Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add CONFIG_BOOT_XEN_ADD CONFIG_BOOT_XEN_REMOVE #890

Open
tlaurion opened this issue Nov 4, 2020 · 0 comments
Open

Add CONFIG_BOOT_XEN_ADD CONFIG_BOOT_XEN_REMOVE #890

tlaurion opened this issue Nov 4, 2020 · 0 comments

Comments

@tlaurion
Copy link
Collaborator

tlaurion commented Nov 4, 2020

One of the interesting functionalities Heads now provides through config heads configs management is resetting/merging /etc/config.user(live) + /etc/config (stock).

This facilitates testing of different configurations on live system when unsafe booting since we invalidated measurements by going into recovery and modified PCR4, prohibiting release of the TPM Disk Unlock Key from TPM since measurements are invalidated.

For OS testings, where end user can modify /etc/config.user and then call config-gui.sh to inject that new config into cbfs, seal it on next reboot, only OS kernel options can be modified from compiled board config which is placed under /etc/config in rom:

Example of current ADD/REMOVE board config options usable right now:

export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on intel_iommu=igfx_off"
export CONFIG_BOOT_KERNEL_REMOVE="quiet"

That permits to tinker and tweak OS bootable kernel options, where Xen config tweaks still need to be manually modified inside of grub config and grub config needs to be regenerated

I was thinking of adding CONFIG_BOOT_XEN_ADD and CONFIG_BOOT_XEN_REMOVE options in the set.

@MrChromebox ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant