SeaBIOS

seabios@seabios.org

3783 discussions

Guest Reboot After Plug HDMI
by Lying 04 Dec '17

04 Dec '17

Hello, Everybody. I encounter a problem when i using my guest. I booting my guest without HDMI primarily, Then i add it, but my guest is be rebooted. To know what cause it, i do it again, especially i check my guest is running normal or not with "ping" before plugging, that's well. What i was suffer? can you help me solve it?

2 2

vga passthrough fail
by Lying 28 Nov '17

28 Nov '17

Hello, I encounter a problem, my display is not light when guest running. But it's successful that i check guest with command "ping". Following message is my xml and refer topic from https://libvirt.org/formatdomain.html#elementsHostDev: <hostdev mode='subsystem' type='pci' managed='yes'> <driver name='vfio' /> <source> <address domain='0x0000' bus='0x06' slot='0x02' function='0x0'/> </source> </hostdev>

1 0

Loading Option ROM for SATA Controller Card
by Adam Novak 27 Nov '17

27 Nov '17

I've installed a SI-PEX40064 SATA controller card <http://www.sybausa.com/index.php?route=product/product&product_id=156> in my system that I am trying to use with PCI passthrough via Xen, in order to give a guest VM its own real SATA controller so as to not have to deal with virtual disks. Moreover, I want to boot off of a disk attached to the card. The card implements (or pretends to implement) AHCI, so SeaBIOS starts up and can see the attached disk. But SeaBIOS gets a timeout communicating with the disk: |eff9d000| WARNING - Timeout at ahci_port_setup:469! |eff9d000| AHCI/2: device not ready (tf 0x58) The card has a PCI Option ROM, and I think the Option ROM needs to be loaded for the card to work and/or be bootable. But SeaBIOS refuses to load the Option ROM. (My real physical system with Asus EFI firmware and CSM enabled does load the Option ROM for the card when it is installed.) I dug into the code, and it looks like it's the same issue as is mentioned here: https://mail.coreboot.org/pipermail/seabios/2017-June/011425.html Basically, a device is not checked for an option ROM (or an fw_fcg/CBFS-based Option ROM file), and its option ROM is not loaded, if pci->have_driver is set for the device. That field gets set for anything that apparently implements AHCI, so the Option ROMs for AHCI controllers are skipped, even if they are useful. Removing that check causes the option ROM for my card to be loaded, and allows the bootloader stored on the disk attached to the card to start up. I've attached a patch that implements this change, and adds a few more debug messages to explain what is going on. I haven't observed any problems with my patched SeaBIOS under Xen, but I'm not sure why the check was there in the first place (as it wasn't commented), so I can't speak to the repercussions of disabling it on everyone else's machines.

1 0

Re: [SeaBIOS] Fw: Re: Re: Fw: Can VTPM2 support WINDOWS
by Stefan Berger 24 Nov '17

