[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[PATCH 0/4] libxl TPM emulator support
- To: <xen-devel@xxxxxxxxxxxxxxxxxxxx>
- From: Jason Andryuk <jason.andryuk@xxxxxxx>
- Date: Fri, 6 Nov 2026 18:15:22 -0500
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=lists.xenproject.org smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none (0)
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=kxqQhZqwHsXHOKm0rECYycmd2JxoNJc4/VPLdaKqBJs=; b=KhuCzuzW3JFufXEBjRjY1UEAITx5NsW2U9cQgHtl+lMv+1ToWA1L1VFhDh0TqhaHBpZ72JWIjawARI8YDH/TNBPiJ/dOE06oEtedjyZIOmh3F/R4FOLDzS72Q7xV+nkyyJDvCm9fYJaIGUjkUoF3teaUq1Hu4+Fue8278mKBquw+Pqwv2qTHF+Q9c9SnBv77gpUH0hvWWjYqn0CYKxZGt3c1B8Mn9ZZLXxwR6waMjs5guwkPzbs9tD3dddseZbRH0xUtAj36XyecjYf3SmPwIQ+f4vLpPcSLwuBoq8zHZUzdu1ClJTVXr2QmzIDLWyVp6/a33qBfupswgwTrP0K5sQ==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=a/sSyjLAGfumVsdpUUC/Is7dfKjvAsaPHafqrgv1kY/Euodm8VzWctWcAJUsbDcamrgybBmnutcqpYtSJj6YOxqy7SDoymrb5a8g66Jyjbf1SCpNh7uMFjwnpl0HYpGWI/sxI9jeeDb1vajjGzC7Kvi66rRB4IMS4B6y0L6jSLhqkpZfxbt7deVxIuhsYCyuBCrEwBKRVQjBbtvUFuhrRMOG78uWdeXIfzsj35fH/hmjppu6WdBRi6ULbi4E7SjUCrp6WU5PhLtbA+YzvWgMAziHHZHknVMM+z8PcuWS7lTPOXEll5mKkFpFvkkS46MNtYPbSshijkkc1efdYHb2/g==
- Authentication-results: eu.smtp.expurgate.cloud; dkim=pass header.s=selector1 header.d=amd.com header.i="@amd.com" header.h="From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck"
- Cc: Jason Andryuk <jason.andryuk@xxxxxxx>, Jan Beulich <jbeulich@xxxxxxxx>, Anthony PERARD <anthony.perard@xxxxxxxxxx>, Juergen Gross <jgross@xxxxxxxx>, Julien Grall <julien@xxxxxxx>, Andrew Cooper <andrew.cooper3@xxxxxxxxxx>, Roger Pau Monné <roger@xxxxxxxxxxxxxx>, Teddy Astie <teddy.astie@xxxxxxxxxx>, Nick Rosbrook <enr0n@xxxxxxxxxx>, George Dunlap <gwd@xxxxxxxxxxxxxx>, Stefano Stabellini <sstabellini@xxxxxxxxxx>, "Bertrand Marquis" <bertrand.marquis@xxxxxxx>, Michal Orzel <michal.orzel@xxxxxxx>, Volodymyr Babchuk <Volodymyr_Babchuk@xxxxxxxx>
- Delivery-date: Fri, 06 Nov 2026 23:15:54 +0000
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
This patch series adds support to libxl for QEMU to emulate a TPM with
swtpm as a backend.
It reworks some ARM TPM support from Stefano to use the auto-started
swtpm.
Since ARM uses the TIS interface, I expanded x86 to use either TIS or
CRB for TPM 2.0.
On Ubuntu 22.04 (and probably others), swtpm has an AppArmor policy that
restricts access to specific paths. Those don't include /var/run/xen.
I disabled AppArmor with `sudo aa-complain swtpm`.
Jason Andryuk (3):
libacpi: Build TPM2 tables for the TIS interface
hvmloader: Support the TIS interface for TPM 2.0
tools/libxl: add emulated TPM support backed by swtpm
Stefano Stabellini (1):
libxl: Add emulated TPM support on ARM
docs/man/xl.cfg.5.pod.in | 42 +++++++
docs/misc/xenstore-paths.pandoc | 12 +-
tools/firmware/hvmloader/util.c | 12 +-
tools/golang/xenlight/gengotypes.py | 2 +-
tools/golang/xenlight/helpers.gen.go | 48 ++++++++
tools/golang/xenlight/types.gen.go | 17 +++
tools/include/libxl.h | 11 ++
tools/libacpi/Makefile | 2 +-
tools/libacpi/acpi2_0.h | 1 +
tools/libacpi/build.c | 47 +++++--
tools/libacpi/libacpi.h | 4 +
tools/libacpi/ssdt_tpm2_tis.asl | 25 ++++
tools/libs/light/libxl_arch.h | 6 +
tools/libs/light/libxl_arm.c | 47 +++++++
tools/libs/light/libxl_create.c | 46 ++++++-
tools/libs/light/libxl_dm.c | 175 ++++++++++++++++++++++++++-
tools/libs/light/libxl_domain.c | 3 +
tools/libs/light/libxl_internal.h | 4 +
tools/libs/light/libxl_types.idl | 17 +++
tools/libs/light/libxl_x86.c | 24 ++++
tools/xl/xl_parse.c | 20 +++
xen/include/public/arch-arm.h | 4 +
22 files changed, 551 insertions(+), 18 deletions(-)
create mode 100644 tools/libacpi/ssdt_tpm2_tis.asl
--
2.34.1
|
