OvmfPkg/AmdSev: expose the SNP reserved pages through configuration table
BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3275 Now that both the secrets and cpuid pages are reserved in the HOB, extract the location details through fixed PCD and make it available to the guest OS through the configuration table. Cc: Michael Roth <michael.roth@amd.com> Cc: James Bottomley <jejb@linux.ibm.com> Cc: Min Xu <min.m.xu@intel.com> Cc: Jiewen Yao <jiewen.yao@intel.com> Cc: Tom Lendacky <thomas.lendacky@amd.com> Cc: Jordan Justen <jordan.l.justen@intel.com> Cc: Ard Biesheuvel <ardb+tianocore@kernel.org> Cc: Erdem Aktas <erdemaktas@google.com> Cc: Gerd Hoffmann <kraxel@redhat.com> Acked-by: Gerd Hoffmann <kraxel@redhat.com> Signed-off-by: Brijesh Singh <brijesh.singh@amd.com>
This commit is contained in:
committed by
mergify[bot]
parent
ea3a12d970
commit
67484aed69
@@ -17,8 +17,20 @@
|
||||
#include <Library/DxeServicesTableLib.h>
|
||||
#include <Library/MemEncryptSevLib.h>
|
||||
#include <Library/MemoryAllocationLib.h>
|
||||
#include <Library/UefiBootServicesTableLib.h>
|
||||
#include <Guid/ConfidentialComputingSevSnpBlob.h>
|
||||
#include <Library/PcdLib.h>
|
||||
|
||||
STATIC CONFIDENTIAL_COMPUTING_SNP_BLOB_LOCATION mSnpBootDxeTable = {
|
||||
SIGNATURE_32 ('A', 'M', 'D', 'E'),
|
||||
1,
|
||||
0,
|
||||
(UINT64)(UINTN)FixedPcdGet32 (PcdOvmfSnpSecretsBase),
|
||||
FixedPcdGet32 (PcdOvmfSnpSecretsSize),
|
||||
(UINT64)(UINTN)FixedPcdGet32 (PcdOvmfCpuidBase),
|
||||
FixedPcdGet32 (PcdOvmfCpuidSize),
|
||||
};
|
||||
|
||||
EFI_STATUS
|
||||
EFIAPI
|
||||
AmdSevDxeEntryPoint (
|
||||
@@ -135,5 +147,16 @@ AmdSevDxeEntryPoint (
|
||||
}
|
||||
}
|
||||
|
||||
//
|
||||
// If its SEV-SNP active guest then install the CONFIDENTIAL_COMPUTING_SEV_SNP_BLOB.
|
||||
// It contains the location for both the Secrets and CPUID page.
|
||||
//
|
||||
if (MemEncryptSevSnpIsEnabled ()) {
|
||||
return gBS->InstallConfigurationTable (
|
||||
&gConfidentialComputingSevSnpBlobGuid,
|
||||
&mSnpBootDxeTable
|
||||
);
|
||||
}
|
||||
|
||||
return EFI_SUCCESS;
|
||||
}
|
||||
|
Reference in New Issue
Block a user