tboot-devel — Developer support

Re: [tboot-devel] tboot 1.9.12 build failure if CFLAGS is set in environment

[Timo L. <tim...@ik...>]

On Thu, 28 May 2020, Timo Lindfors wrote:
>> If you don't see this dump in failing scenario please add
>> "set debug=mmap" to grub.cfg, now GRUB should print that.
>
> I added this after the serial console setup but this does not seem to print 
> anything? I also cannot find it in the grub2 source code. Is this the correct 
> syntax?

Assuming you meant "lsmmap" I am attaching here output from cold and warm 
boot. Unfortunately as you can see they are identical until the cold boot 
gets stuck but maybe this still helps?

-Timo

Re: [tboot-devel] tboot 1.9.12 build failure if CFLAGS is set in environment

[Timo L. <tim...@ik...>]

On Thu, 28 May 2020, Lukasz Hawrylko wrote:
> I understand that still you have the same behaviour - cold boot failing,
> reboot after Linux working, correct? Please add "dump_memmap=true" to
> TBOOT's command line it should enable dumping of EFI memory map.

Correct. Unfortunately dump_memmap=true does not print anything before 
it gets stuck on cold boot.

> If you don't see this dump in failing scenario please add
> "set debug=mmap" to grub.cfg, now GRUB should print that.

I added this after the serial console setup but this does not seem to 
print anything? I also cannot find it in the grub2 source code. Is 
this the correct syntax?

You can see the logs and other data here:

https://lindi.iki.fi/lindi/tboot/dump_memmap-cold.tar

https://lindi.iki.fi/lindi/tboot/dump_memmap-warm.tar


-Timo

Re: [tboot-devel] tboot 1.9.12 build failure if CFLAGS is set in environment

[Lukasz H. <luk...@li...>]

Hi Tomo

On Thu, 2020-05-28 at 02:22 +0300, Timo Lindfors wrote:
> Hi,
> 
> On Mon, 25 May 2020, Timo Lindfors wrote:
> > I only see the "original e820 map:" listing. I'm trying to get serial console 
> > to make this easier to debug and to compare how warm-boot and cold-boot 
> > differs without having to compare photos from the screen.
> 
> I bought a second-hand Thinkpad R400 and Thinkpad type 2504 dock that 
> includes a serial port. Then I soldered a relay to the power button and 
> wrote a tool that lets me say
> 
> baremetal_run -o foo.tar foo.img
> 
> to run "foo.img" on real hardware and to collect network, serial, audio 
> and video output automatically.
> 
> Internally this works by setting the laptop boot order so that it tries
> to boot from network first and then from local hard disk. By changing the 
> DHCP configuration I can alternate between PXE booting an initrd that
> writes an image to disk and booting from local disk.
> 
> 
> Anyways, with the help of this I was able to run git bisect. It tells me 
> that the first bad commit is
> 
> changeset:   562:77bca150d0d5
> user:        Lukasz Hawrylko <luk...@in...>
> date:        Fri Feb 21 11:07:00 2020 +0100
> summary:     Add support for EFI memory map parse/modification
> 
> 
> Any idea on how to debug this further?
> 
> -Timo
> 

That's awesome idea to create such environment for an automated testing.

I understand that still you have the same behaviour - cold boot failing,
reboot after Linux working, correct? Please add "dump_memmap=true" to
TBOOT's command line it should enable dumping of EFI memory map.

If you don't see this dump in failing scenario please add
"set debug=mmap" to grub.cfg, now GRUB should print that.

Than you can compare if there are any differences in EFI memory map
between passing and failing scenario. Please also send me both logs. 

Commit, that you have mentioned, adds EFI memory map parsing in TBOOT to
exclude memory occupied by EFI boot services from internal allocator. I
had to do that because in some platforms BIOS puts there data that Linux
wants to access and TBOOT overwrites it.

Thanks,
Lukasz

Re: [tboot-devel] tboot 1.9.12 build failure if CFLAGS is set in environment

[Timo L. <tim...@ik...>]

Hi,

On Mon, 25 May 2020, Timo Lindfors wrote:
> I only see the "original e820 map:" listing. I'm trying to get serial console 
> to make this easier to debug and to compare how warm-boot and cold-boot 
> differs without having to compare photos from the screen.

I bought a second-hand Thinkpad R400 and Thinkpad type 2504 dock that 
includes a serial port. Then I soldered a relay to the power button and 
wrote a tool that lets me say

baremetal_run -o foo.tar foo.img

to run "foo.img" on real hardware and to collect network, serial, audio 
and video output automatically.

