August 2014 - SeaBIOS - mail.coreboot.org

Qemu vgabioses
by Denis 'GNUtoo' Carikli Sept. 12, 2014

Sept. 12, 2014

Hi, Here is a patch for discussing how to best make qemu vgabioses selectable for all targets, while not making it confusing for users. Denis.

4 11

Current tip not booting from USB or SD cards
by Stefan Berger Sept. 10, 2014

Sept. 10, 2014

Hello! The current git tip does not boot from USB or SD cards on an Acer C720. The issue seems to stem from: ab9d771ce14d5b8d38cde373d15a51b45efb99c6 is the first bad commit commit ab9d771ce14d5b8d38cde373d15a51b45efb99c6 Author: Kevin O'Connor <kevin(a)koconnor.net> Date: Sat Jun 14 12:48:35 2014 -0400 ehci: Update usb command timeouts to use usb_xfer_time() Signed-off-by: Kevin O'Connor <kevin(a)koconnor.net> :040000 040000 4fcdb230f8fcffc0d8256225eb3c3220bd2293d4 78b62cb78cc3537da5a2ce1f1417fb1e0a571ba1 M src Regards, Stefan

2 2

Problems with Linux payload
by Curt Brune Aug. 28, 2014

Aug. 28, 2014

Hello - First time poster, so take it easy on me :) This is a great project -- I was able to get a kvm+coreboot+SeaBIOS environment going pretty easily. I started with the master branch of coreboot and went from there. I am having a problem trying to load a Linux kernel+initramfs payload from SeaBIOS. I can successfully boot the same kernel+initramfs straight from coreboot (without SeaBIOS) as a payload. Also I can boot the same kernel+initramfs from the hard disk using SeaBIOS when GRUB is installed on the hard disk. So I'm pretty sure my kernel+initramfs is OK. My rom looks like this: coreboot.rom: 16384 kB, bootblocksize 1416, romsize 16777216, offset 0x0 alignment: 64 bytes Name Offset Type Size cmos_layout.bin 0x0 cmos_layout 1160 fallback/romstage 0x4c0 stage 19569 fallback/ramstage 0x5180 stage 55849 config 0x12c00 raw 3132 fallback/payload 0x13880 payload 57928 vgaroms/sgabios.bin 0x21b00 raw 4096 etc/boot-menu-wait 0x22b40 raw 8 etc/boot-menu-key 0x22b80 raw 8 etc/boot-menu-message 0x22bc0 raw 34 etc/screen-and-debug 0x22c40 raw 8 img/LINUX 0x22c80 payload 8474826 (empty) 0x837d80 null 8158360 When I break into SeaBIOS during the boot I get this menu: Select boot device: 1. DVD/CD [ata1-0: QEMU DVD-ROM ATAPI-4 DVD/CD] 2. Virtio disk PCI:0:4 3. Legacy option rom 4. iPXE (PCI 00:03.0) 5. Payload [LINUX] When I select "5" I get this: Searching bootorder for: HALT drive 0x000f4d50: PCHS=16383/16/63 translation=lba LCHS=1024/255/63 s=33554432 Running option rom at cc80:0003 Booting from CBFS... Run img/LINUX Calling addr 0x00040000 ... [System Reboots] I turned on some debug in coreboot and SeaBIOS and compared the successful boot (coreboot+Linux) to the unsuccessful boot (coreboot+SeaBIOS+Linux). I compared the segment offsets and sizes between the two cases and they were the same. Also the 0x00040000 entry point was the same. I am mostly stuck now. Is this even a supported boot option? I'm new to SeaBIOS, so any help is much appreciated. Thanks again for a great project -- I had pretty smooth sailing up to this point. Cheers, Curt

