EFI_DT_FIXUP_PROTOCOL

[xypron]

Do we want to include the EFI_DT_FIXUP_PROTOCOL in the EBBR (https://github.com/U-Boot-EFI/EFI_DT_FIXUP_PROTOCOL)?

[glikely]

Depends on how you want to specify it in EBBR. I'm not keen on adding it to the requirements until we know the relevant projects (Yocto, OpenWRT, Buildroot, etc) will adopt it.

What are you thinking for specification text?

[xypron]

Am 16. Januar 2021 10:31:45 MEZ schrieb Grant Likely <notifications@github.com>:

Depends on how you want to specify it in EBBR. I'm not keen on adding it to the requirements until we know the relevant projects (Yocto, OpenWRT, Buildroot, etc) will adopt it.

Hello Grant, They will be using the U-Boot source where I have enabled the protocol. To me the relevant project is GRUB. I have analyzed what code needs changing there but not implemented anything yet. (OpenWRT does not use GRUB.) I had hoped for feedback in the DTE project where the idea emerged. But in the last meeting I was referred to EBBR.

What are you thinking for specification text?

I would copy the readme from https://github.com/U-Boot-EFI/EFI_DT_FIXUP_PROTOCOL. Best regards Heinrich

[jan-kiszka]

What's the status of this? U-Boot supports it now, systemd picked it up, EFI Boot Guard will as well - but we may also need it in alternative UEFI providers (e.g. edk2).

[jan-kiszka]

Second ping. We are relying in this interface by now to enable secure boot via a unified kernel image for Debian (and conceptually also other distros) while permitting replacement DTBs in that unified kernel image.

https://github.com/siemens/efibootguard/blob/master/docs/UNIFIED-KERNEL.md
https://github.com/siemens/efibootguard/blob/master/kernel-stub/fdt.c
https://gitlab.com/cip-project/cip-core/isar-cip-core

[xypron]

@glikely Could you, please, send out an invite for the next EBBR meeting to discuss this protocol?

[jan-kiszka]

Did this discussion take place?

[jan-kiszka]

@xypron, I heard from @glikely that someone else is driving EBBR now - but I forgot the name ☹️.

[daniel-thompson]

It is on the agenda for the upcoming meeting: https://lists.linaro.org/archives/list/boot-architecture@lists.linaro.org/thread/N6BPBGHT5U2LOZRBSMIVIVLFTIISBXFR/

[jan-kiszka]

I've found another use case where this protocol would be very beneficial - rather than the fragile approach that is currently implemented in a BSP. See U-Boot-EFI/EFI_DT_FIXUP_PROTOCOL#1.

[xypron]

Am 19. September 2022 14:27:23 MESZ schrieb Jan Kiszka ***@***.***>: ***@***.***, I heard from @glikely that someone else is driving EBBR now - but I forgot the name ☹️.

Vincent Stehlé ***@***.***> organises the EBBR meetings now. There will be a meeting next Monday. Best regards Heinrich

[jan-kiszka]

More than a year has passed - any progress with this?