Internally this works by setting the laptop boot order so that it tries
to boot from network first and then from local hard disk. By changing the 
DHCP configuration I can alternate between PXE booting an initrd that
writes an image to disk and booting from local disk.


Anyways, with the help of this I was able to run git bisect. It tells me 
that the first bad commit is

changeset:   562:77bca150d0d5
user:        Lukasz Hawrylko <luk...@in...>
date:        Fri Feb 21 11:07:00 2020 +0100
summary:     Add support for EFI memory map parse/modification


Any idea on how to debug this further?

-Timo

Re: [tboot-devel] tboot 1.9.12 build failure if CFLAGS is set in environment

[Timo L. <tim...@ik...>]

On Mon, 25 May 2020, Lukasz Hawrylko wrote:
> That is a really strange behaviour. I have just build tip from mercurial
> and run it on TPM1.2 and TPM2.0 PCs - it works (cold-booted too). Can
> you please share me more informations about your test case? Do you see
> anything on the screen?

I only see the "original e820 map:" listing. I'm trying to get serial 
console to make this easier to debug and to compare how warm-boot and 
cold-boot differs without having to compare photos from the screen.

-Timo

Re: [tboot-devel] [PATCH] Ensure txt-acminfo does not print false information if msr is not loaded

[Lukasz H. <luk...@li...>]

On Sat, 2020-05-23 at 21:00 +0300, Timo Juhani Lindfors wrote:
> # HG changeset patch
> # User Timo Juhani Lindfors <tim...@ik...>
> # Date 1590255168 -10800
> #      Sat May 23 20:32:48 2020 +0300
> # Branch fix/acminfo-without-msr
> # Node ID d4591fde44c08fb5a0f1d1531b6df02c7223c67e
> # Parent  2ada74557b3db6c13deeda874c20c5132e40c53b
> Ensure txt-acminfo does not print false information if msr is not loaded
> 
> Previously txt-acminfo would report "ACM does not match platform"
> for all ACMs if the msr module was not loaded.
> 
> Signed-off-by: Timo Juhani Lindfors <tim...@ik...>
> 
> diff -r 2ada74557b3d -r d4591fde44c0 utils/txt-acminfo.c
> --- a/utils/txt-acminfo.c	Fri May 15 09:59:23 2020 +0200
> +++ b/utils/txt-acminfo.c	Sat May 23 20:32:48 2020 +0300
> @@ -39,6 +39,7 @@
>  #include <stdint.h>
>  #include <stdio.h>
>  #include <unistd.h>
> +#include <stdlib.h>
>  #include <string.h>
>  #include <sys/types.h>
>  #include <sys/stat.h>
> @@ -75,15 +76,19 @@
>      int fd = open("/dev/cpu/0/msr", O_RDONLY);
>      if ( fd == -1 ) {
>          printf("Error:  failed to open /dev/cpu/0/msr\n");
> -        return 0;
> +        printf("Perhaps you should modprobe msr?\n");
> +        exit(1);
>      }
>  
>      /* lseek() to MSR # */
> -    if ( lseek(fd, msr, SEEK_SET) == (off_t)-1 )
> +    if ( lseek(fd, msr, SEEK_SET) == (off_t)-1 ) {
>          printf("Error:  failed to find MSR 0x%x\n", msr);
> -    else {
> -        if ( read(fd, &val, sizeof(val)) != sizeof(val) )
> +        exit(1);
> +    } else {
> +        if ( read(fd, &val, sizeof(val)) != sizeof(val) ) {
>              printf("Error:  failed to read MSR 0x%x value\n", msr);
> +            exit(1);
> +        }
>      }
>  
>      close(fd);
> 

Merged.

Thanks,
Lukasz

Re: [tboot-devel] [PATCH] Fix man page syntax error

[Lukasz H. <luk...@li...>]

