-
Notifications
You must be signed in to change notification settings - Fork 1
Setup ACM workflow #10
Copy link
Copy link
Open
Labels
Stage 1Related to the loader (stage 1)Related to the loader (stage 1)Stage 2Related to the monitor (stage 2)Related to the monitor (stage 2)x86_64Specific to x86_64Specific to x86_64
Metadata
Metadata
Assignees
Labels
Stage 1Related to the loader (stage 1)Related to the loader (stage 1)Stage 2Related to the monitor (stage 2)Related to the monitor (stage 2)x86_64Specific to x86_64Specific to x86_64
What/Why?
To enable trusted boot with Intel TXT, we must go through an ACM module that will setup the trusted environement. TXT is not available in QEMU, so we will need to emulate it if we want to keep the same control flow in both QEMU and on real hardware.
How?
fake-acmmodule that can be compiled as a standalone binary, like stage 1 or stage 2At this point, the control flows are identical, but the machine states are different. The next steps are to reproduce the expected environment.