November 2017 - SeaBIOS - mail.coreboot.org

K-TEK-M275TP-FN-BL-ML USB keyboard support
by Аладышев Константин April 28, 2018

April 28, 2018

Hello! I'm having problems with K-TEK-M275TP-FN-BL-ML keyboard (http://www.key-tek.cn/Productview.asp?id=777) It is USB device with keyboard and touchpad combined. It works in OS correctly, but doesn't work in SeaBIOS. I've tried to debug this issue and found that "usb_kbd_setup" function fails on "(epdesc->wMaxPacketSize != 8)" check, cause "epdesc->wMaxPacketSize" is actually 32. I've modified this "if" statement to pass 32 value also and now function completes successfully. But it didn't help to solve my issue. There are no interrupts from keyboard, "ehci_poll_intr" always returns -1 on check: if (token & QTD_STS_ACTIVE) { // No intrs found. return -1; } I don't know what to do now. What should I check next? Does SeaBIOS support USB keyboard+touchpad devices at all?

2 5

[PATCH 0/4] RFC: add CRB TPM device
by marcandre.lureau＠redhat.com Feb. 12, 2018

Feb. 12, 2018

From: Marc-André Lureau <marcandre.lureau(a)redhat.com> Hi, The following series implements a limited TPM CRB driver. The TIS device with a TPM 2.0 seems to be ignored by Windows 10, so I implemented a simple CRB device that I will send shortly on the qemu-devel. With the CRB device, Windows 10 correctly recognized and exchange with a TPM 2.0. As long as the device isn't in qemu, I suppose this series should remain RFC. Feedback welcome! Marc-André Lureau (4): x86: add readq() tpm: generalize init_timeout() tpm: use get_tpm_version() callback WIP: add TPM CRB device support src/hw/tpm_drivers.c | 226 ++++++++++++++++++++++++++++++++++++++++++++++++--- src/hw/tpm_drivers.h | 26 ++++++ src/x86.h | 5 ++ 3 files changed, 245 insertions(+), 12 deletions(-) -- 2.14.1.146.gd35faa819

5 12

[PATCH] paravirt: Allow both Red Hat and Amazon PCI HB subsystem vendor and device ids
by Filippo Sironi Jan. 19, 2018

Jan. 19, 2018

Signed-off-by: Filippo Sironi <sironi(a)amazon.de> --- src/fw/paravirt.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/fw/paravirt.c b/src/fw/paravirt.c index 0770c47b12e7..163b70c6473f 100644 --- a/src/fw/paravirt.c +++ b/src/fw/paravirt.c @@ -83,8 +83,8 @@ static void qemu_detect(void) u16 sv = pci_config_readw(0, PCI_SUBSYSTEM_VENDOR_ID); u16 sd = pci_config_readw(0, PCI_SUBSYSTEM_ID); - if (sv != 0x1af4 || /* Red Hat, Inc */ - sd != 0x1100) /* Qemu virtual machine */ + if (!(sv == 0x1af4 && sd == 0x1100) && /* Red Hat, Inc. QEMU VM */ + !(sv == 0x1d0f && sd == 0x1237)) /* Amazon.com, Inc. i440fx VM */ return; PlatformRunningOn |= PF_QEMU; -- 2.7.4

5 4

[PATCH] docs/Download: Use more secure HTTPS ULRs where possible
by Paul Menzel Dec. 8, 2017

Dec. 8, 2017

Date: Mon, 2 Oct 2017 08:13:13 +0200 Signed-off-by: Paul Menzel <pmenzel(a)molgen.mpg.de> --- docs/Download.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/Download.md b/docs/Download.md index 9b1492a..96369fb 100644 --- a/docs/Download.md +++ b/docs/Download.md @@ -1,11 +1,11 @@ SeaBIOS may be distributed under the terms of the [GNU -LGPLv3](http://www.gnu.org/licenses/lgpl-3.0-standalone.html) license. +LGPLv3](https://www.gnu.org/licenses/lgpl-3.0-standalone.html) license. Both source code and binaries are available. Latest source code ================== -The SeaBIOS project uses the [git](http://git-scm.com/) revision +The SeaBIOS project uses the [git](https://git-scm.com/) revision control system. To download the latest source from revision control, run: @@ -22,6 +22,6 @@ Released versions Released versions of the source code are available at: -<http://code.coreboot.org/p/seabios/downloads/> +<https://code.coreboot.org/p/seabios/downloads/> Please see [releases](Releases) for information on each release. -- 2.14.1