On Sat, 2020-05-23 at 21:01 +0300, Timo Juhani Lindfors wrote:
> # HG changeset patch
> # User Timo Juhani Lindfors <tim...@ik...>
> # Date 1590255451 -10800
> #      Sat May 23 20:37:31 2020 +0300
> # Branch fix/manpage-syntax1
> # Node ID 21e7be142605955977ea1e36b781f313058da8c9
> # Parent  2f505db817e62cf84a6a83649d259520e5915e24
> Fix man page syntax error
> 
> Previously man docs/man/lcp2_crtpol.8 >/dev/null printed
> 
> an-old.tmac: <standard input>: line 22: 'R' is a string (producing the registered sign), not a macro.
> 
> Signed-off-by: Timo Juhani Lindfors <tim...@ik...>
> 
> diff -r 2f505db817e6 -r 21e7be142605 docs/man/lcp2_crtpol.8
> --- a/docs/man/lcp2_crtpol.8	Wed May 20 10:48:26 2020 +0200
> +++ b/docs/man/lcp2_crtpol.8	Sat May 23 20:37:31 2020 +0300
> @@ -19,7 +19,7 @@
>  .IR <pol_ctrl> ]
>  .B --pol
>  .I <POLICY\ FILE>
> -.R [ --data
> +.RB [ --data
>  .IR <POLICY\ DATA\ FILE> ]
>  .RB [ --mask
>  .IR mask ]
> 
> 

Merged.

Thanks,
Lukasz

Re: [tboot-devel] tboot 1.9.12 build failure if CFLAGS is set in environment

[Lukasz H. <luk...@li...>]

Hi Timo

On Sun, 2020-05-24 at 19:15 +0300, Timo Lindfors wrote:
> Hi,
> 
> On Sat, 23 May 2020, Timo Lindfors wrote:
> > boot on Lenovo T430s when I boot the latest code from mercurial. 1.9.12 seems 
> > to boot ok. Commenting out "export CFLAGS" seems to help. How should
> > I debug this?
> 
> Currently it seems that tboot actually only boots properly if I first boot 
> Linux and then reboot and select tboot. If I cold-boot tboot then it gets 
> stuck. I'm investigating options on how to test this in a more automatic 
> way.

That is a really strange behaviour. I have just build tip from mercurial
and run it on TPM1.2 and TPM2.0 PCs - it works (cold-booted too). Can
you please share me more informations about your test case? Do you see
anything on the screen?

Thanks,
Lukasz

Re: [tboot-devel] tboot 1.9.12 build failure if CFLAGS is set in environment

[Timo L. <tim...@ik...>]

Hi,

On Sat, 23 May 2020, Timo Lindfors wrote:
> boot on Lenovo T430s when I boot the latest code from mercurial. 1.9.12 seems 
> to boot ok. Commenting out "export CFLAGS" seems to help. How should
> I debug this?

Currently it seems that tboot actually only boots properly if I first boot 
Linux and then reboot and select tboot. If I cold-boot tboot then it gets 
stuck. I'm investigating options on how to test this in a more automatic 
way.

-Timo

[tboot-devel] [PATCH] Fix man page syntax error

[Timo J. L. <tim...@ik...>]

# HG changeset patch
# User Timo Juhani Lindfors <tim...@ik...>
# Date 1590255451 -10800
#      Sat May 23 20:37:31 2020 +0300
# Branch fix/manpage-syntax1
# Node ID 21e7be142605955977ea1e36b781f313058da8c9
# Parent  2f505db817e62cf84a6a83649d259520e5915e24
Fix man page syntax error

Previously man docs/man/lcp2_crtpol.8 >/dev/null printed

an-old.tmac: <standard input>: line 22: 'R' is a string (producing the registered sign), not a macro.

Signed-off-by: Timo Juhani Lindfors <tim...@ik...>

diff -r 2f505db817e6 -r 21e7be142605 docs/man/lcp2_crtpol.8
--- a/docs/man/lcp2_crtpol.8	Wed May 20 10:48:26 2020 +0200
+++ b/docs/man/lcp2_crtpol.8	Sat May 23 20:37:31 2020 +0300
@@ -19,7 +19,7 @@
 .IR <pol_ctrl> ]
 .B --pol
 .I <POLICY\ FILE>
-.R [ --data
+.RB [ --data
 .IR <POLICY\ DATA\ FILE> ]
 .RB [ --mask
 .IR mask ]

[tboot-devel] [PATCH] Ensure txt-acminfo does not print false information if msr is not loaded

[Timo J. L. <tim...@ik...>]

# HG changeset patch
# User Timo Juhani Lindfors <tim...@ik...>
# Date 1590255168 -10800
#      Sat May 23 20:32:48 2020 +0300
# Branch fix/acminfo-without-msr
# Node ID d4591fde44c08fb5a0f1d1531b6df02c7223c67e
# Parent  2ada74557b3db6c13deeda874c20c5132e40c53b
Ensure txt-acminfo does not print false information if msr is not loaded

Previously txt-acminfo would report "ACM does not match platform"
for all ACMs if the msr module was not loaded.

