diff options
| author |   Benjamin Herrenschmidt <benh@kernel.crashing.org> | 2019-08-19 23:13:13 -0300 |
|---|---|---|
| committer |   Michael Ellerman <mpe@ellerman.id.au> | 2019-08-30 09:53:29 +1000 |
| commit | 528229d210781b2da66c6d257a326c21099982b5 (patch) | |
| tree | 9491df4a49f466e49ec74f596b5e6dac28fad979 /arch/powerpc/boot/ops.h | |
| parent | powerpc/pseries: Introduce option to build secure virtual machines (diff) | |
| download | linux-dev-528229d210781b2da66c6d257a326c21099982b5.tar.xz linux-dev-528229d210781b2da66c6d257a326c21099982b5.zip | |
powerpc: Add support for adding an ESM blob to the zImage wrapper
For secure VMs, the signing tool will create a ticket called the "ESM blob"
for the Enter Secure Mode ultravisor call with the signatures of the kernel
and initrd among other things.
This adds support to the wrapper script for adding that blob via the "-e"
option to the zImage.pseries.
It also adds code to the zImage wrapper itself to retrieve and if necessary
relocate the blob, and pass its address to Linux via the device-tree, to be
later consumed by prom_init.
Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
[ bauerman: Minor adjustments to some comments. ]
Signed-off-by: Thiago Jung Bauermann <bauerman@linux.ibm.com>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Link: https://lore.kernel.org/r/20190820021326.6884-4-bauerman@linux.ibm.com
Diffstat (limited to 'arch/powerpc/boot/ops.h')
| -rw-r--r-- | arch/powerpc/boot/ops.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/arch/powerpc/boot/ops.h b/arch/powerpc/boot/ops.h index cd043726ed88..e0606766480f 100644 --- a/arch/powerpc/boot/ops.h +++ b/arch/powerpc/boot/ops.h @@ -251,6 +251,8 @@ extern char _initrd_start[]; extern char _initrd_end[]; extern char _dtb_start[]; extern char _dtb_end[]; +extern char _esm_blob_start[]; +extern char _esm_blob_end[]; static inline __attribute__((const)) int __ilog2_u32(u32 n) |