2 1

vga passthrough fail
by Lying Nov. 28, 2017

Nov. 28, 2017

Hello, I encounter a problem, my display is not light when guest running. But it's successful that i check guest with command "ping". Following message is my xml and refer topic from https://libvirt.org/formatdomain.html#elementsHostDev: <hostdev mode='subsystem' type='pci' managed='yes'> <driver name='vfio' /> <source> <address domain='0x0000' bus='0x06' slot='0x02' function='0x0'/> </source> </hostdev>

1 0

Loading Option ROM for SATA Controller Card
by Adam Novak Nov. 27, 2017

Nov. 27, 2017

I've installed a SI-PEX40064 SATA controller card <http://www.sybausa.com/index.php?route=product/product&product_id=156> in my system that I am trying to use with PCI passthrough via Xen, in order to give a guest VM its own real SATA controller so as to not have to deal with virtual disks. Moreover, I want to boot off of a disk attached to the card. The card implements (or pretends to implement) AHCI, so SeaBIOS starts up and can see the attached disk. But SeaBIOS gets a timeout communicating with the disk: |eff9d000| WARNING - Timeout at ahci_port_setup:469! |eff9d000| AHCI/2: device not ready (tf 0x58) The card has a PCI Option ROM, and I think the Option ROM needs to be loaded for the card to work and/or be bootable. But SeaBIOS refuses to load the Option ROM. (My real physical system with Asus EFI firmware and CSM enabled does load the Option ROM for the card when it is installed.) I dug into the code, and it looks like it's the same issue as is mentioned here: https://mail.coreboot.org/pipermail/seabios/2017-June/011425.html Basically, a device is not checked for an option ROM (or an fw_fcg/CBFS-based Option ROM file), and its option ROM is not loaded, if pci->have_driver is set for the device. That field gets set for anything that apparently implements AHCI, so the Option ROMs for AHCI controllers are skipped, even if they are useful. Removing that check causes the option ROM for my card to be loaded, and allows the bootloader stored on the disk attached to the card to start up. I've attached a patch that implements this change, and adds a few more debug messages to explain what is going on. I haven't observed any problems with my patched SeaBIOS under Xen, but I'm not sure why the check was there in the first place (as it wasn't commented), so I can't speak to the repercussions of disabling it on everyone else's machines.

1 0

Re: [SeaBIOS] Fw: Re: Re: Fw: Can VTPM2 support WINDOWS
by Stefan Berger Nov. 24, 2017