Signed-off-by: Timo Juhani Lindfors <tim...@ik...>

diff -r 2ada74557b3d -r d4591fde44c0 utils/txt-acminfo.c
--- a/utils/txt-acminfo.c	Fri May 15 09:59:23 2020 +0200
+++ b/utils/txt-acminfo.c	Sat May 23 20:32:48 2020 +0300
@@ -39,6 +39,7 @@
 #include <stdint.h>
 #include <stdio.h>
 #include <unistd.h>
+#include <stdlib.h>
 #include <string.h>
 #include <sys/types.h>
 #include <sys/stat.h>
@@ -75,15 +76,19 @@
     int fd = open("/dev/cpu/0/msr", O_RDONLY);
     if ( fd == -1 ) {
         printf("Error:  failed to open /dev/cpu/0/msr\n");
-        return 0;
+        printf("Perhaps you should modprobe msr?\n");
+        exit(1);
     }
 
     /* lseek() to MSR # */
-    if ( lseek(fd, msr, SEEK_SET) == (off_t)-1 )
+    if ( lseek(fd, msr, SEEK_SET) == (off_t)-1 ) {
         printf("Error:  failed to find MSR 0x%x\n", msr);
-    else {
-        if ( read(fd, &val, sizeof(val)) != sizeof(val) )
+        exit(1);
+    } else {
+        if ( read(fd, &val, sizeof(val)) != sizeof(val) ) {
             printf("Error:  failed to read MSR 0x%x value\n", msr);
+            exit(1);
+        }
     }
 
     close(fd);

Re: [tboot-devel] tboot 1.9.12 build failure if CFLAGS is set in environment

[Timo L. <tim...@ik...>]

Hi,

On Tue, 12 May 2020, Timo Lindfors wrote:
> On Tue, 12 May 2020, Lukasz Hawrylko wrote:
>> Thanks for investigating that issue. Fixed in a6180f9e9e86
>
> Thanks, seems to build now.

I said this perhaps bit too soon. I am experiencing tboot getting stuck 
at boot on Lenovo T430s when I boot the latest code from mercurial. 1.9.12 
seems to boot ok. Commenting out "export CFLAGS" seems to help. How should
I debug this?

-Timo

Re: [tboot-devel] rename parse_err?

[Timo L. <tim...@ik...>]

On Mon, 18 May 2020, Lukasz Hawrylko wrote:
> 1.9.12 was released recently, so I don't have right now plans for new
> release timeline. There are few more changes that I am working on right
> now and I want to include them in next release.

Ok, I can upload a mercurial snapshot as well, no problem.

> As you are using trousers I guess that you have TPM 1.2 am I right? It
> is EOL now that's why nobody cares about trousers project, is it
> possible in your platform to use TPM 2.0? I highly recommend to upgrade,
> than you can use tpm2-tools.

Yes, there are quite a lot of existing TPM 1.2 systems. Some support 
upgrading to TPM 2.0 but many don't. I've been doing my testing mostly on 
Lenovo T430s laptop. I'd like to use a newer laptop for this but the ones 
that I have available don't support TXT (checked T460, T470 and T490).

The situation is bit better with servers but due to this COVID-19 
situation I cannot really do any of my testing on servers. Remotely 
upgrading to TPM 2.0 sounds very scary.

-Timo

Re: [tboot-devel] txt-acminfo report incorrect data if msr module is not loaded

[Lukasz H. <luk...@li...>]

On Sat, 2020-05-16 at 16:03 +0300, Timo Lindfors wrote:
> Hi,
> 
> while testing latest tboot with latest debian unstable I noticed that 
> txt-acminfo reports "ACM does not match platform" for all ACM modules. It 
> seems that this happens since /dev/cpu/0/msr does not exist by default in 
> Debian. There is an error "Error: failed to open /dev/cpu/0/msr" but since 
> txt-acminfo reports so much information this can easily be missed by a 
> user. After I run "modprobe msr" txt-acminfo behaves normally again.
> 
> Could we make missing /dev/cpu/0/msr a fatal error that should suggest the 
> user to run "modprobe msr"? In any case txt-acminfo should not report 
> "ACM does not match platform" for a valid ACM file. It should report 
> "Could not determine if ACM matches platform (maybe you need to modprobe 
> msr)?" or something.
> 
> -Timo
> 
> 

Hi Timo

That sounds reasonable. Could you please send a patch with that change?

Thanks,
Lukasz

Re: [tboot-devel] rename parse_err?

