<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word"> <div class="WordSection1"> In today’s TianoCore Design Meeting we reviewed the Overview Section (from slide 1 to 20). Thanks much for the valuable feedbacks and comments. The meeting minutes will be sent out soon. <o:p></o:p> <o:p> </o:p> To address the concerns of the *one binary* solution in previous discussion, we propose 2 Configurations for TDVF to upstream. (slide 6 - 8)<o:p></o:p> <o:p> </o:p> Config-A: <o:p></o:p> <ul style="margin-top:0in" type="disc"> <li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">Merge the *basic* TDVF feature to existing OvmfX64Pkg.dsc. (Align with existing SEV) <o:p></o:p></li><li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">Threat model: VMM is NOT out of TCB. (We don’t make things worse.) <o:p></o:p></li><li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">The OvmfX64Pkg.dsc includes SEV/TDX/normal OVMF basic boot capability. The final binary can run on SEV/TDX/normal OVMF<o:p></o:p></li><li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">No changes to existing OvmfPkgX64 image layout.<o:p></o:p></li><li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">No need to add additional security features if they do not exist today<o:p></o:p></li><li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">No need to remove features if they exist today.<o:p></o:p></li><li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">RTMR is not supported<o:p></o:p></li><li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">PEI phase is NOT skipped in either Td or Non-Td<o:p></o:p></li></ul> <o:p></o:p> Config-B:<o:p></o:p> <ul style="margin-top:0in" type="disc"> <li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">Add a standalone IntelTdx.dsc to a TDX specific directory for a *full* feature TDVF. (Align with existing SEV) <o:p></o:p></li><li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">Threat model: VMM is out of TCB. (We need necessary change to prevent attack from VMM)<o:p></o:p></li><li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">IntelTdx.dsc includes TDX/normal OVMF basic boot capability. The final binary can run on TDX/normal OVMF<o:p></o:p></li><li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">It might eventually merge with AmdSev.dsc, but NOT at this point of time. And we don’t know when it will happen. We need sync with AMD in the community, after both of us think the solutions are mature to merge.<o:p></o:p></li><li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">Need to add necessary security feature as mandatory requirement, such as RTMR based Trusted Boot support<o:p></o:p></li><li class="MsoPlainText" style="margin-left:-13.0pt;mso-list:l1 level1 lfo2">Need to remove unnecessary attack surfaces, such as network stack.<o:p></o:p></li></ul> <o:p> </o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> From: devel@edk2.groups.io <devel@edk2.groups.io> On Behalf Of Min Xu Sent: Friday, June 11, 2021 6:30 AM To: devel@edk2.groups.io; Yao, Jiewen <jiewen.yao@intel.com>; rfc@edk2.groups.io Cc: jejb@linux.ibm.com; Laszlo Ersek <lersek@redhat.com>; Brijesh Singh <brijesh.singh@amd.com>; Tom Lendacky <thomas.lendacky@amd.com>; erdemaktas@google.com; cho@microsoft.com; bret.barkelew@microsoft.com; Jon Lange <jlange@microsoft.com>; Karen Noel <knoel@redhat.com>; Paolo Bonzini <pbonzini@redhat.com>; Nathaniel McCallum <npmccallum@redhat.com>; Dr. David Alan Gilbert <dgilbert@redhat.com>; Ademar de Souza Reis Jr. <areis@redhat.com> Subject: Re: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF<o:p></o:p> </div> </div> <o:p> </o:p> Hi, All<o:p></o:p> Thanks