Re: [tboot-devel] tboot setup with Ubuntu Server 12.10 and20_linux_tboot

[<Cha...@gd...>]

Jay,

Basically the instructions for using the grub.conf file appl. The steps
are pretty much as outlines in the LCP_v2.txt document.

1) Create the LCP - this results in the list.data file
2) Create the VL

3) Take ownership of the TPM
4) Define the error index (if not already done)
5) Define the owner and VL indices (0x40000001 and 0x20000001,
respectively)

6) write the policies to the TPM

The Tricky part is next. When you modify the 20_linux_grub_file, make
sure that you get the appropriate SINIT module, and that your list.data
file is listed. Also - very important, make sure that the file names are
doubled (Grub2 does some strange things to the lines in the grub.cfg
file).

Of course for testing purposes, you can just hack on the grub.cfg file
(I know is says don't - but as long as you don't run the grub-mkconfig
program, you'll be okay. Again, make sure the file names are doubled,
e.g.

kernel	/tboot.gz	/tboot.gz	logging=serial,vga

Note that the tboot.gz name is doubled.

Hope this helps,

Charles

> -----Original Message-----
> From: Jay Schwichtenberg [mailto:em...@ya...]
> Sent: Monday, March 04, 2013 11:53 AM
> To: tbo...@li...
> Subject: [tboot-devel] tboot setup with Ubuntu Server 12.10
> and20_linux_tboot
> 
> Hello,
> 
> Don't know if this is a Ubuntu thing or tboot but need to start
> tracking it down somewhere.
> 
> I'm trying to get tboot working with Ubuntu Server 12.10 on a dual
Xeon
> Intel server and have not been having any success. I've read the
> documents lcptools2 and policy_v2 and those make sense and I can
> generate a list.data file. But there is no grub.conf or menu.lst file
> to work with.
> 
> With Ubuntu 12.10 Server they now use a file called boot.cfg that was
> generated by grub-mkconfig from scripts in /etc/grub.d. One of these
> scripts is 20_linux_tboot which generates the tboot section in the
> boot.cfg file. I can see that with the procedures in the documents
that
> you'd still need to generate something that has the private and public
> keys and also setup the NV indexes. But a lot of the other information
> seems to be generated by the 20_linux_tboot script.
> 
> Is there any information on how to setup tboot using this
20_linux_boot
> boot script and the way they're using grub?
> 
> I don't have a serial cable for this thing yet (takes a RJ45 to serial
> cable) so I don't have a tboot log. Should have that done by the end
of
> the day.
> 
> Thanks in advance.
> Jay S.
> 
>
-----------------------------------------------------------------------
> -------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics Download AppDynamics Lite
> for free today:
> http://p.sf.net/sfu/appdyn_d2d_feb
> _______________________________________________
> tboot-devel mailing list
> tbo...@li...
> https://lists.sourceforge.net/lists/listinfo/tboot-devel