Nov. 24, 2017

On 11/23/2017 03:19 PM, Marc-André Lureau wrote: > Hi > > On Thu, Nov 23, 2017 at 8:49 PM, Stefan Berger > <stefanb(a)linux.vnet.ibm.com <mailto:stefanb@linux.vnet.ibm.com>> wrote: > > On 11/23/2017 07:48 AM, jwang(a)whu.edu.cn <mailto:jwang@whu.edu.cn> > wrote: >> >> Hi，Berger， >> >> Thanks. But as I know CRB interface should be for mobile >> platform. We just want to support Windows Server >> 2012. Currently,the Windows Server 2012 can find physical >> TPM2 device. However, for vTPM, the windows server 2012 >> virtual machine just can find a virtual TPM 1.2 device and >> can not find vTPM 2.0 device. We have tried linux such as >> ubuntu and the ubuntu virtual machine can find vTPM 2.0 >> device in seabios 1.10 and our modified qemu-kvm-ev-2.6. >> > My suggestion is to try to pick the patches for QEMU and SeaBIOS > CRB support or wait for the next version of QEMU... > > > I couldn't make Windows work with TPM2 and seabios. However, I have > some patch for ovmf to compile TPM2 support in, and it seem to work > quite ok. I still have to figure out some PhysicalPresence issues > (using swtpm/libtpms). I am busy with other projects now, but you can > take a look at the branches > (https://github.com/elmarco/edk2/tree/tpm2, > https://github.com/elmarco/qemu/tree/tpm) As you can see, work in > progress, and help welcome! Windows seems to need CRB for it to accept the TPM 2... It may work 'better' with UEFI, but the device is also recognized with (patched) SeaBIOS. For Win2012R2 this is also relevant: https://support.microsoft.com/en-us/help/3095701/tpm-2-0-device-can-t-be-re… Stefan > > > Stefan > > >> This problem has been bothering us for a month. Could you >> give us some help? >> >> Best, >> Juan >> >> >> >> >> -----原始邮件----- >> *发件人:*"Stefan Berger" <stefanb(a)linux.vnet.ibm.com >> <mailto:stefanb@linux.vnet.ibm.com>> >> *发送时间:*2017-11-23 03:41:30 (星期四) >> *收件人:* 00011007(a)whu.edu.cn <mailto:00011007@whu.edu.cn> >> *抄送:* >> *主题:* Re: Fw: Can VTPM2 support WINDOWS >> >> On 11/16/2017 08:40 AM, 00011007(a)whu.edu.cn >> <mailto:00011007@whu.edu.cn> wrote: >>> >>> >>> >>> -----原始邮件----- >>> *发件人:*00011007@whu.edu.cn >>> <mailto:00011007@whu.edu.cn> >>> *发送时间:*2017-11-16 17:30:57 (星期四) >>> *收件人:* seabios(a)seabios.org >>> <mailto:seabios@seabios.org> >>> *抄送:* >>> *主题:* Can VTPM2 support WINDOWS >>> >>> Hi,all, >>> >>> We want VTPM2 to support windows virtual machines. >>> So I want to know if the current seabios can support >>> the windows guest OS when the tpm driver can not be >>> modified. The host OS we used is CentOS 7.3 and the >>> seabios version is 1.10.2. The hypervisor is >>> KVM+QEMU. The windows version is windows server 2012 >>> that can automatically support physical TPM2 chip. >>> >> >> I only ever tried with Windows 10 and that requires a CRB >> interface (rather than TIS ) for a TPM2, which we will >> only get with the next version of QEMU. I would assume >> that this is also the case with windows server 2012. >> >> Stefan >> >>> Looking forward to reply as soon as possible. >>> >>> >>> Yours sincerely, >>> >>> Juan >>> >>> >>> ------------------------------------------------------------------------ >>> >>> Best Wishes! >>> *********************************************************************************************** >>> >>> Juan Wang >>> Computer School, Wuhan University >>> Key Laboratory of Aerospace Information Security and >>> Trusted Computing, Ministry of Education >>> Mobile Phone : 18986213038 >>> E-Mail : jwang(a)whu.edu.cn >>> <mailto:jwang@whu.edu.cn> >>> *********************************************************************************************** >>> >>> >>> ** >>> >>> >>> >>> >>> ------------------------------------------------------------------------ >>> >>> Best Wishes! >>> *********************************************************************************************** >>> >>> Juan Wang >>> Computer School, Wuhan University >>> Key Laboratory of Aerospace Information Security and >>> Trusted Computing, Ministry of Education >>> Mobile Phone : 18986213038 >>> E-Mail : jwang(a)whu.edu.cn <mailto:jwang@whu.edu.cn> >>> *********************************************************************************************** >>> >>> >>> ** >> >> >> >> >> >> ------------------------------------------------------------------------ >> >> Best Wishes! >> *********************************************************************************************** >> >> Juan Wang >> Computer School, Wuhan University >> Key Laboratory of Aerospace Information Security and >> Trusted Computing, Ministry of Education >> Mobile Phone : 18986213038 >> E-Mail : jwang(a)whu.edu.cn <mailto:jwang@whu.edu.cn> >> *********************************************************************************************** >> >> >> ** >> >> >> >> >> ------------------------------------------------------------------------ >> >> Best Wishes! >> *********************************************************************************************** >> >> Juan Wang >> Computer School, Wuhan University >> Key Laboratory of Aerospace Information Security and >> Trusted Computing, Ministry of Education >> Mobile Phone : 18986213038 >> E-Mail : jwang(a)whu.edu.cn <mailto:jwang@whu.edu.cn> >> *********************************************************************************************** >> >> >> ** > > > > _______________________________________________ > SeaBIOS mailing list > SeaBIOS(a)seabios.org <mailto:SeaBIOS@seabios.org> > https://mail.coreboot.org/mailman/listinfo/seabios > <https://mail.coreboot.org/mailman/listinfo/seabios> > > > > > -- > Marc-André Lureau

