[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-devel] Pv-grub and vTPM PCR extension


  • To: xen-devel@xxxxxxxxxxxxx
  • From: Marcos Simo PIco <marcossp@xxxxxx>
  • Date: Fri, 11 Sep 2015 19:37:39 +0200
  • Delivery-date: Mon, 14 Sep 2015 06:33:18 +0000
  • List-id: Xen developer discussion <xen-devel.lists.xen.org>

Hi all,

I've been playing with vTPMs without any issue. I used to boot guests by providing the kernel from dom0. Then I wanted to boot my guests using pv-grub. Pv-grub succeeds connecting to the vTPM, however, PCRs are not extended. The only PCR reflecting measurements is PCR10 (IMA).

vTPMs seems to work properly in either cases, but I expected PCRs 4-5 to be extended when booting with pv-grub. Am I missing something?

This is how the guest's config file looks like:

#PV-GRUB
kernel = '/usr/lib/grub-xen/grub-x86_64-xen.bin'
extra = '(hd0,0)/boot/grub/menu.lst'
root = ''
#PV-GRUB

vcpus = '1'
memory = '3072'
disk=['tap:aio:/root/domu.img,xvda1,w']
name = 'domU'
vif = [ '','bridge=xenbr0']
dhcp = "dhcp"
on_poweroff = 'destroy'
on_reboot = 'restart'
on_crash = 'restart'
vtpm=["backend=vtpm"]

Thanks for any help you can provide.

Best,
Marcos.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.