gives a better more guaranteed handoff from tboot to Xen, it avoids the user needing to manually add any options to Xen's command line (we can make tboot= imply no-real-mode), and means that rather than doing a scan we simply need to confirm the UUID is at the given address.

I can easily do the Xen side of this if you agree it makes sense.

Sounds good. I'll work up a patch for tboot and post a new tarball tonight.