much for the valuable comments and discussion about the design. <o:p></o:p> We have updated the slides (v0.9) in below link. If some comments or concerns are not answered/addressed in the new slides, please don’t hesitate to tell us. We do want to answer/address all the comments/concerns. But to be honest it is a rather complicated one and we appreciate your feedbacks. <o:p></o:p> <a href="https://edk2.groups.io/g/devel/files/Designs/2021/0611/TDVF_Design_Review%28v0.9%29.pptx">https://edk2.groups.io/g/devel/files/Designs/2021/0611/TDVF_Design_Review%28v0.9%29.pptx</a><o:p></o:p> <o:p> </o:p> Thanks much!<o:p></o:p> <o:p> </o:p> Xu Min<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> From: <a href="mailto:devel@edk2.groups.io">devel@edk2.groups.io</a> <<a href="mailto:devel@edk2.groups.io">devel@edk2.groups.io</a>> On Behalf Of Yao, Jiewen Sent: Thursday, June 3, 2021 9:51 PM To: <a href="mailto:rfc@edk2.groups.io">rfc@edk2.groups.io</a>; <a href="mailto:devel@edk2.groups.io"> devel@edk2.groups.io</a> Cc: <a href="mailto:jejb@linux.ibm.com">jejb@linux.ibm.com</a>; Laszlo Ersek <<a href="mailto:lersek@redhat.com">lersek@redhat.com</a>>; Brijesh Singh <<a href="mailto:brijesh.singh@amd.com">brijesh.singh@amd.com</a>>; Tom Lendacky <<a href="mailto:thomas.lendacky@amd.com">thomas.lendacky@amd.com</a>>; <a href="mailto:erdemaktas@google.com">erdemaktas@google.com</a>; <a href="mailto:cho@microsoft.com"> cho@microsoft.com</a>; <a href="mailto:bret.barkelew@microsoft.com">bret.barkelew@microsoft.com</a>; Jon Lange <<a href="mailto:jlange@microsoft.com">jlange@microsoft.com</a>>; Karen Noel <<a href="mailto:knoel@redhat.com">knoel@redhat.com</a>>; Paolo Bonzini <<a href="mailto:pbonzini@redhat.com">pbonzini@redhat.com</a>>; Nathaniel McCallum <<a href="mailto:npmccallum@redhat.com">npmccallum@redhat.com</a>>; Dr. David Alan Gilbert <<a href="mailto:dgilbert@redhat.com">dgilbert@redhat.com</a>>; Ademar de Souza Reis Jr. <<a href="mailto:areis@redhat.com">areis@redhat.com</a>> Subject: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF<o:p></o:p> </div> </div> <o:p> </o:p> Hi, All<o:p></o:p> We plan to do a design review for TDVF in OVMF package.<o:p></o:p> <o:p> </o:p> The TDVF Design slides for TinaoCore Design Review Meeting (Jun 11) is now available in blow link: <a href="https://edk2.groups.io/g/devel/files/Designs/2021/0611">https://edk2.groups.io/g/devel/files/Designs/2021/0611</a>.<o:p></o:p> The Bugzilla is <a href="https://bugzilla.tianocore.org/show_bug.cgi?id=3429"> https://bugzilla.tianocore.org/show_bug.cgi?id=3429</a><o:p></o:p> <o:p> </o:p> You can have an offline review first. You comments will be warmly welcomed and we will continuously update the slides based on the feedbacks.<o:p></o:p> <o:p> </o:p> Thank you<o:p></o:p> Yao Jiewen<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <o:p> </o:p> <div> </o:p> </div> </div> </body> </html> <div width="1" style="color:white;clear:both">_._,_._,_</div> <hr> Groups.io Links: You receive all messages sent to this group. <a target="_blank" href="https://edk2.groups.io/g/devel/message/76367">View/Reply Online (#76367)</a> | | <a target="_blank" href="https://groups.io/mt/83283616/1813853">Mute This Topic</a> | <a href="https://edk2.groups.io/g/devel/post">New Topic</a> <a href="https://edk2.groups.io/g/devel/editsub/1813853">Your Subscription</a> | <a href="mailto:devel+owner@edk2.groups.io">Contact Group Owner</a> | <a href="https://edk2.groups.io/g/devel/unsub">Unsubscribe</a> [edk2-devel-archive@redhat.com] <div width="1" style="color:white;clear:both">_._,_._,_</div>