2 1

Fw: Re: Re: Fw: Can VTPM2 support WINDOWS
by jwang＠whu.edu.cn Nov. 23, 2017

Nov. 23, 2017

Hi，Berger， Thanks. But as I know CRB interface should be for mobile platform. We just want to support Windows Server 2012. Currently,the Windows Server 2012 can find physical TPM2 device. However, for vTPM, the windows server 2012 virtual machine just can find a virtual TPM 1.2 device and can not find vTPM 2.0 device. We have tried linux such as ubuntu and the ubuntu virtual machine can find vTPM 2.0 device in seabios 1.10 and our modified qemu-kvm-ev-2.6. This problem has been bothering us for a month. Could you give us some help? Best, Juan -----原始邮件----- 发件人:"Stefan Berger" <stefanb(a)linux.vnet.ibm.com> 发送时间:2017-11-23 03:41:30 (星期四) 收件人:00011007@whu.edu.cn 抄送: 主题: Re: Fw: Can VTPM2 support WINDOWS On 11/16/2017 08:40 AM, 00011007(a)whu.edu.cn wrote: -----原始邮件----- 发件人:00011007@whu.edu.cn 发送时间:2017-11-16 17:30:57 (星期四) 收件人:seabios@seabios.org 抄送: 主题: Can VTPM2 support WINDOWS Hi,all, We want VTPM2 to support windows virtual machines. So I want to know if the current seabios can support the windows guest OS when the tpm driver can not be modified. The host OS we used is CentOS 7.3 and the seabios version is 1.10.2. The hypervisor is KVM+QEMU. The windows version is windows server 2012 that can automatically support physical TPM2 chip. I only ever tried with Windows 10 and that requires a CRB interface (rather than TIS ) for a TPM2, which we will only get with the next version of QEMU. I would assume that this is also the case with windows server 2012. Stefan Looking forward to reply as soon as possible. Yours sincerely, Juan Best Wishes! *********************************************************************************************** Juan Wang Computer School, Wuhan University Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education Mobile Phone : 18986213038 E-Mail : jwang(a)whu.edu.cn *********************************************************************************************** Best Wishes! *********************************************************************************************** Juan Wang Computer School, Wuhan University Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education Mobile Phone : 18986213038 E-Mail : jwang(a)whu.edu.cn *********************************************************************************************** Best Wishes! *********************************************************************************************** Juan Wang Computer School, Wuhan University Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education Mobile Phone : 18986213038 E-Mail : jwang(a)whu.edu.cn *********************************************************************************************** Best Wishes! *********************************************************************************************** Juan Wang Computer School, Wuhan University Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education Mobile Phone : 18986213038 E-Mail : jwang(a)whu.edu.cn ***********************************************************************************************

3 2

Can VTPM2 support WINDOWS
by 00011007＠whu.edu.cn Nov. 16, 2017

Nov. 16, 2017

Hi,all, We want VTPM2 to support windows virtual machines. So I want to know if the current seabios can support the windows guest OS when the tpm driver can not be modified. The host OS we used is CentOS 7.3 and the seabios version is 1.10.2. The hypervisor is KVM+QEMU. The windows version is windows server 2012 that can automatically support physical TPM2 chip. Looking forward to reply as soon as possible. Yours sincerely, Juan Best Wishes! *********************************************************************************************** Juan Wang Computer School, Wuhan University Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education Mobile Phone : 18986213038 E-Mail : jwang(a)whu.edu.cn ***********************************************************************************************

1 0

Re: [SeaBIOS] [SLOF] [PATCH v3 00/17] Add vTPM support to SLOF
by Stefan Berger Nov. 15, 2017