24 Nov '17

On 11/23/2017 03:19 PM, Marc-André Lureau wrote: > Hi > > On Thu, Nov 23, 2017 at 8:49 PM, Stefan Berger > <stefanb(a)linux.vnet.ibm.com <mailto:stefanb@linux.vnet.ibm.com>> wrote: > > On 11/23/2017 07:48 AM, jwang(a)whu.edu.cn <mailto:jwang@whu.edu.cn> > wrote: >> >> Hi，Berger， >> >> Thanks. But as I know CRB interface should be for mobile >> platform. We just want to support Windows Server >> 2012. Currently,the Windows Server 2012 can find physical >> TPM2 device. However, for vTPM, the windows server 2012 >> virtual machine just can find a virtual TPM 1.2 device and >> can not find vTPM 2.0 device. We have tried linux such as >> ubuntu and the ubuntu virtual machine can find vTPM 2.0 >> device in seabios 1.10 and our modified qemu-kvm-ev-2.6. >> > My suggestion is to try to pick the patches for QEMU and SeaBIOS > CRB support or wait for the next version of QEMU... > > > I couldn't make Windows work with TPM2 and seabios. However, I have > some patch for ovmf to compile TPM2 support in, and it seem to work > quite ok. I still have to figure out some PhysicalPresence issues > (using swtpm/libtpms). I am busy with other projects now, but you can > take a look at the branches > (https://github.com/elmarco/edk2/tree/tpm2, > https://github.com/elmarco/qemu/tree/tpm). As you can see, work in > progress, and help welcome! Windows seems to need CRB for it to accept the TPM 2... It may work 'better' with UEFI, but the device is also recognized with (patched) SeaBIOS. For Win2012R2 this is also relevant: https://support.microsoft.com/en-us/help/3095701/tpm-2-0-device-can-t-be-re… Stefan > > > Stefan > > >> This problem has been bothering us for a month. Could you >> give us some help? >> >> Best, >> Juan >> >> >> >> >> -----原始邮件----- >> *发件人:*"Stefan Berger" <stefanb(a)linux.vnet.ibm.com >> <mailto:stefanb@linux.vnet.ibm.com>> >> *发送时间:*2017-11-23 03:41:30 (星期四) >> *收件人:* 00011007(a)whu.edu.cn <mailto:00011007@whu.edu.cn> >> *抄送:* >> *主题:* Re: Fw: Can VTPM2 support WINDOWS >> >> On 11/16/2017 08:40 AM, 00011007(a)whu.edu.cn >> <mailto:00011007@whu.edu.cn> wrote: >>> >>> >>> >>> -----原始邮件----- >>> *发件人:*00011007@whu.edu.cn >>> <mailto:00011007@whu.edu.cn> >>> *发送时间:*2017-11-16 17:30:57 (星期四) >>> *收件人:* seabios(a)seabios.org >>> <mailto:seabios@seabios.org> >>> *抄送:* >>> *主题:* Can VTPM2 support WINDOWS >>> >>> Hi,all, >>> >>> We want VTPM2 to support windows virtual machines. >>> So I want to know if the current seabios can support >>> the windows guest OS when the tpm driver can not be >>> modified. The host OS we used is CentOS 7.3 and the >>> seabios version is 1.10.2. The hypervisor is >>> KVM+QEMU. The windows version is windows server 2012 >>> that can automatically support physical TPM2 chip. >>> >> >> I only ever tried with Windows 10 and that requires a CRB >> interface (rather than TIS ) for a TPM2, which we will >> only get with the next version of QEMU. I would assume >> that this is also the case with windows server 2012. >> >> Stefan >> >>> Looking forward to reply as soon as possible. >>> >>> >>> Yours sincerely, >>> >>> Juan >>> >>> >>> ------------------------------------------------------------------------ >>> >>> Best Wishes! >>> *********************************************************************************************** >>> >>> Juan Wang >>> Computer School, Wuhan University >>> Key Laboratory of Aerospace Information Security and >>> Trusted Computing, Ministry of Education >>> Mobile Phone : 18986213038 >>> E-Mail : jwang(a)whu.edu.cn >>> <mailto:jwang@whu.edu.cn> >>> *********************************************************************************************** >>> >>> >>> ** >>> >>> >>> >>> >>> ------------------------------------------------------------------------ >>> >>> Best Wishes! >>> *********************************************************************************************** >>> >>> Juan Wang >>> Computer School, Wuhan University >>> Key Laboratory of Aerospace Information Security and >>> Trusted Computing, Ministry of Education >>> Mobile Phone : 18986213038 >>> E-Mail : jwang(a)whu.edu.cn <mailto:jwang@whu.edu.cn> >>> *********************************************************************************************** >>> >>> >>> ** >> >> >> >> >> >> ------------------------------------------------------------------------ >> >> Best Wishes! >> *********************************************************************************************** >> >> Juan Wang >> Computer School, Wuhan University >> Key Laboratory of Aerospace Information Security and >> Trusted Computing, Ministry of Education >> Mobile Phone : 18986213038 >> E-Mail : jwang(a)whu.edu.cn <mailto:jwang@whu.edu.cn> >> *********************************************************************************************** >> >> >> ** >> >> >> >> >> ------------------------------------------------------------------------ >> >> Best Wishes! >> *********************************************************************************************** >> >> Juan Wang >> Computer School, Wuhan University >> Key Laboratory of Aerospace Information Security and >> Trusted Computing, Ministry of Education >> Mobile Phone : 18986213038 >> E-Mail : jwang(a)whu.edu.cn <mailto:jwang@whu.edu.cn> >> *********************************************************************************************** >> >> >> ** > > > > _______________________________________________ > SeaBIOS mailing list > SeaBIOS(a)seabios.org <mailto:SeaBIOS@seabios.org> > https://mail.coreboot.org/mailman/listinfo/seabios > <https://mail.coreboot.org/mailman/listinfo/seabios> > > > > > -- > Marc-André Lureau

