From: Jarkko Sakkinen <jarkko@kernel.org>
To: Paul Menzel <pmenzel@molgen.mpg.de>
Cc: linux-kernel@vger.kernel.org, keyrings@vger.kernel.org,
linux-integrity@vger.kernel.org,
Stefan Berger <stefanb@linux.ibm.com>,
Jarkko Sakkinen <jarkko.sakkinen@opinsys.com>,
Jonathan Corbet <corbet@lwn.net>, Peter Huewe <peterhuewe@gmx.de>,
Jason Gunthorpe <jgg@ziepe.ca>,
Andrew Morton <akpm@linux-foundation.org>,
"Paul E. McKenney" <paulmck@kernel.org>,
Steven Rostedt <rostedt@goodmis.org>,
Neeraj Upadhyay <Neeraj.Upadhyay@amd.com>,
"Borislav Petkov (AMD)" <bp@alien8.de>,
Arnd Bergmann <arnd@arndb.de>,
Frank van der Linden <fvdl@google.com>,
linux-doc@vger.kernel.org
Subject: Re: [RFC PATCH] tpm, tpm_vtpm_proxy: boot-time TPM
Date: Sat, 19 Jul 2025 17:16:04 +0300 [thread overview]
Message-ID: <aHuohdh2tVU48o9U@kernel.org> (raw)
In-Reply-To: <9193c59f-3982-42f4-9b05-c6cdefe3b05c@molgen.mpg.de>
On Wed, Jul 16, 2025 at 02:23:04PM +0200, Paul Menzel wrote:
> Dear Jarkko,
>
>
> Am 16.07.25 um 14:18 schrieb Jarkko Sakkinen:
> > From: Jarkko Sakkinen <jarkko.sakkinen@opinsys.com>
>
> Congratulations on the new(?) job! Big thanks to that company to do upstream
> Linux kernel work.
>
> > Provide a kernel command-line parameter named as `supplicant`, which
> > contains a path to an TPM emulator binary. When defind, the kernel will
>
> defin*e*d
>
> > launch the program during boot-time.
> >
> > This feature is most useful in feature testing e.g., in environments
> > where other means are not possible, such as CI runners. Its original use
> > case highlights also quite well of its applicability for pre-production
> > hardware: it was used to provide a TPM implemnentation for a RISC-V SoC
>
> implementation
Thanks for the corrections!
I think also the code changes are actually half-broken or missing some
of the stuff. I'm glad that I remebered to use RFC tag ;-)
>
> > running on FPGA with no TPM HW implementation at the time.
> >
> > Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@opinsys.com>
> > ---
> > Bumped into this in my archives so thought to make it available just in
> > case anyone is interested.
>
> Do you have such a TPM emulator binary?
>
> Thank you for upstreaming this.
It was like internal project within research group but e.g, MS TPM
emulator [1] is pretty easy to wrap and wire with a program that does
three functions:
1. Feeds the emulator with incoming data coming from the client
through socket provided by vtpmx.
2. Writes the data coming from the emulator back to the client.
3. Handles TPM2_CC_LOCALITY.
MS TPM 2.0 emulator is quite generic and abstracted out code, so you can
almost just take the source files, ignore the build files, and meld it
into your own thing and it will envetually work, if you spend a few
afternoons on it :-)
[1] https://github.com/microsoft/ms-tpm-20-ref
BR, Jarkko
next prev parent reply other threads:[~2025-07-19 14:16 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-07-16 12:18 [RFC PATCH] tpm, tpm_vtpm_proxy: boot-time TPM Jarkko Sakkinen
2025-07-16 12:23 ` Paul Menzel
2025-07-19 14:16 ` Jarkko Sakkinen [this message]
2025-07-16 18:44 ` Randy Dunlap
2025-07-19 14:17 ` Jarkko Sakkinen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=aHuohdh2tVU48o9U@kernel.org \
--to=jarkko@kernel.org \
--cc=Neeraj.Upadhyay@amd.com \
--cc=akpm@linux-foundation.org \
--cc=arnd@arndb.de \
--cc=bp@alien8.de \
--cc=corbet@lwn.net \
--cc=fvdl@google.com \
--cc=jarkko.sakkinen@opinsys.com \
--cc=jgg@ziepe.ca \
--cc=keyrings@vger.kernel.org \
--cc=linux-doc@vger.kernel.org \
--cc=linux-integrity@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=paulmck@kernel.org \
--cc=peterhuewe@gmx.de \
--cc=pmenzel@molgen.mpg.de \
--cc=rostedt@goodmis.org \
--cc=stefanb@linux.ibm.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox