Attention is currently required from: Felix Held, Jason Glenesk, Matt DeVillier.
Fred Reitberger has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/75484?usp=email )
Change subject: soc/amd/phoenix/Kconfig: temporary drop VGA_BIOS_FILE
......................................................................
Patch Set 2: Code-Review+2
--
To view, visit https://review.coreboot.org/c/coreboot/+/75484?usp=email
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Ifbc6cbe1e371d8d247f86555a5361ed237897dea
Gerrit-Change-Number: 75484
Gerrit-PatchSet: 2
Gerrit-Owner: Felix Held <felix-coreboot(a)felixheld.de>
Gerrit-Reviewer: Fred Reitberger <reitbergerfred(a)gmail.com>
Gerrit-Reviewer: Jason Glenesk <jason.glenesk(a)gmail.com>
Gerrit-Reviewer: Matt DeVillier <matt.devillier(a)amd.corp-partner.google.com>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-Attention: Jason Glenesk <jason.glenesk(a)gmail.com>
Gerrit-Attention: Matt DeVillier <matt.devillier(a)amd.corp-partner.google.com>
Gerrit-Attention: Felix Held <felix-coreboot(a)felixheld.de>
Gerrit-Comment-Date: Wed, 07 Jun 2023 21:44:32 +0000
Gerrit-HasComments: No
Gerrit-Has-Labels: Yes
Gerrit-MessageType: comment
Attention is currently required from: Paul Menzel, Subrata Banik.
Hello build bot (Jenkins),
I'd like you to reexamine a change. Please visit
https://review.coreboot.org/c/coreboot/+/75625?usp=email
to look at the new patch set (#2).
The following approvals got outdated and were removed:
Verified+1 by build bot (Jenkins)
Change subject: soc/intel/common: Introduce configs for TME exclusion range and new key generation
......................................................................
soc/intel/common: Introduce configs for TME exclusion range and new key generation
Add following config options.
1. INTEL_TME_GEN_NEW_KEY_EACH_WARM_REBOOT
Program Intel TME to generate a new key for each warm reboot. TME
always generates a new key on each cold reboot. With this option
enabled TME generates a new key even in warm reboot. Without this
option TME reuses the key for warm reboot.
2. INTEL_TME_EXCLUDE_CBMEM
Allows CBMEM to get excluded from being encrypted by Intel TME.
When TME is enabled it encrypts whole DRAM. TME provides option
to carve out a region of physical memory to get excluded from
encryption. With this config enabled, CBMEM does not get encrypted
by TME. If TME is not programmed to generate a new key in warm
reboot, exclusion range does not need be programmed due to the
fact that TME uses same key in warm reboot if
INTEL_TME_GEN_NEW_KEY_EACH_WARM_REBOOT is not set. But if TME is
programmed to generate a new key in warm reboot, contents of the
CBMEM get encrypted with a new key in each warm reboot case and
that leads to loss of CBMEM data from previous warm boot. So
enabling this config allows CBMEM to get excluded from being
encrypted and can be accessed in warm reboot case also.
Bug=b:276120526
TEST=Able to build rex
Signed-off-by: Pratikkumar Prajapati <pratikkumar.v.prajapati(a)intel.com>
Change-Id: Id5008fee07b97faadc7dd585f445295425173782
---
M src/soc/intel/common/block/cpu/Kconfig
1 file changed, 29 insertions(+), 0 deletions(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/25/75625/2
--
To view, visit https://review.coreboot.org/c/coreboot/+/75625?usp=email
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Id5008fee07b97faadc7dd585f445295425173782
Gerrit-Change-Number: 75625
Gerrit-PatchSet: 2
Gerrit-Owner: Pratikkumar V Prajapati <pratikkumar.v.prajapati(a)intel.com>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-CC: Paul Menzel <paulepanter(a)mailbox.org>
Gerrit-CC: Subrata Banik <subratabanik(a)google.com>
Gerrit-Attention: Subrata Banik <subratabanik(a)google.com>
Gerrit-Attention: Paul Menzel <paulepanter(a)mailbox.org>
Gerrit-MessageType: newpatchset
Attention is currently required from: Paul Menzel, Subrata Banik.
Pratikkumar V Prajapati has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/75625?usp=email )
Change subject: soc/intel/common: Introduce configs for TME exclusion range and new key generation
......................................................................
Patch Set 1:
(6 comments)
Commit Message:
https://review.coreboot.org/c/coreboot/+/75625/comment/56a3c09c_06ddf666 :
PS1, Line 9: to allow cbmem to get
: excluded from being encrypted by Intel TME
> Why is that a useful thing to do? What problem is solved?
Added more details
https://review.coreboot.org/c/coreboot/+/75625/comment/49721313_b391508f :
PS1, Line 10: excluded from being encrypted by Intel TME
> Please add a dot/period at the end.
Done
https://review.coreboot.org/c/coreboot/+/75625/comment/6d7ef2b2_b7f96e2f :
PS1, Line 9: Add INTEL_TME_EXCLUDE_CBMEM config option to allow cbmem to get
: excluded from being encrypted by Intel TME
:
: Add INTEL_TME_GEN_NEW_KEY_EACH_REBOOT config option to program
: TME to generate a new key for each reboot.
> As you enumerate the changes, format it as a list?
Done
Patchset:
PS1:
> merge with the next CL
This is common code change, shouldn't we keep this patch separate from MTL specific patch?
File src/soc/intel/common/block/cpu/Kconfig:
https://review.coreboot.org/c/coreboot/+/75625/comment/40e747b1_75d87aca :
PS1, Line 150: Exclude CBMEM from being encrypted by Intel TME.
> can u please elaborate this statement?
Added more details
https://review.coreboot.org/c/coreboot/+/75625/comment/d9415be6_35b1826b :
PS1, Line 157: reboot
> we should clarify what does reboot refers to?
Added more details
--
To view, visit https://review.coreboot.org/c/coreboot/+/75625?usp=email
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Id5008fee07b97faadc7dd585f445295425173782
Gerrit-Change-Number: 75625
Gerrit-PatchSet: 1
Gerrit-Owner: Pratikkumar V Prajapati <pratikkumar.v.prajapati(a)intel.com>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-CC: Paul Menzel <paulepanter(a)mailbox.org>
Gerrit-CC: Subrata Banik <subratabanik(a)google.com>
Gerrit-Attention: Subrata Banik <subratabanik(a)google.com>
Gerrit-Attention: Paul Menzel <paulepanter(a)mailbox.org>
Gerrit-Comment-Date: Wed, 07 Jun 2023 21:30:25 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Comment-In-Reply-To: Subrata Banik <subratabanik(a)google.com>
Comment-In-Reply-To: Paul Menzel <paulepanter(a)mailbox.org>
Gerrit-MessageType: comment
Attention is currently required from: Eran Mitrani, Eric Lai.
Hello Eran Mitrani, Eric Lai, build bot (Jenkins),
I'd like you to reexamine a change. Please visit
https://review.coreboot.org/c/coreboot/+/75533?usp=email
to look at the new patch set (#5).
Change subject: mb/google/brya/acpi: NV12 enable signal should be off on GCOFF entry
......................................................................
mb/google/brya/acpi: NV12 enable signal should be off on GCOFF entry
Properly shutdown NV12 rail in the off sequence (current
implementation leaves it asserted).
BUG=b:286287940
TEST=NV12 now shuts down on GCOFF entry
Change-Id: I7d338fc4a96f119617aff558413a5a9ac44c27d7
Signed-off-by: Tarun Tuli <taruntuli(a)google.com>
---
M src/mainboard/google/brya/acpi/power.asl
1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/33/75533/5
--
To view, visit https://review.coreboot.org/c/coreboot/+/75533?usp=email
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: I7d338fc4a96f119617aff558413a5a9ac44c27d7
Gerrit-Change-Number: 75533
Gerrit-PatchSet: 5
Gerrit-Owner: Tarun Tuli <taruntuli(a)google.com>
Gerrit-Reviewer: Eran Mitrani <mitrani(a)google.com>
Gerrit-Reviewer: Eric Lai <eric_lai(a)quanta.corp-partner.google.com>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-Attention: Eran Mitrani <mitrani(a)google.com>
Gerrit-Attention: Eric Lai <eric_lai(a)quanta.corp-partner.google.com>
Gerrit-MessageType: newpatchset
Attention is currently required from: Kapil Porwal, Subrata Banik, Tarun Tuli.
Wonkyu Kim has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/75714?usp=email )
Change subject: [TEST ONLY] add VPRO features control by fw config
......................................................................
Patch Set 2:
(2 comments)
File src/mainboard/google/rex/variants/rex0/cpulib.c:
https://review.coreboot.org/c/coreboot/+/75714/comment/02daef39_af4d7a65 :
PS1, Line 10: if(fw_config_probe(FW_CONFIG(TME, TME_DIS))) {
> space required before the open parenthesis '('
Please fix.
https://review.coreboot.org/c/coreboot/+/75714/comment/589f7822_66e1cef8 :
PS1, Line 20: if(fw_config_probe(FW_CONFIG(KEYLOCKER, KEYLOCKER_DIS))) {
> space required before the open parenthesis '('
Please fix.
--
To view, visit https://review.coreboot.org/c/coreboot/+/75714?usp=email
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: I746ba80279dc69d06ac9e06bfeae068e31d23694
Gerrit-Change-Number: 75714
Gerrit-PatchSet: 2
Gerrit-Owner: Wonkyu Kim <wonkyu.kim(a)intel.com>
Gerrit-Reviewer: Kapil Porwal <kapilporwal(a)google.com>
Gerrit-Reviewer: Subrata Banik <subratabanik(a)google.com>
Gerrit-Reviewer: Tarun Tuli <taruntuli(a)google.com>
Gerrit-CC: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-Attention: Tarun Tuli <taruntuli(a)google.com>
Gerrit-Attention: Subrata Banik <subratabanik(a)google.com>
Gerrit-Attention: Kapil Porwal <kapilporwal(a)google.com>
Gerrit-Comment-Date: Wed, 07 Jun 2023 21:26:22 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Gerrit-MessageType: comment