Support use confidential computing provisioned secrets for disk decryption #18
Conversation
|
Hi @wojiaohanliyang. Thanks for your PR. 😃 |
|
TAG Bot TAG: 2.12-1deepin14 |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
Hi @wojiaohanliyang. Thanks for your PR. I'm waiting for a deepin-community member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
/topic hygon-20241128 |
|
Add topic: hygon-20241128 successed. |
|
/integr-topic hygon-20241128 |
| +grub_efi_secret_put (const char *arg __attribute__((unused)), int have_it, | ||
| + grub_uint8_t **ptr) | ||
| +{ | ||
| + struct secret_entry *e = (struct secret_entry *)(*ptr - (long)&((struct secret_entry *)0)->data); |
wojiaohanliyang
force-pushed
the
master
branch
from
a8a9e91 to
6da0ba9
Compare
…ption The code of this functionality is cherry-picked from https://mail.gnu.org/archive/html/grub-devel/2022-02/msg00064.html. Signed-off-by: hanliyang <[email protected]>
The build depends on /usr/lib/grub/x86_64-efi/efisecret.module. So, when build the edk2, you should ensure the grub2 installed on the build system have already contains the code in PR: deepin-community/grub2#18. Signed-off-by: hanliyang <[email protected]>
The build depends on /usr/lib/grub/x86_64-efi/efisecret.module. So, when build the edk2, you should ensure the grub2 installed on the build system have already contains the code in PR: deepin-community/grub2#18. Signed-off-by: hanliyang <[email protected]>
Extend the cryptodisk module to retrieve confidential computing secrets from the UEFI GUID table, with the assistance of a new module named efisecret.