mbox

[PULL,0/5] Firmware 20241114 patches

Message ID 20241114110101.44322-1-kraxel@redhat.com (mailing list archive)
State New
Headers show

Pull-request

https://gitlab.com/kraxel/qemu.git tags/firmware-20241114-pull-request

Message

Gerd Hoffmann Nov. 14, 2024, 11 a.m. UTC 
The following changes since commit f0a5a31c33a8109061c2493e475c8a2f4d022432:

  Update version for v9.2.0-rc0 release (2024-11-13 21:44:45 +0000)

are available in the Git repository at:

  https://gitlab.com/kraxel/qemu.git tags/firmware-20241114-pull-request

for you to fetch changes up to 5916a3b20fdbfbfc2f987f1121e945100c8c3cd2:

  x86/loader: add -shim option (2024-11-14 11:55:39 +0100)

----------------------------------------------------------------
loader: fix efi binary loading via -kernel
loader: support secure boot verification with direct kernel boot

----------------------------------------------------------------

Gerd Hoffmann (5):
  vl: fix qemu_validate_options() indention
  x86/loader: only patch linux kernels
  x86/loader: read complete kernel
  x86/loader: expose unpatched kernel
  x86/loader: add -shim option

 include/hw/boards.h  |  1 +
 hw/core/machine.c    | 20 ++++++++++++++++++++
 hw/i386/x86-common.c | 32 ++++++++++++++++++++++++++------
 system/vl.c          | 25 +++++++++++++++++--------
 qemu-options.hx      |  7 +++++++
 5 files changed, 71 insertions(+), 14 deletions(-)

Comments

Daniel P. Berrangé Nov. 14, 2024, 11:10 a.m. UTC | #1 
On Thu, Nov 14, 2024 at 12:00:56PM +0100, Gerd Hoffmann wrote:
> The following changes since commit f0a5a31c33a8109061c2493e475c8a2f4d022432:
> 
>   Update version for v9.2.0-rc0 release (2024-11-13 21:44:45 +0000)
> 
> are available in the Git repository at:
> 
>   https://gitlab.com/kraxel/qemu.git tags/firmware-20241114-pull-request
> 
> for you to fetch changes up to 5916a3b20fdbfbfc2f987f1121e945100c8c3cd2:
> 
>   x86/loader: add -shim option (2024-11-14 11:55:39 +0100)
> 
> ----------------------------------------------------------------
> loader: fix efi binary loading via -kernel
> loader: support secure boot verification with direct kernel boot

Hard feature freeze was two days ago, so I would have thought
the new secure boot feature should wait until 10.0 cycle ?

Their commits say they depend on new OVMF features and we've
not updated the OVMF binaries in this cycle, so do we even
have the OVMF feature needed for this to work[1] ?

With regards,
Daniel

[1] admittedly not an issue for distros packaging ovmf separately
Gerd Hoffmann Nov. 14, 2024, 11:33 a.m. UTC | #2 
On Thu, Nov 14, 2024 at 11:10:11AM +0000, Daniel P. Berrangé wrote:
> On Thu, Nov 14, 2024 at 12:00:56PM +0100, Gerd Hoffmann wrote:
> > The following changes since commit f0a5a31c33a8109061c2493e475c8a2f4d022432:
> > 
> >   Update version for v9.2.0-rc0 release (2024-11-13 21:44:45 +0000)
> > 
> > are available in the Git repository at:
> > 
> >   https://gitlab.com/kraxel/qemu.git tags/firmware-20241114-pull-request
> > 
> > for you to fetch changes up to 5916a3b20fdbfbfc2f987f1121e945100c8c3cd2:
> > 
> >   x86/loader: add -shim option (2024-11-14 11:55:39 +0100)
> > 
> > ----------------------------------------------------------------
> > loader: fix efi binary loading via -kernel
> > loader: support secure boot verification with direct kernel boot
> 
> Hard feature freeze was two days ago, so I would have thought
> the new secure boot feature should wait until 10.0 cycle ?

Patches have been posted back in September.  This PR is a bit late
because I was offline in October, and also because I didn't realize we
are in freeze already due to being active mostly in edk2 these days.

So, if an exception is out if question I'll have to wait until 10.0
opens I guess ...

> Their commits say they depend on new OVMF features and we've
> not updated the OVMF binaries in this cycle, so do we even
> have the OVMF feature needed for this to work[1] ?

Nope.  I have a branch ready.  The plan is to submit that once the qemu
changes are accepted.  edk2 is in freeze too, so this will not make the
edk2 2024-11 stable tag.  If all goes well it'll land in 2025-02, which
we should be able to put into qemu 10.0

take care,
  Gerd