Nov. 15, 2017

On 11/30/2015 05:01 PM, Stefan Berger wrote: I am now reviving this series of patches. Over the last few years Kevin O'Connor and I have added TPM 1.2 and TPM 2 support to SeaBIOS and there would be good reasons to reuse large parts of the SeaBIOS 'C' TPM code in SLOF's. Reasons include faster development and finding/fixing of bugs in both of them when they occur. I talked to Kevin about this and he agrees to having the SeaBIOS GPL code reused in SLOF (BSD), but I'd like him to state this here publicly as well. If someone among the SLOF maintainers does not agree with this, please let me know. Regards, Stefan > In this version of the patches I merged some of the patches of the previous > version into a single patch to avoid gcc warnings about unused functions. > I also rearranged the patches so that patch 7 allows Linux to retrieve the > log from SLOF. At this point the log is still empty. Measurements will be > added starting in patch 8. The menu is added in patch 10. > Patch 1 now comes with a Readme providing some background on TPM/vTPM and > installation instructions for libtpms, swtpm, and QEMU with TPM support > (all currently provided via my account on github). The Readme can be found > in lib/libtpm/Readme. > > > The following series of patches adds TPM support to SLOF. > In particular it adds the following: > > - TPM drivers for hardware interface and CRQ interface > - TPM initialization > - TPM logging area and firmware API to transfer it to the OS > (measurements are visible in sysfs) > - Some measurement code (Static Core Root Of Trust) > - TPM menu (accessible via 't' key during boot if TPM is available) > - Firmware API extensions following Power Firmware Doc > (to make trusted grub work) > > > Having a vTPM attached to a VM provides the following benefits: > > - enablement of trusted boot; this allow us to eventually extend the chain > of trust from the hypervisor to the guests > - enablement of attestation so that one can verify what software is > running on a machine > - provides TPM functionality to VMs, which includes a standardized > mechanism to store keys and other blobs > (Linux trusted keys, GNU TLS's TPM extensions) > > Necessarily, some of its parts are written in Forth, many are written > in 'C'. The extensions are known to work with QEMU for ppc64 running Linux. > > v2->v3: > - Addressed Thomas Huth's comments. > - Rearranged patches and merged some patches. > - Followed some of the changes made by K. O'Connor (SeaBIOS). > > v1->v2: > - Addressed Nikunj's comments > - Since last post in August I added 3 more patches to the end of the series > and one in 13th place. > > > Stefan Berger (17): > Add a TPM driver implementation > Add TPM initialization support > Add sha1 implementation > Add initial support for logging > Extend firmware API > Return value of actual log in sml-get-handover-size > Add sml related nodes to vdevice/vtpm node > Implement measurements of the master boot record > Add support for controlling the states of the TPM > Add support for a TPM menu to control the state of the TPM > Measure the static core root of trust for measurements > Add TPM firmware API call get-maximum-cmd-size > Add TPM firmware API call pass-through-to-tpm > Add TPM firmware API call get-state > Add TPM firmware API call get-failure-reason > Add TPM firmware API call reformat-sml-to-efi-alignment > Set the driver in pseudo failure state after handover > > board-qemu/Makefile | 2 +- > board-qemu/slof/Makefile | 10 +- > board-qemu/slof/OF.fs | 3 + > board-qemu/slof/tree.fs | 3 + > board-qemu/slof/vio-vtpm-cdriver.fs | 184 +++++ > board-qemu/slof/vtpm-sml.fs | 379 +++++++++++ > include/helpers.h | 1 + > lib/Makefile | 2 +- > lib/libtpm/Makefile | 50 ++ > lib/libtpm/Readme | 90 +++ > lib/libtpm/sha1.c | 197 ++++++ > lib/libtpm/sha1.h | 20 + > lib/libtpm/tcgbios.c | 1281 +++++++++++++++++++++++++++++++++++ > lib/libtpm/tcgbios.h | 52 ++ > lib/libtpm/tcgbios_int.h | 179 +++++ > lib/libtpm/tpm.code | 215 ++++++ > lib/libtpm/tpm.in | 34 + > lib/libtpm/tpm_drivers.c | 479 +++++++++++++ > lib/libtpm/tpm_drivers.h | 91 +++ > slof/fs/packages/disk-label.fs | 10 +- > slof/fs/start-up.fs | 16 + > slof/helpers.c | 6 + > 22 files changed, 3298 insertions(+), 6 deletions(-) > create mode 100644 board-qemu/slof/vio-vtpm-cdriver.fs > create mode 100644 board-qemu/slof/vtpm-sml.fs > create mode 100644 lib/libtpm/Makefile > create mode 100644 lib/libtpm/Readme > create mode 100644 lib/libtpm/sha1.c > create mode 100644 lib/libtpm/sha1.h > create mode 100644 lib/libtpm/tcgbios.c > create mode 100644 lib/libtpm/tcgbios.h > create mode 100644 lib/libtpm/tcgbios_int.h > create mode 100644 lib/libtpm/tpm.code > create mode 100644 lib/libtpm/tpm.in > create mode 100644 lib/libtpm/tpm_drivers.c > create mode 100644 lib/libtpm/tpm_drivers.h >

2 1