[edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF

[Min Xu]

In today's TianoCore Design Meeting we reviewed the Overview Section (from slide 1 to 20). Thanks much for the valuable feedbacks and comments. The meeting minutes will be sent out soon.

To address the concerns of the *one binary* solution in previous discussion, we propose 2 Configurations for TDVF to upstream. (slide 6 - 8)



Config-A:

  *   Merge the *basic* TDVF feature to existing OvmfX64Pkg.dsc. (Align with existing SEV)
  *   Threat model: VMM is NOT out of TCB. (We don't make things worse.)
  *   The OvmfX64Pkg.dsc includes SEV/TDX/normal OVMF basic boot capability. The final binary can run on SEV/TDX/normal OVMF
  *   No changes to existing OvmfPkgX64 image layout.
  *   No need to add additional security features if they do not exist today
  *   No need to remove features if they exist today.
  *   RTMR is not supported
  *   PEI phase is NOT skipped in either Td or Non-Td



Config-B:

  *   Add a standalone IntelTdx.dsc to a TDX specific directory for a *full* feature TDVF. (Align with existing SEV)
  *   Threat model: VMM is out of TCB. (We need necessary change to prevent attack from VMM)
  *   IntelTdx.dsc includes TDX/normal OVMF basic boot capability. The final binary can run on TDX/normal OVMF
  *   It might eventually merge with AmdSev.dsc, but NOT at this point of time. And we don't know when it will happen. We need sync with AMD in the community, after both of us think the solutions are mature to merge.
  *   Need to add necessary security feature as mandatory requirement, such as RTMR based Trusted Boot support
  *   Need to remove unnecessary attack surfaces, such as network stack.


From: devel at edk2.groups.io <devel at edk2.groups.io> On Behalf Of Min Xu
Sent: Friday, June 11, 2021 6:30 AM
To: devel at edk2.groups.io; Yao, Jiewen <jiewen.yao at intel.com>; rfc at edk2.groups.io
Cc: jejb at linux.ibm.com; Laszlo Ersek <lersek at redhat.com>; Brijesh Singh <brijesh.singh at amd.com>; Tom Lendacky <thomas.lendacky at amd.com>; erdemaktas at google.com; cho at microsoft.com; bret.barkelew at microsoft.com; Jon Lange <jlange at microsoft.com>; Karen Noel <knoel at redhat.com>; Paolo Bonzini <pbonzini at redhat.com>; Nathaniel McCallum <npmccallum at redhat.com>; Dr. David Alan Gilbert <dgilbert at redhat.com>; Ademar de Souza Reis Jr. <areis at redhat.com>
Subject: Re: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF

Hi, All
Thanks much for the valuable comments and discussion about the design.
We have updated the slides (v0.9) in below link. If some comments or concerns are not answered/addressed in the new slides, please don't hesitate to tell us. We do want to answer/address all the comments/concerns. But to be honest it is a rather complicated one and we appreciate your feedbacks.
https://edk2.groups.io/g/devel/files/Designs/2021/0611/TDVF_Design_Review%28v0.9%29.pptx

Thanks much!

Xu Min


From: devel at edk2.groups.io<mailto:devel at edk2.groups.io> <devel at edk2.groups.io<mailto:devel at edk2.groups.io>> On Behalf Of Yao, Jiewen
Sent: Thursday, June 3, 2021 9:51 PM
To: rfc at edk2.groups.io<mailto:rfc at edk2.groups.io>; devel at edk2.groups.io<mailto:devel at edk2.groups.io>
Cc: jejb at linux.ibm.com<mailto:jejb at linux.ibm.com>; Laszlo Ersek <lersek at redhat.com<mailto:lersek at redhat.com>>; Brijesh Singh <brijesh.singh at amd.com<mailto:brijesh.singh at amd.com>>; Tom Lendacky <thomas.lendacky at amd.com<mailto:thomas.lendacky at amd.com>>; erdemaktas at google.com<mailto:erdemaktas at google.com>; cho at microsoft.com<mailto:cho at microsoft.com>; bret.barkelew at microsoft.com<mailto:bret.barkelew at microsoft.com>; Jon Lange <jlange at microsoft.com<mailto:jlange at microsoft.com>>; Karen Noel <knoel at redhat.com<mailto:knoel at redhat.com>>; Paolo Bonzini <pbonzini at redhat.com<mailto:pbonzini at redhat.com>>; Nathaniel McCallum <npmccallum at redhat.com<mailto:npmccallum at redhat.com>>; Dr. David Alan Gilbert <dgilbert at redhat.com<mailto:dgilbert at redhat.com>>; Ademar de Souza Reis Jr. <areis at redhat.com<mailto:areis at redhat.com>>
Subject: [edk2-rfc] [edk2-devel] RFC: design review for TDVF in OVMF

Hi, All
We plan to do a design review for TDVF in OVMF package.


The TDVF Design slides for TinaoCore Design Review Meeting (Jun 11) is now available in blow link: https://edk2.groups.io/g/devel/files/Designs/2021/0611.

The Bugzilla is https://bugzilla.tianocore.org/show_bug.cgi?id=3429



You can have an offline review first. You comments will be warmly welcomed and we will continuously update the slides based on the feedbacks.



Thank you

Yao Jiewen








-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#76367): https://edk2.groups.io/g/devel/message/76367
Mute This Topic: https://groups.io/mt/83283616/1813853
Group Owner: devel+owner at edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [edk2-devel-archive at redhat.com]
-=-=-=-=-=-=-=-=-=-=-=-


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/edk2-devel-archive/attachments/20210611/c8b5a4cb/attachment.htm>