[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] [PATCH] x86/microcode: Support builtin CPU microcode

> There is also value when it comes to easier SRTM/DRTM measurements of
> the system in question, including cases where Xen sits on a boot ROM
> rather than on disk.

We've explored that in the past - building things into Xen and Linux
statically - and ultimately it only works if the command line passed
to Xen also gets measured, otherwise you can always override any
built-in component. So for example with OpenXT on UEFI the entire Xen
config file gets measured. For DRTM I don't think it makes much
difference, I believe the active microcode info is already part of the
measurement, so having it measured as part of the Xen blob doesn't add


Xen-devel mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.