[Lukasz H. <luk...@li...>]

On Fri, 2020-05-15 at 18:13 +0300, Timo Lindfors wrote:
> Hi,
> 
> On Fri, 15 May 2020, Lukasz Hawrylko wrote:
> > Done.
> 
> Thanks, I'll do some testing and ask for further feedback. Would it be 
> possible to release a new version after some time with all these
> changes so that they would be part of the eventual Debian upload?

1.9.12 was released recently, so I don't have right now plans for new
release timeline. There are few more changes that I am working on right
now and I want to include them in next release.

> 
> Btw, can you recommend some tool for defining an NVRAM region that would 
> allow me to specify the DRTM PCR values that need to match before it can 
> be accessed? tpm_nvdefine -f works only with PCRs <= 15. I sent a patch
> last summer to fix this but the project does not seem to be very active
> and the patch appears to have been forgotten:
> 
> https://www.mail-archive.com/tro...@li.../msg00684.html
> 
> 
> As far as I understand, the defindex tool in tboot does not let me specify 
> PCR values either. I need this for forward-sealing of data across 
> updates.
> 

As you are using trousers I guess that you have TPM 1.2 am I right? It
is EOL now that's why nobody cares about trousers project, is it
possible in your platform to use TPM 2.0? I highly recommend to upgrade,
than you can use tpm2-tools.

Thanks,
Lukasz

[tboot-devel] txt-acminfo report incorrect data if msr module is not loaded

[Timo L. <tim...@ik...>]

Hi,

while testing latest tboot with latest debian unstable I noticed that 
txt-acminfo reports "ACM does not match platform" for all ACM modules. It 
seems that this happens since /dev/cpu/0/msr does not exist by default in 
Debian. There is an error "Error: failed to open /dev/cpu/0/msr" but since 
txt-acminfo reports so much information this can easily be missed by a 
user. After I run "modprobe msr" txt-acminfo behaves normally again.

Could we make missing /dev/cpu/0/msr a fatal error that should suggest the 
user to run "modprobe msr"? In any case txt-acminfo should not report 
"ACM does not match platform" for a valid ACM file. It should report 
"Could not determine if ACM matches platform (maybe you need to modprobe 
msr)?" or something.

-Timo

Re: [tboot-devel] rename parse_err?

[Timo L. <tim...@ik...>]

Hi,

On Fri, 15 May 2020, Lukasz Hawrylko wrote:
> Done.

Thanks, I'll do some testing and ask for further feedback. Would it be 
possible to release a new version after some time with all these
changes so that they would be part of the eventual Debian upload?

Btw, can you recommend some tool for defining an NVRAM region that would 
allow me to specify the DRTM PCR values that need to match before it can 
be accessed? tpm_nvdefine -f works only with PCRs <= 15. I sent a patch
last summer to fix this but the project does not seem to be very active
and the patch appears to have been forgotten:

https://www.mail-archive.com/tro...@li.../msg00684.html

As far as I understand, the defindex tool in tboot does not let me specify 
PCR values either. I need this for forward-sealing of data across 
updates.

-Timo

Re: [tboot-devel] rename parse_err?

[Lukasz H. <luk...@li...>]

On Thu, 2020-05-14 at 16:42 +0300, Timo Lindfors wrote:
> Hi,
> 
> On Thu, 14 May 2020, Lukasz Hawrylko wrote:
> > Agree, this should be changed. I have also renamed acminfo to txt-
> > acminfo, now all these tools has 'txt-' prefix.
> 
> Great. I guess you also updated the man pages to refer to these new names? 
> Also docs/Makefile should list man pages for all commands that are 
> installed.
> 
> -Timo
> 

Done.

Thanks,
Lukasz

Re: [tboot-devel] packaging for debian, some clarifications for licensing?

[Lukasz H. <luk...@li...>]

On Tue, 2020-05-12 at 12:26 +0300, Timo Lindfors wrote:
> Hi
> 
> On Tue, 12 May 2020, Lukasz Hawrylko wrote:
> > The base TBOOT licence is BSD-3-clause, however some files that comes
> > from other projects have different licenses (but all of them are
> > compatible with BSD-3-clause).
> > 
> > I can add information to COPYING file that looks like: "All files that
> > do not have license header, have BSD-3-clause license and are
> > copyrighted by Intel Corporation". Will it solve all license gaps in
> > your opinion?
> 
> Yes, I think that would clarify the situation nicely but I would also 
> include the full license text in COPYING and not just a reference to 
> "BSD-3-clause". With these changes I feel I can upload this to Debian 
> Gitlab (https://salsa.debian.org/debian/tboot/), the actual upload to the 
> archive will of course still go through review by the Debian FTP master 
> team.
> 
> -Timo
> 

Done. Thank you for your support, adding TBOOT to Debian is a great
idea.