2 1

Fw: Re: Re: Fw: Can VTPM2 support WINDOWS
by jwang＠whu.edu.cn 24 Nov '17

24 Nov '17

Hi，Berger， Thanks. But as I know CRB interface should be for mobile platform. We just want to support Windows Server 2012. Currently,the Windows Server 2012 can find physical TPM2 device. However, for vTPM, the windows server 2012 virtual machine just can find a virtual TPM 1.2 device and can not find vTPM 2.0 device. We have tried linux such as ubuntu and the ubuntu virtual machine can find vTPM 2.0 device in seabios 1.10 and our modified qemu-kvm-ev-2.6. This problem has been bothering us for a month. Could you give us some help? Best, Juan -----原始邮件----- 发件人:"Stefan Berger" <stefanb(a)linux.vnet.ibm.com> 发送时间:2017-11-23 03:41:30 (星期四) 收件人:00011007@whu.edu.cn 抄送: 主题: Re: Fw: Can VTPM2 support WINDOWS On 11/16/2017 08:40 AM, 00011007(a)whu.edu.cn wrote: -----原始邮件----- 发件人:00011007@whu.edu.cn 发送时间:2017-11-16 17:30:57 (星期四) 收件人:seabios@seabios.org 抄送: 主题: Can VTPM2 support WINDOWS Hi,all, We want VTPM2 to support windows virtual machines. So I want to know if the current seabios can support the windows guest OS when the tpm driver can not be modified. The host OS we used is CentOS 7.3 and the seabios version is 1.10.2. The hypervisor is KVM+QEMU. The windows version is windows server 2012 that can automatically support physical TPM2 chip. I only ever tried with Windows 10 and that requires a CRB interface (rather than TIS ) for a TPM2, which we will only get with the next version of QEMU. I would assume that this is also the case with windows server 2012. Stefan Looking forward to reply as soon as possible. Yours sincerely, Juan Best Wishes! *********************************************************************************************** Juan Wang Computer School, Wuhan University Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education Mobile Phone : 18986213038 E-Mail : jwang(a)whu.edu.cn *********************************************************************************************** Best Wishes! *********************************************************************************************** Juan Wang Computer School, Wuhan University Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education Mobile Phone : 18986213038 E-Mail : jwang(a)whu.edu.cn *********************************************************************************************** Best Wishes! *********************************************************************************************** Juan Wang Computer School, Wuhan University Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education Mobile Phone : 18986213038 E-Mail : jwang(a)whu.edu.cn *********************************************************************************************** Best Wishes! *********************************************************************************************** Juan Wang Computer School, Wuhan University Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education Mobile Phone : 18986213038 E-Mail : jwang(a)whu.edu.cn ***********************************************************************************************

3 2

Can VTPM2 support WINDOWS
by 00011007＠whu.edu.cn 16 Nov '17

16 Nov '17

Hi,all, We want VTPM2 to support windows virtual machines. So I want to know if the current seabios can support the windows guest OS when the tpm driver can not be modified. The host OS we used is CentOS 7.3 and the seabios version is 1.10.2. The hypervisor is KVM+QEMU. The windows version is windows server 2012 that can automatically support physical TPM2 chip. Looking forward to reply as soon as possible. Yours sincerely, Juan Best Wishes! *********************************************************************************************** Juan Wang Computer School, Wuhan University Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education Mobile Phone : 18986213038 E-Mail : jwang(a)whu.edu.cn ***********************************************************************************************

