From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-qt1-f227.google.com (mail-qt1-f227.google.com [209.85.160.227]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 47E083D567F for ; Fri, 9 Oct 2026 08:31:03 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.160.227 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1791534664; cv=none; b=ifHQyFo+kiEkL9Fqk38srjtncXu1Y3gUDtx9mppYihKPVIHa7SIqLBuacmZ+FkOzfEMDQYLsLvHe31o7YsE/yYSKECSxOZMSO3dvHioQn4qmiM19i9ewxSKphI0D+SG21aFCfiYQeIaX5sCR24ukFxnrgVe+QjH74bABQpjVbyc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1791534664; c=relaxed/simple; bh=DIFxmRnwufPE43JRiH6E4AfHlHo9hVO52fExH+S+rK0=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=bo3q9uVXfZRWxVWQyw8Xvw+5F79wmoh3WXpnCz65nVU0a/RzxD6PAjKOfuyxlLciLo0AUIg9jwWppJH1ieQczVvpSUDzMuRUFk8cDC518V1rDpTYHU7CzL3cFYtRprL75gbi1AiXTE4LGys3XbdeNmdzLbcswCcuKOuJZ9zdnRk= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=srcf.ucam.org; spf=pass smtp.mailfrom=cavan.codon.org.uk; arc=none smtp.client-ip=209.85.160.227 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=srcf.ucam.org Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=cavan.codon.org.uk Received: by mail-qt1-f227.google.com with SMTP id d75a77b69052e-53504882980so55343251cf.2 for ; Fri, 09 Oct 2026 01:31:03 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791534662; x=1792139462; h=in-reply-to:content-disposition:content-type:mime-version :references:message-id:subject:cc:to:from:date:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=bIf3Kb4v9Q13a/WyDvBX8cPlNPGYJMWyM06g7YQDej8=; b=O3L15c7G2D4UHYgYGcJELzJyJTP7p1TcqnhO2Bvjz8G4lE7+qjIqYPLUIyI5NKOK7n MFqqDZQyxcjUI30BRkky6dpfa7oPiVo2zM9xDGxJYloTMGzesMaIXn0dz2lfBO5TeZY6 BnQ4nxbfkOr0yH0U9hTFPcyYkeEGm9eLtfU/UpbcHSYRQiZxNx3/5DWkqyuamIKQMXE5 mmTPLb7ZI18PqR0N1nDFHl5EGEmKJBPzlfrZEPzbsJK6Q5n4L58X8FPAVU0W2urvOr0P g/CjH/QX3jBaY5gyL9BMAbSy8lWpPJwvZ9Kls8G4sgk/9SmLevCt0bhAd6g31VT/2+nU ZyAg== X-Forwarded-Encrypted: i=1; AKwUvBx10Mev/EYVN1HrNUilt3NwY5P1rEOel02Ht2UFdquX+r4cWirhIMGWF98Q6QgICL4sYBsBSA/cYw==@vger.kernel.org X-Gm-Message-State: AFuF++l3nDYaW5OeKM/H4BXQaSsCkd2fZyfJ6JXv5NjjZg/NfJzehOlT gUPRh30L/9Fn1or/03cCgk3Pr0FEinacRFiPacZciqp+3tAbx+9Yao/2ToeLwqBMBZ052rT4LNT 9wijHh0fLHJf1sJgSyCfgqP3Ylr7MmvDdMzVlU+iAM96BE7P2sypX X-Gm-Gg: AYBFou1aEgVR99BjYkqFPRWWz7t/FEcrpAgGByqvrBVAr8+dd3q73Kq3Lk0ukNHssBL FTioCoGWND2In+0u2rbayFRx3qCuNqaTUxDJ8B9kExZZ51ecPpTHaTjwZnEyf4fNcjSUcPUeYYd 8vDD2n5T1RNq9N1RimCby2GmPp9qciPuEg6StIy9m/2opkPNFBLgEMmc634l3FHSLHy4WxPFk8B j8KyXknzurr8CdUc4CctdNk475IngXLCWkGIiHfEflgBDN55BUu1dtSfls526sIz15yl5ApcXyU UXaYi2RJsoWU3C6G4Q2YHGJF0dy12Nyat4TD4Z+rywmo9lWITVgTkcgglhcFLecSQTdPBk0CKNu 4xEw= X-Received: by 2002:ac8:5a92:0:b0:533:340e:7483 with SMTP id d75a77b69052e-5359f488e55mr18513871cf.5.1791534662295; Fri, 09 Oct 2026 01:31:02 -0700 (PDT) Received: from cavan.codon.org.uk ([2607:f598:b99a:160:8a88:88ff:fe88:8788]) by smtp-relay.gmail.com with ESMTPS id d75a77b69052e-5359b7dcf1dsm79991cf.37.2026.10.09.01.31.02 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 09 Oct 2026 01:31:02 -0700 (PDT) X-Relaying-Domain: codon.org.uk Received: by cavan.codon.org.uk (Postfix, from userid 1000) id 1E60A12862D5; Fri, 09 Oct 2026 01:31:01 -0700 (PDT) Date: Fri, 9 Oct 2026 01:31:01 -0700 From: Matthew Garrett To: Jarkko Sakkinen Cc: Matthew Garrett , keyrings@vger.kernel.org, James.Bottomley@hansenpartnership.com, linux-integrity@vger.kernel.org, rafael@kernel.org, linux-pm@vger.kernel.org, linux-efi@vger.kernel.org Subject: Re: [PATCH 17/17] PM: hibernate: Allow hibernation under lockdown with signed images Message-ID: References: <20261008132532.1155166-1-matthewg@nvidia.com> <20261008132532.1155166-18-matthewg@nvidia.com> Precedence: bulk X-Mailing-List: keyrings@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: On Thu, Oct 08, 2026 at 07:53:56PM +0300, Jarkko Sakkinen wrote: > I skimmed the rest of the patches but gave up for now given time and > bandwidth, and also having quite loose grip to the changes until I > run them (it's just complex patch set enough). > > What kind of test environment you have in high-level, or could you > give some rough guidelines for a test environment? > > I'm thinking of setting up something with Buildroot, QEMU and swtpm > perhaps. Testing has been qemu + swtpm, with some scripts to build a toy initramfs to automatically do the testing. What would be the best way to share those with you?