Thanks,
Lukasz

Re: [tboot-devel] rename parse_err?

[Timo L. <tim...@ik...>]

Hi,

On Thu, 14 May 2020, Lukasz Hawrylko wrote:
> Agree, this should be changed. I have also renamed acminfo to txt-
> acminfo, now all these tools has 'txt-' prefix.

Great. I guess you also updated the man pages to refer to these new names? 
Also docs/Makefile should list man pages for all commands that are 
installed.

-Timo

Re: [tboot-devel] rename parse_err?

[Lukasz H. <luk...@li...>]

On Sun, 2020-05-10 at 23:55 +0300, Timo Lindfors wrote:
> Hi,
> 
> tboot installs a binary called "parse_err". I realize tboot has been doing 
> this for a long time but have you considered renaming the binary to 
> something less generic? Maybe txt_parse_err?
> 
> -Timo
> 

Agree, this should be changed. I have also renamed acminfo to txt-
acminfo, now all these tools has 'txt-' prefix.

Thanks,
Lukasz

Re: [tboot-devel] PATCH: add missing man pages

[Lukasz H. <luk...@li...>]

On Sun, 2020-05-10 at 23:43 +0300, Timo Lindfors wrote:
> Hi,
> 
> many commands installed by tboot don't seem to have man pages. I did some 
> detective work based on --help output and source code and wrote the 
> missing pages. Can you please take a look that they are accurate?
> 
> You can find the pages in the feature/add-missing-man-pages-1 branch at
> 
> https://lindi.iki.fi/lindi/hg/tboot/
> 
> -Timo
> 

Thanks for awesome work. I did few changes and it is now merged to
upstream.

Thanks,
Lukasz

Re: [tboot-devel] PATCH: man pages installed for tools that are not installed

[Lukasz H. <luk...@li...>]

On Sun, 2020-05-10 at 16:08 +0300, Timo Lindfors wrote:
> Hi,
> 
> currently tboot installs man pages for the following commands that are not 
> installed:
> 
> lcp_crtpconf lcp_crtpol lcp_crtpol2 lcp_crtpolelt lcp_crtpollist 
> lcp_mlehash
> 
> These tools were removed in
> 
> commit 225ff1be2e43611d3055b2f02aaa418e47fab0ed
> Author: Gang Wei <gan...@in...>
> Date:   Fri Nov 30 08:53:10 2018 +0800
> 
>      lcptools: remove tools supporting platforms before 2008
> 
>      Signed-off-by: Gang Wei <gan...@in...>
> 
> You can pull a fix from the fix/remove-obsolete-man-pages-1 branch at
> 
> http://lindi.iki.fi/lindi/hg/tboot/
> 
> 
> -Timo
> 
> 

Merged.

Thanks,
Lukasz

Re: [tboot-devel] Links to SINIT AC modules are broken

[Timo L. <tim...@ik...>]

Hi,


On Wed, 13 May 2020, Lukasz Hawrylko wrote:
> That's strange, however I am not managing that page so I can't fix it by
> myself. I have already ask owner for help. Meanwhile, it looks like that
> SINIT files exists, when you scroll down to the "Additional Resources"
> section you can download all the files that are listed above.

Yes, the links at the bottom of the page work but these links in the 
beginning cause users to complain that they can't download SINIT modules.

In the future I might consider packaging also these modules in the 
non-free area of Debian to make it easier for users.

-Timo

Re: [tboot-devel] Links to SINIT AC modules are broken

[Lukasz H. <luk...@li...>]

On Sat, 2020-05-09 at 18:22 +0300, Timo Lindfors wrote:
> Hi,
> 
> at the moment it seems that the links on
> 
> https://software.intel.com/content/www/us/en/develop/articles/intel-trusted-execution-technology.html
> 
> under the table "SINIT AC Modules" are all broken and redirect to just
> 
> https://www.intel.com/content/www/us/en/404.html
> 
> 
> 
> -Timo
> 
> 

Hi Timo

That's strange, however I am not managing that page so I can't fix it by
myself. I have already ask owner for help. Meanwhile, it looks like that
SINIT files exists, when you scroll down to the "Additional Resources"
section you can download all the files that are listed above.

Thanks,
Lukasz