1 0

Re: [SeaBIOS] [SLOF] [PATCH v3 00/17] Add vTPM support to SLOF
by Stefan Berger 16 Nov '17

16 Nov '17

On 11/30/2015 05:01 PM, Stefan Berger wrote: I am now reviving this series of patches. Over the last few years Kevin O'Connor and I have added TPM 1.2 and TPM 2 support to SeaBIOS and there would be good reasons to reuse large parts of the SeaBIOS 'C' TPM code in SLOF's. Reasons include faster development and finding/fixing of bugs in both of them when they occur. I talked to Kevin about this and he agrees to having the SeaBIOS GPL code reused in SLOF (BSD), but I'd like him to state this here publicly as well. If someone among the SLOF maintainers does not agree with this, please let me know. Regards, Stefan > In this version of the patches I merged some of the patches of the previous > version into a single patch to avoid gcc warnings about unused functions. > I also rearranged the patches so that patch 7 allows Linux to retrieve the > log from SLOF. At this point the log is still empty. Measurements will be > added starting in patch 8. The menu is added in patch 10. > Patch 1 now comes with a Readme providing some background on TPM/vTPM and > installation instructions for libtpms, swtpm, and QEMU with TPM support > (all currently provided via my account on github). The Readme can be found > in lib/libtpm/Readme. > > > The following series of patches adds TPM support to SLOF. > In particular it adds the following: > > - TPM drivers for hardware interface and CRQ interface > - TPM initialization > - TPM logging area and firmware API to transfer it to the OS > (measurements are visible in sysfs) > - Some measurement code (Static Core Root Of Trust) > - TPM menu (accessible via 't' key during boot if TPM is available) > - Firmware API extensions following Power Firmware Doc > (to make trusted grub work) > > > Having a vTPM attached to a VM provides the following benefits: > > - enablement of trusted boot; this allow us to eventually extend the chain > of trust from the hypervisor to the guests > - enablement of attestation so that one can verify what software is > running on a machine > - provides TPM functionality to VMs, which includes a standardized > mechanism to store keys and other blobs > (Linux trusted keys, GNU TLS's TPM extensions) > > Necessarily, some of its parts are written in Forth, many are written > in 'C'. The extensions are known to work with QEMU for ppc64 running Linux. > > v2->v3: > - Addressed Thomas Huth's comments. > - Rearranged patches and merged some patches. > - Followed some of the changes made by K. O'Connor (SeaBIOS). > > v1->v2: > - Addressed Nikunj's comments > - Since last post in August I added 3 more patches to the end of the series > and one in 13th place. > > > Stefan Berger (17): > Add a TPM driver implementation > Add TPM initialization support > Add sha1 implementation > Add initial support for logging > Extend firmware API > Return value of actual log in sml-get-handover-size > Add sml related nodes to vdevice/vtpm node > Implement measurements of the master boot record > Add support for controlling the states of the TPM > Add support for a TPM menu to control the state of the TPM > Measure the static core root of trust for measurements > Add TPM firmware API call get-maximum-cmd-size > Add TPM firmware API call pass-through-to-tpm > Add TPM firmware API call get-state > Add TPM firmware API call get-failure-reason > Add TPM firmware API call reformat-sml-to-efi-alignment > Set the driver in pseudo failure state after handover > > board-qemu/Makefile | 2 +- > board-qemu/slof/Makefile | 10 +- > board-qemu/slof/OF.fs | 3 + > board-qemu/slof/tree.fs | 3 + > board-qemu/slof/vio-vtpm-cdriver.fs | 184 +++++ > board-qemu/slof/vtpm-sml.fs | 379 +++++++++++ > include/helpers.h | 1 + > lib/Makefile | 2 +- > lib/libtpm/Makefile | 50 ++ > lib/libtpm/Readme | 90 +++ > lib/libtpm/sha1.c | 197 ++++++ > lib/libtpm/sha1.h | 20 + > lib/libtpm/tcgbios.c | 1281 +++++++++++++++++++++++++++++++++++ > lib/libtpm/tcgbios.h | 52 ++ > lib/libtpm/tcgbios_int.h | 179 +++++ > lib/libtpm/tpm.code | 215 ++++++ > lib/libtpm/tpm.in | 34 + > lib/libtpm/tpm_drivers.c | 479 +++++++++++++ > lib/libtpm/tpm_drivers.h | 91 +++ > slof/fs/packages/disk-label.fs | 10 +- > slof/fs/start-up.fs | 16 + > slof/helpers.c | 6 + > 22 files changed, 3298 insertions(+), 6 deletions(-) > create mode 100644 board-qemu/slof/vio-vtpm-cdriver.fs > create mode 100644 board-qemu/slof/vtpm-sml.fs > create mode 100644 lib/libtpm/Makefile > create mode 100644 lib/libtpm/Readme > create mode 100644 lib/libtpm/sha1.c > create mode 100644 lib/libtpm/sha1.h > create mode 100644 lib/libtpm/tcgbios.c > create mode 100644 lib/libtpm/tcgbios.h > create mode 100644 lib/libtpm/tcgbios_int.h > create mode 100644 lib/libtpm/tpm.code > create mode 100644 lib/libtpm/tpm.in > create mode 100644 lib/libtpm/tpm_drivers.c > create mode 100644 lib/libtpm/tpm_drivers.h >

