[PATCH v12 09/19] x86: Secure Launch kernel early boot stub

ross.philipson at oracle.com ross.philipson at oracle.com
Fri Mar 7 11:42:07 PST 2025


On 3/6/25 11:00 PM, 'Jarkko Sakkinen' via trenchboot-devel wrote:
> On Thu, Dec 19, 2024 at 11:42:06AM -0800, Ross Philipson wrote:
>> The Secure Launch (SL) stub provides the entry point for Intel TXT (and
>> later AMD SKINIT) to vector to during the late launch. The symbol
> 
> Does "to vector to" translate into to jump into during late launch? :-)
> 
> Given the complicated topic in the first place I'd use as down to
> earth language as I possibly could where it can be used.

Yes it does mean that so I can to just "jump".

Ross

> 
> 
> 
>> sl_stub_entry is that entry point and its offset into the kernel is
>> conveyed to the launching code using the MLE (Measured Launch
>> Environment) header in the structure named mle_header. The offset of the
>> MLE header is set in the kernel_info. The routine sl_stub contains the
>> very early late launch setup code responsible for setting up the basic
>> environment to allow the normal kernel startup_32 code to proceed. It is
>> also responsible for properly waking and handling the APs on Intel
>> platforms. The routine sl_main which runs after entering 64b mode is
>> responsible for measuring configuration and module information before
>> it is used like the boot params, the kernel command line, the TXT heap,
>> an external initramfs, etc.
>>
>> Signed-off-by: Ross Philipson <ross.philipson at oracle.com>
> 
> Otherwise this is looking somewhat decent!
> 
> BR, Jarkko
> 




More information about the kexec mailing list