4 9

[PATCH v8 0/8] Add TPM support to SeaBIOS
by Stefan Berger Aug. 28, 2014

Aug. 28, 2014

This is a repost of a series of patches providing TPM support to SeaBIOS. As an addition, this patch series now works on the Acer C720 Chromebook with limitations (S3 not getting invoked; no logging into TCPA table). The patch series cleanly applies to a checkout of tags/rel-1.7.5. The following set of patches add TPM and Trusted Computing support to SeaBIOS. In particular the patches add: - a TPM driver for the Qemu's TPM TIS emulation (not yet in Qemu git) - ACPI support for the TPM device (SSDT table) - ACPI support for measurement logging (TCPA table) - Support for initialzation of the TPM - Support for the TCG BIOS extensions (1ah handler [ah = 0xbb]) (used by trusted grub; http://trousers.sourceforge.net/grub.html) - Static Root of Trusted for Measurement (SRTM) support - Support for S3 resume (sends command to TPM upon resume) - TPM-specific menu for controlling aspects of the TPM All implementations necessarily follow specifications. When all patches are applied the following services are available - SSDT ACPI table for TPM support - initialization of the TPM upon VM start and S3 resume - Static root of trust for measurements (SRTM) that measures (some) data of SeaBIOS in TCPA ACPI table - 1ah interrupt handler offering APIs for measuring and sending commands to the TPM (trusted grub uses them) - User menu for controlling aspects of the state of the TPM Stefan Berger (8): Add an implementation of a TPM TIS driver Provide ACPI SSDT table for TPM device + S3 resume support Implementation of the TCG BIOS extensions Support for BIOS interrupt handler Add 'measurement' code to the BIOS Add a menu for TPM control Add a menu item for displaying TPM diagnostics Make the TPM menu work on a Chromebook (Acer C720) Makefile | 12 +- src/Kconfig | 15 + src/boot.c | 28 +- src/cdrom.c | 10 + src/clock.c | 12 + src/config.h | 1 + src/fw/acpi-tpm-ssdt.dsl | 24 + src/fw/acpi-tpm-ssdt.hex | 27 + src/fw/acpi.c | 41 + src/hw/tpm_drivers.c | 273 ++++++ src/hw/tpm_drivers.h | 91 ++ src/optionroms.c | 4 + src/post.c | 9 + src/resume.c | 2 + src/sha1.c | 145 +++ src/sha1.h | 8 + src/std/acpi.h | 20 + src/tcgbios.c | 2208 ++++++++++++++++++++++++++++++++++++++++++++++ src/tcgbios.h | 431 +++++++++ src/util.h | 32 + 20 files changed, 3388 insertions(+), 5 deletions(-) create mode 100644 src/fw/acpi-tpm-ssdt.dsl create mode 100644 src/fw/acpi-tpm-ssdt.hex create mode 100644 src/hw/tpm_drivers.c create mode 100644 src/hw/tpm_drivers.h create mode 100644 src/sha1.c create mode 100644 src/sha1.h create mode 100644 src/tcgbios.c create mode 100644 src/tcgbios.h -- 1.8.1.4

4 26

Re: [SeaBIOS] [PATCH v8 0/8] Add TPM support to SeaBIOS
by Kevin O'Connor Aug. 26, 2014