2 1

[PATCH] tpm: Add support for TPM2 ACPI table
by Stefan Berger 16 Nov '17

16 Nov '17

Add support for the TPM2 ACPI table. If we find it and its of the appropriate size, we can get the log_area_start_address and log_area_minimum_size from it. The latest version of the spec can be found here: https://trustedcomputinggroup.org/tcg-acpi-specification/ Signed-off-by: Stefan Berger <stefanb(a)linux.vnet.ibm.com> --- src/std/acpi.h | 13 +++++++++++++ src/tcgbios.c | 52 +++++++++++++++++++++++++++++++++++++++++----------- 2 files changed, 54 insertions(+), 11 deletions(-) diff --git a/src/std/acpi.h b/src/std/acpi.h index c2ea707..c01fa7b 100644 --- a/src/std/acpi.h +++ b/src/std/acpi.h @@ -307,4 +307,17 @@ struct tcpa_descriptor_rev2 #define TCPA_ACPI_CLASS_CLIENT 0 #define TCPA_ACPI_CLASS_SERVER 1 +#define TPM2_SIGNATURE 0x324D5054 +struct tpm2_descriptor_rev2 +{ + ACPI_TABLE_HEADER_DEF + u16 platform_class; + u16 reserved; + u64 address_of_control_area; + u32 start_method; + u8 start_method_params[12]; + u32 log_area_minimum_length; + u64 log_area_start_address; +} PACKED; + #endif // acpi.h diff --git a/src/tcgbios.c b/src/tcgbios.c index 151707b..9348a23 100644 --- a/src/tcgbios.c +++ b/src/tcgbios.c @@ -48,15 +48,9 @@ struct { u8 * log_area_last_entry; } tpm_state VARLOW; -static int -tpm_tcpa_probe(void) +static int tpm_set_log_area(u8 *log_area_start_address, + u32 log_area_minimum_length) { - struct tcpa_descriptor_rev2 *tcpa = find_acpi_table(TCPA_SIGNATURE); - if (!tcpa) - return -1; - - u8 *log_area_start_address = (u8*)(long)tcpa->log_area_start_address; - u32 log_area_minimum_length = tcpa->log_area_minimum_length; if (!log_area_start_address || !log_area_minimum_length) return -1; @@ -69,6 +63,39 @@ tpm_tcpa_probe(void) return 0; } +static int +tpm_tcpa_probe(void) +{ + struct tcpa_descriptor_rev2 *tcpa = find_acpi_table(TCPA_SIGNATURE); + if (!tcpa) + return -1; + + dprintf(DEBUG_tcg, "TCGBIOS: TCPA: LASA = %p, LAML = %u\n", + (u8 *)(long)tcpa->log_area_start_address, + tcpa->log_area_minimum_length); + + return tpm_set_log_area((u8*)(long)tcpa->log_area_start_address, + tcpa->log_area_minimum_length); +} + +static int +tpm_tpm2_probe(void) +{ + struct tpm2_descriptor_rev2 *tpm2 = find_acpi_table(TPM2_SIGNATURE); + if (!tpm2) + return -1; + + if (tpm2->length < 76) + return -1; + + dprintf(DEBUG_tcg, "TCGBIOS: TPM2: LASA = %p, LAML = %u\n", + (u8 *)(long)tpm2->log_area_start_address, + tpm2->log_area_minimum_length); + + return tpm_set_log_area((u8*)(long)tpm2->log_area_start_address, + tpm2->log_area_minimum_length); +} + /* * Extend the ACPI log with the given entry by copying the * entry data into the log. @@ -949,9 +976,12 @@ tpm_setup(void) "TCGBIOS: Detected a TPM %s.\n", (TPM_version == TPM_VERSION_1_2) ? "1.2" : "2"); - int ret = tpm_tcpa_probe(); - if (ret) - return; + int ret = tpm_tpm2_probe(); + if (ret) { + ret = tpm_tcpa_probe(); + if (ret) + return; + } TPM_working = 1; -- 2.5.5

