* Pv-grub and vTPM PCR extension
@ 2015-09-11 17:37 Marcos Simo PIco
0 siblings, 0 replies; only message in thread
From: Marcos Simo PIco @ 2015-09-11 17:37 UTC (permalink / raw)
To: xen-devel
Hi all,
I've been playing with vTPMs without any issue. I used to boot guests by
providing the kernel from dom0. Then I wanted to boot my guests using
pv-grub. Pv-grub succeeds connecting to the vTPM, however, PCRs are not
extended. The only PCR reflecting measurements is PCR10 (IMA).
vTPMs seems to work properly in either cases, but I expected PCRs 4-5 to
be extended when booting with pv-grub. Am I missing something?
This is how the guest's config file looks like:
#PV-GRUB
kernel = '/usr/lib/grub-xen/grub-x86_64-xen.bin'
extra = '(hd0,0)/boot/grub/menu.lst'
root = ''
#PV-GRUB
vcpus = '1'
memory = '3072'
disk=['tap:aio:/root/domu.img,xvda1,w']
name = 'domU'
vif = [ '','bridge=xenbr0']
dhcp = "dhcp"
on_poweroff = 'destroy'
on_reboot = 'restart'
on_crash = 'restart'
vtpm=["backend=vtpm"]
Thanks for any help you can provide.
Best,
Marcos.
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2015-09-11 17:37 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-09-11 17:37 Pv-grub and vTPM PCR extension Marcos Simo PIco
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).