[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] Xen 4.3 development update, and stock-taking

On 17/01/13 12:51, Jan Beulich wrote:
On 17/01/13 09:09, Jan Beulich wrote:
But of course pv-ops Linux continues to lack EFI support altogether.
OK, so I think the description needs an update, then.  For Xen to be
fully featured, I think it would need all of the following:
* An EFI-bootable dom0 (this should be done, right?)
"Done" in the sense of todo for pvops (our kernels have been able
to for quite a long while).

Just to be clear here: are you saying that there is no way to boot Xen directly from EFI with a pvops kernel? if so, that seems like a pretty big deal to me...

* dom0 able to make use of EFI run-time services
Indirectly, through hypercalls.

Naturally. :-)

* Xen able to use EFI boot-time services (?)
Sure, that's how things work. Otherwise we wouldn't boot at
all from EFI. The one extra thing that some people had asked
for was to be able to also properly boot Xen via grub.efi.

Doesn't this already work?

* Xen able to detect the existence of a signed Linux binary, and leave
EFI boot-time services enabled for dom0 to use when appropriate
No. We can't leave bot services enabled, and we also don't
need to. The model is that only the Dom0 kernel binary needs
validation at the boot loader level. Everything else will be
done in the kernel (including initrd validation, or really the
parts of it that need validation).

As I understood it, the Ubuntu bootloader will not require an image to be signed to boot. Nonetheless, Ubuntu are still signing their kernel images, because they want the kernel to be able to play some fancy tricks for which they need boot-time services. (I think this is something to do with making it easy to upload your own keys.) Full EFI functionality for Xen would include the ability to do this as well.


Xen-devel mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.