Aug. 26, 2014

On Tue, Aug 26, 2014 at 03:13:11PM -0400, Stefan Berger wrote: > "Kevin O'Connor" <kevin(a)koconnor.net> wrote on 08/26/2014 12:49:57 PM: > > On Tue, Aug 26, 2014 at 12:07:54PM -0400, Stefan Berger wrote: > > > The other aspect is that this extension propagates all the way into > higher > > > layers: libvirt would need an API and command > > > line tool extension just to set this flag and presumably use the QEMU > > > > monitor with a new command to indicate it. > > > You want to be able to do this in a cloud environment, you need > another > > > API and/or GUI support in your cloud stack for doing > > > just this... I doesn't seem to become a lot easier this way. > > > > Not easier. But I don't think adding this menu to SeaBIOS is the > > solution either. As before, for the bulk of users it's just cryptic, > > and for those rare users that do need it, it is not in a place they > > want it. > > Let me approach this all the way from the cloud user perspective: > > One can add a TPM to a VM via an attribute to the image one wants to > deploy. So having a TPM attached to a VM > would be an option. Libvirt can then create a slightly different XML that > instructs QEMU to show the SeaBIOS menu > IF a TPM is attached. If no TPM is attached, no menu is shown, so no > changes here. I find this a useable solution > that helps those that want a TPM to be attached to the VM and leaves > things as they are for those that don't. If you're going to update libvirt (and cloud stack) for a "show the TPM menu" flag. Might as well just update libvirt (and stack) to set the TPM enable/disable/clear setting directly. >Besides that root gets too much > control over VMs with attached TPMs running on a system if libvirt > was to be extended with this kind of support. You could then set the > above mentioned flags and see what happens when the VM gives up > ownership the next time it boots... I don't understand the above. Root on the guest would have no such ability. Root on the host can't be stopped anyway.. -Kevin

1 0

Re: [SeaBIOS] [PATCH v8 0/8] Add TPM support to SeaBIOS
by Kevin O'Connor Aug. 26, 2014

Aug. 26, 2014

On Tue, Aug 26, 2014 at 12:07:54PM -0400, Stefan Berger wrote: > "Kevin O'Connor" <kevin(a)koconnor.net> wrote on 08/26/2014 11:19:14 AM: > > If this is the intent, can't we just pass a flag (via fw_cfg) from > > QEMU command line to SeaBIOS to force a clear? That is, the guest > > software can't manipulate the QEMU command line (or its fw_cfg > > entries) and so the ability to set a flag there is proof of physical > > presence. (Access to the virtual machine disk images and virtual > > machine command line is as close to "physical" as one can get.) > > One would need at least a flag to indicate that the BIOS automatically > give up ownership of the TPM. > Giving up ownership also means that the device automatically becomes > disabled and deactivated. The BIOS would then > presumably automatically have to enabled and activate the TPM again > without user interaction. Off the top of my head, I would think one could use a single multi-purpose state indicator (eg, "TPM is enabled, active, ownable", "TPM is enabled, active, non-ownable", "TPM is disabled, deactivated, cleared, unownable", etc.). I'd guess there are several permutations that wouldn't make sense and the total list could be simplified. > The other aspect is that this extension propagates all the way into higher > layers: libvirt would need an API and command > line tool extension just to set this flag and presumably use the QEMU > monitor with a new command to indicate it. > You want to be able to do this in a cloud environment, you need another > API and/or GUI support in your cloud stack for doing > just this... I doesn't seem to become a lot easier this way. Not easier. But I don't think adding this menu to SeaBIOS is the solution either. As before, for the bulk of users it's just cryptic, and for those rare users that do need it, it is not in a place they want it. > > On coreboot, a similar solution could be accomplished by setting a > > flag in CBFS (the flash). Granted, one doesn't need to be physically > > present to reprogram the flash, but if one can reprogram the flash, > > they could just as easily reprogram SeaBIOS anyway. > > I am not so familiar with how CBFS is handled. Is it at least > access-restricted to root? I guess one would need a tool > to write the above flag(s) into the flash at the right position. Yes, at a minimum it would require super-user access. (Some hardware platforms introduce additional restrictions.) -Kevin

2 1

New stable release for Intel CRBs with coreboot/FSP?
by Paul Menzel Aug. 26, 2014

Aug. 26, 2014

Dear SeaBIOS folks, Martin Roth submitted the following patch to coreboot for review [1]. src/Kconfig: Select SeaBIOS master branch by default if desired This just adds a way to select the SeaBIOS master branch by default if desired. The Intel CRBs I'm adding have a single switch to set up the configuration the way that Intel desires. This allows that switch to set the platform to use the master branch. The problem is that some patches from SeaBIOS’ master branch are needed, which are not yet in the SeaBIOS 1.7.5. Martin, could you please list the needed patches so that Gerd can take a look if a release is possible? Thanks, Paul [1] http://review.coreboot.org/6365/

