From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752694AbdB1PPw (ORCPT ); Tue, 28 Feb 2017 10:15:52 -0500 Received: from mail-wm0-f50.google.com ([74.125.82.50]:32821 "EHLO mail-wm0-f50.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752156AbdB1PPs (ORCPT ); Tue, 28 Feb 2017 10:15:48 -0500 Subject: Re: [PATCH 0/2] efi: Enhance capsule loader to support signed Quark images To: Andy Shevchenko , Ard Biesheuvel References: <1bf3c9d8-56aa-818b-350f-deb62ad14e08@siemens.com> <4014c5e6-b5a0-7552-166f-a42992532c09@siemens.com> <5da59d02-d299-f5c7-48fa-a67bdd017252@siemens.com> <20170228121255.GD28416@codeblueprint.co.uk> <20170228122947.GE28416@codeblueprint.co.uk> Cc: Matt Fleming , Jan Kiszka , "Kweh, Hock Leong" , "linux-efi@vger.kernel.org" , Linux Kernel Mailing List , Borislav Petkov , "Ong, Boon Leong" , "Mok, Tze Siong" From: "Bryan O'Donoghue" Message-ID: <1fb1a428-672b-be4b-e05b-4363c4b286dd@nexus-software.ie> Date: Tue, 28 Feb 2017 15:07:45 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 28/02/17 13:36, Andy Shevchenko wrote: > On Tue, Feb 28, 2017 at 3:35 PM, Andy Shevchenko > wrote: >> On Tue, Feb 28, 2017 at 3:25 PM, Ard Biesheuvel >> wrote: >>> On 28 February 2017 at 12:29, Matt Fleming wrote: >>>> On Tue, 28 Feb, at 01:20:25PM, Jan Kiszka wrote: >> >>> As I said before, I'd be ok with it if we select it compile time, >>> i.e., no runtime logic that infers whether we are running on such a >>> system or not, and no carrying both implementations in all kernels >>> that have capsule loading built in. >> >> Actually it most likely that Quark kernel (kernel compiled to be run >> on Quark) will be ever used on the rest of (modern) x86 since it's >> 486+ architecture (kernel has specific option for it, 586TSC). > > + it's UP only! > >> So, we might just be dependent or chosen by Quark. > Still though the current ia32 kernel runs on Quark and all other ia32 systems. It would be a pity/shame to make this feature dependent on compiling a Quark specific kernel, after all its only a header on a capsule as opposed to a large hardware-level architectural divergence. I'd still like us to try for a low-fat hook that would a big fat ia32 kernel just work without having to force a user compile up a Quark-specific kernel. -- bod