2 1

[RFC] paravirt: Only enable sercon in NOGRAPHIC mode if no other console specified
by Kevin O'Connor 16 Nov '17

16 Nov '17

Signed-off-by: Kevin O'Connor <kevin(a)koconnor.net> --- I wonder if it would be better to only enable sercon with 0x3f8 in the nographic case if QEMU has neither specified a sercon-port and has not requested sgabios to be loaded. This is just an idea. -Kevin --- src/fw/paravirt.c | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/src/fw/paravirt.c b/src/fw/paravirt.c index 9674ab8..0770c47 100644 --- a/src/fw/paravirt.c +++ b/src/fw/paravirt.c @@ -513,12 +513,6 @@ qemu_cfg_legacy(void) qemu_romfile_add("etc/irq0-override", QEMU_CFG_IRQ0_OVERRIDE, 0, 1); qemu_romfile_add("etc/max-cpus", QEMU_CFG_MAX_CPUS, 0, 2); - // serial console - u16 nogfx = 0; - qemu_cfg_read_entry(&nogfx, QEMU_CFG_NOGRAPHIC, sizeof(nogfx)); - if (nogfx) - const_romfile_add_int("etc/sercon-port", PORT_SERIAL1); - // NUMA data u64 numacount; qemu_cfg_read_entry(&numacount, QEMU_CFG_NUMA, sizeof(numacount)); @@ -620,4 +614,11 @@ void qemu_cfg_init(void) acpi_pm_base = 0x0600; dprintf(1, "Moving pm_base to 0x%x\n", acpi_pm_base); } + + // serial console + u16 nogfx = 0; + qemu_cfg_read_entry(&nogfx, QEMU_CFG_NOGRAPHIC, sizeof(nogfx)); + if (nogfx && !romfile_find("etc/sercon-port") + && !romfile_find("vgaroms/sgabios.bin")) + const_romfile_add_int("etc/sercon-port", PORT_SERIAL1); } -- 2.9.5

2 2

Deprecating gcc older than v4.6
by Kevin O'Connor 11 Nov '17

11 Nov '17

Hi, During the final v1.11.0 release tests I found that both gcc v3.4 and gcc v4.4 (at least as shipped with Fedora 13) will no longer successfully compile SeaBIOS. The two different gcc versions failed on two different errors. Instead of trying to keep the code compatible with these old compilers I went forward with the release as is. I don't think there is a compelling reason to continue to support these old versions of gcc. The gcc v4.6.0 (at least as shipped on Fedora 15) continues to build SeaBIOS successfully. -Kevin

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

SeaBIOS