2 1

[PATCH] boot: Change ":rom%d" boot order rom instance to ":rom%x"
by Kevin O'Connor Aug. 26, 2014

Aug. 26, 2014

Use hex numbers for the rom instance count in boot order open firmware device naming. The ":rom" suffix isn't part of a standard and it's highly unlikely any rom would have 10 or more drives on it, but this change makes the code more similar to the numbering of other boot order devices. Signed-off-by: Kevin O'Connor <kevin(a)koconnor.net> --- src/boot.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/boot.c b/src/boot.c index 34088c8..f23e9e1 100644 --- a/src/boot.c +++ b/src/boot.c @@ -189,7 +189,7 @@ int bootprio_find_pci_rom(struct pci_device *pci, int instance) char desc[256], *p; p = build_pci_path(desc, sizeof(desc), "*", pci); if (instance) - snprintf(p, desc+sizeof(desc)-p, ":rom%d", instance); + snprintf(p, desc+sizeof(desc)-p, ":rom%x", instance); return find_prio(desc); } @@ -201,7 +201,7 @@ int bootprio_find_named_rom(const char *name, int instance) char desc[256], *p; p = desc + snprintf(desc, sizeof(desc), "/rom@%s", name); if (instance) - snprintf(p, desc+sizeof(desc)-p, ":rom%d", instance); + snprintf(p, desc+sizeof(desc)-p, ":rom%x", instance); return find_prio(desc); } -- 1.9.3

3 2

[PATCH 0/2] Set FORCE_APIC_CLUSTER_MODEL bit of FADT flags
by zhanghailiang Aug. 25, 2014

Aug. 25, 2014

This patch mainly to address the problem of windows 2008 R2 DataCenter can not show all processors within Task Manager when we do hot-add cpus. Also i found in code, there are places which use magic-number, it is better to use specified macros instead. zhanghailiang (2): acpi: use specified macro instead of magic-number acpi: Set FORCE_APIC_CLUSTER_MODEL bit of FADT flags src/fw/acpi.c | 18 ++++++++++++------ src/std/acpi.h | 25 +++++++++++++++++++++++++ 2 files changed, 37 insertions(+), 6 deletions(-) -- 1.7.12.4

2 5

Re: [SeaBIOS] Print to screen in Romlayout.S
by Yang Zhang Aug. 20, 2014

Aug. 20, 2014

Hi, Wang Fei, Thanks for responding my post. I put my own boot loader in the MBR, and I’m sure that my code can’t print that meassage. On the other hand, the error happens before seabios load the MBR at 0x7c00. Thus I think it isn’t possible from MBR. Yang Zhang > On Aug 20, 2014, at 6:42 AM, WANG FEI <wangfei.jimei(a)gmail.com> wrote: > > Yang Zhang, > > Is it possible the error message from MBR? > > -Fei > > > On Mon, Aug 18, 2014 at 8:50 PM, Yang Zhang <udapostate(a)gmail.com> wrote: > Hi, > I meet a boot failure when I use seabios to load my own boot loader on virtual machine. The error message printed on screen say that ”Error loading from operating system”, which neither comes from seabios or my boot loader(I have read the source code of seabios, but I didn’t find any code can print a such message). Actually I don’t know where the error message come from. Therefore I have to trace the execution of seabios and my boot loader. It seems like the error happens before seabios load my boot loader(in the file romlayout.S), but I don’t know the exact position. Can anyone tell me how to print something to screen in the romlayout.S? (I can’t use gdb to debug because the virtual machine is running on our own OS). Thank you very much. > Yang Zhang > > > > > > _______________________________________________ > SeaBIOS mailing list > SeaBIOS(a)seabios.org > http://www.seabios.org/mailman/listinfo/seabios >

1 0