Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

loader/multiboot_mbi2.c: disable UEFI BS when booting with slaunch #27

Closed
wants to merge 1 commit into from

Conversation

krystian-hebel
Copy link
Member

MLE (kernel or Xen) can't use pre-DLE services, as those are not measured as part of DRTM. To make sure this is true, disable boot services before MBI is created, which will ensure that all required data is obtained and saved in MBI while it is available.

BS are disabled before call to grub_multiboot2_get_mbi_size(), so the amount of allocated memory will be sufficient.

MLE (kernel or Xen) can't use pre-DLE services, as those are not
measured as part of DRTM. To make sure this is true, disable boot
services before MBI is created, which will ensure that all required
data is obtained and saved in MBI while it is available.

BS are disabled before call to grub_multiboot2_get_mbi_size(), so
the amount of allocated memory will be sufficient.

Signed-off-by: Krystian Hebel <[email protected]>
@SergiiDmytruk
Copy link
Member

Closing in favor of merged #28. The approach here is simpler, but it doesn't work well in practice because neither Xen nor Linux in Dom0 expect to boot this way and end up confused trying to do a legacy boot on an EFI system.

@SergiiDmytruk SergiiDmytruk deleted the aem-qubes-4.2.3-uefi branch February 20, 2025 09:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants