7ff0e0a5e0
In confidential computing, a virtual firmware may support measurement and event log based upon the hardware Trusted Execution Environment (TEE) capability. The UEFI specification defines an interface between the virtual guest OS and virtual firmware as EFI_CC_MEASUREMENT_PROTOCOL. The (vendor specific) measurements are captured in the CC eventlog that follows the TCG2 format. OVMF virtual firmware has the EFI_CC_MEASUREMENT_PROTOCOL support for Intel Trust Domain Extensions (TDX). Intel TDX has 4 runtime measurement registers (RTMR) defined as: RTMR[0] for TDVF configuration RTMR[1] for the TD OS loader and kernel RTMR[2] for the OS application RTMR[3] reserved for special usage only The RTMR to PCR mappings are defined in the UEFI Spec 2.10 Section 38.4.1 as follows: TPM PCR Index | CC Measurement Register Index | TDX-measurement register ------------------------------------------------------------------------ 0 | 0 | MRTD 1, 7 | 1 | RTMR[0] 2-6 | 2 | RTMR[1] 8-15 | 3 | RTMR[2] The CC measurement eventlog is currently exposed as a raw CCEL ACPI table by the guest OS and the events can be replayed to check log matches with the RTMR values. Add EFI CC measurement protocol to stub to get the UKI components measured and included in the remote attestation reports when vTPMs are not available. |
||
|---|---|---|
| .clusterfuzzlite | ||
| .github | ||
| .semaphore | ||
| catalog | ||
| coccinelle | ||
| docs | ||
| factory | ||
| hwdb.d | ||
| LICENSES | ||
| man | ||
| mime | ||
| mkosi.conf.d | ||
| mkosi.images | ||
| modprobe.d | ||
| network | ||
| po | ||
| presets | ||
| rules.d | ||
| shell-completion | ||
| src | ||
| sysctl.d | ||
| sysusers.d | ||
| test | ||
| tmpfiles.d | ||
| tools | ||
| units | ||
| xorg | ||
| .clang-format | ||
| .ctags | ||
| .dir-locals.el | ||
| .editorconfig | ||
| .gitattributes | ||
| .gitignore | ||
| .mailmap | ||
| .packit.yml | ||
| .pylintrc | ||
| .vimrc | ||
| .ycm_extra_conf.py | ||
| configure | ||
| LICENSE.GPL2 | ||
| LICENSE.LGPL2.1 | ||
| Makefile | ||
| meson_options.txt | ||
| meson.build | ||
| mkosi.conf | ||
| mkosi.kernel.config | ||
| NEWS | ||
| README | ||
| README.md | ||
| TODO | ||
System and Service Manager
Details
Most documentation is available on systemd's web site.
Assorted, older, general information about systemd can be found in the systemd Wiki.
Information about build requirements is provided in the README file.
Consult our NEWS file for information about what's new in the most recent systemd versions.
Please see the Code Map for information about this repository's layout and content.
Please see the Hacking guide for information on how to hack on systemd and test your modifications.
Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.
When preparing patches for systemd, please follow our Coding Style Guidelines.
If you are looking for support, please contact our mailing list, join our IRC channel #systemd on libera.chat or Matrix channel
Stable branches with backported patches are available in the stable repo.