Skip to content

Commit 7bd2c18

Browse files
committed
blog: measure boot
add measured boot article + fixes Signed-off-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
1 parent 2147bff commit 7bd2c18

27 files changed

+2286
-109
lines changed

EFI TCG2 protocol in U-Boot and QEMU.html

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@
2222
<link rel="stylesheet" type="text/css" href="https://apalos.github.io/theme/font-awesome/css/solid.css">
2323

2424

25-
<link href="https://apalos.github.io/feeds/all.atom.xml" type="application/atom+xml" rel="alternate" title="Volatile rumblings of a spotted mind Atom">
25+
<link href="https://apalos.github.io/feeds/all.atom.xml" type="application/atom+xml" rel="alternate" title="Volatile rumblings Atom">
2626

2727

2828

@@ -34,7 +34,7 @@
3434
<meta name="keywords" content="Bootloaders, Security, U-Boot, UEFI, TPM">
3535

3636

37-
<meta property="og:site_name" content="Volatile rumblings of a spotted mind"/>
37+
<meta property="og:site_name" content="Volatile rumblings"/>
3838
<meta property="og:title" content="EFI TCG2 protocol in U-Boot and QEMU"/>
3939
<meta property="og:description" content="TPMs are starting to play an important role in system security and integrity. So let&#39;s take a look on the latest U-Boot additions enabling TPMs when booting with UEFI"/>
4040
<meta property="og:locale" content="en_US"/>
@@ -51,7 +51,7 @@
5151
<meta property="article:tag" content="TPM"/>
5252
<meta property="og:image" content="site_images/profile.png">
5353

54-
<title>Volatile rumblings of a spotted mind &ndash; EFI TCG2 protocol in U-Boot and QEMU</title>
54+
<title>Volatile rumblings &ndash; EFI TCG2 protocol in U-Boot and QEMU</title>
5555

5656
</head>
5757
<body class="light-theme">
@@ -65,7 +65,7 @@ <h1>
6565
<a href="https://apalos.github.io"></a>
6666
</h1>
6767

68-
<p>Volatile rumblings of a spotted mind</p>
68+
<p>Volatile rumblings</p>
6969

7070
<nav>
7171
<ul class="list">
@@ -152,14 +152,15 @@ <h2><strong>Using SWTPM</strong></h2>
152152
TPM emulator that works under QEMU. It provides a memory mapped device which
153153
adheres to the <a href="https://trustedcomputinggroup.org/wp-content/uploads/TCG_PCClientTPMInterfaceSpecification_TIS__1-3_27_03212013.pdf" target="_blank">TCG TPM Interface Specification</a>.
154154
The problem is that U-Boot had no support for memory mapped TPMs, which is
155-
exactly what <a href="https://lore.kernel.org/u-boot/20210707162604.84196-1-ilias.apalodimas@linaro.org/" target="_blank">this</a> patchset does.</p>
155+
exactly what <a href="https://lore.kernel.org/u-boot/20211109070223.76456-1-ilias.apalodimas@linaro.org/" target="_blank">this</a> patchset does.</p>
156156
<h3><strong>Building U-Boot</strong></h3>
157-
<p>At the time of this article the U-Boot patches are under review, so we need to
157+
<p><s>At the time of this article the U-Boot patches are under review, so we need to
158158
apply them manually.</p>
159-
<p>So download the patches prepare your U-Boot binary.</p>
159+
<p>So download the patches prepare your U-Boot binary.</s>
160+
Patches are now in U-Boot mainline and the arm64 defconfig has the
161+
required config options enabled.</p>
160162
<div class="highlight"><pre><span></span><code>git clone https://github.com/u-boot/u-boot.git
161163
<span class="nb">pushd</span> u-boot
162-
git am &lt;patches <span class="k">for</span> mmio tpm support&gt;
163164
make qemu_arm64_defconfig
164165
make menuconfig
165166
</code></pre></div>
@@ -538,7 +539,7 @@ <h3><strong>Reading the EventLog</strong></h3>
538539
{
539540
"@context" : "http://schema.org",
540541
"@type" : "Blog",
541-
"name": " Volatile rumblings of a spotted mind ",
542+
"name": " Volatile rumblings ",
542543
"url" : "https://apalos.github.io",
543544
"image": "site_images/profile.png",
544545
"description": ""

Measured boot on DeveloperBox.html

Lines changed: 375 additions & 0 deletions
Large diffs are not rendered by default.

Protected UEFI variables with U-Boot.html

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@
2222
<link rel="stylesheet" type="text/css" href="https://apalos.github.io/theme/font-awesome/css/solid.css">
2323

2424

25-
<link href="https://apalos.github.io/feeds/all.atom.xml" type="application/atom+xml" rel="alternate" title="Volatile rumblings of a spotted mind Atom">
25+
<link href="https://apalos.github.io/feeds/all.atom.xml" type="application/atom+xml" rel="alternate" title="Volatile rumblings Atom">
2626

2727

2828

@@ -34,7 +34,7 @@
3434
<meta name="keywords" content="Bootloaders, Security, U-Boot, UEFI, Arm">
3535

3636

37-
<meta property="og:site_name" content="Volatile rumblings of a spotted mind"/>
37+
<meta property="og:site_name" content="Volatile rumblings"/>
3838
<meta property="og:title" content="Protected UEFI variables with U-Boot"/>
3939
<meta property="og:description" content="Critical system variables, like the UEFI ones, must be protected against a variety of attacks. On Arm servers and desktops, which typically run EDK2, dedicated flashes are used. Those would normally be accessible from the secure world only, since they are storing critical variables for our systems integrity and security. But what&#39;s the status of devices running on U-Boot?"/>
4040
<meta property="og:locale" content="en_US"/>
@@ -51,7 +51,7 @@
5151
<meta property="article:tag" content="Arm"/>
5252
<meta property="og:image" content="site_images/profile.png">
5353

54-
<title>Volatile rumblings of a spotted mind &ndash; Protected UEFI variables with U-Boot</title>
54+
<title>Volatile rumblings &ndash; Protected UEFI variables with U-Boot</title>
5555

5656
</head>
5757
<body class="light-theme">
@@ -65,7 +65,7 @@ <h1>
6565
<a href="https://apalos.github.io"></a>
6666
</h1>
6767

68-
<p>Volatile rumblings of a spotted mind</p>
68+
<p>Volatile rumblings</p>
6969

7070
<nav>
7171
<ul class="list">
@@ -363,7 +363,7 @@ <h2><strong>Next Steps</strong></h2>
363363
{
364364
"@context" : "http://schema.org",
365365
"@type" : "Blog",
366-
"name": " Volatile rumblings of a spotted mind ",
366+
"name": " Volatile rumblings ",
367367
"url" : "https://apalos.github.io",
368368
"image": "site_images/profile.png",
369369
"description": ""

0 commit comments

Comments
 (0)