IntelTdxX64.fdf 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409
  1. ## @file
  2. # Open Virtual Machine Firmware: FDF
  3. #
  4. # Copyright (c) 2006 - 2019, Intel Corporation. All rights reserved.<BR>
  5. # (C) Copyright 2016 Hewlett Packard Enterprise Development LP<BR>
  6. #
  7. # SPDX-License-Identifier: BSD-2-Clause-Patent
  8. #
  9. ##
  10. ################################################################################
  11. [Defines]
  12. !include OvmfPkg/Include/Fdf/OvmfPkgDefines.fdf.inc
  13. #
  14. # Build the variable store and the firmware code as one unified flash device
  15. # image.
  16. #
  17. [FD.OVMF]
  18. BaseAddress = $(FW_BASE_ADDRESS)
  19. Size = $(FW_SIZE)
  20. ErasePolarity = 1
  21. BlockSize = $(BLOCK_SIZE)
  22. NumBlocks = $(FW_BLOCKS)
  23. !include OvmfPkg/Include/Fdf/VarStore.fdf.inc
  24. $(VARS_SIZE)|$(FVMAIN_SIZE)
  25. FV = FVMAIN_COMPACT
  26. $(SECFV_OFFSET)|$(SECFV_SIZE)
  27. FV = SECFV
  28. #
  29. # Build the variable store and the firmware code as separate flash device
  30. # images.
  31. #
  32. [FD.OVMF_VARS]
  33. BaseAddress = $(FW_BASE_ADDRESS)
  34. Size = $(VARS_SIZE)
  35. ErasePolarity = 1
  36. BlockSize = $(BLOCK_SIZE)
  37. NumBlocks = $(VARS_BLOCKS)
  38. !include OvmfPkg/Include/Fdf/VarStore.fdf.inc
  39. [FD.OVMF_CODE]
  40. BaseAddress = $(CODE_BASE_ADDRESS)
  41. Size = $(CODE_SIZE)
  42. ErasePolarity = 1
  43. BlockSize = $(BLOCK_SIZE)
  44. NumBlocks = $(CODE_BLOCKS)
  45. 0x00000000|$(FVMAIN_SIZE)
  46. FV = FVMAIN_COMPACT
  47. $(FVMAIN_SIZE)|$(SECFV_SIZE)
  48. FV = SECFV
  49. ################################################################################
  50. [FD.MEMFD]
  51. BaseAddress = $(MEMFD_BASE_ADDRESS)
  52. Size = 0xD00000
  53. ErasePolarity = 1
  54. BlockSize = 0x10000
  55. NumBlocks = 0xD0
  56. 0x000000|0x006000
  57. gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPageTablesBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPageTablesSize
  58. 0x006000|0x001000
  59. gUefiOvmfPkgTokenSpaceGuid.PcdOvmfLockBoxStorageBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfLockBoxStorageSize
  60. 0x007000|0x001000
  61. gEfiMdePkgTokenSpaceGuid.PcdGuidedExtractHandlerTableAddress|gUefiOvmfPkgTokenSpaceGuid.PcdGuidedExtractHandlerTableSize
  62. 0x008000|0x001000
  63. gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbPageTableBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbPageTableSize
  64. 0x009000|0x002000
  65. gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbSize
  66. 0x00B000|0x001000
  67. gUefiOvmfPkgTokenSpaceGuid.PcdOvmfWorkAreaBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfWorkAreaSize
  68. 0x00C000|0x001000
  69. gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbBackupBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbBackupSize
  70. 0x00D000|0x001000
  71. gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSnpSecretsBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSnpSecretsSize
  72. 0x00E000|0x001000
  73. gUefiOvmfPkgTokenSpaceGuid.PcdOvmfCpuidBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfCpuidSize
  74. 0x010000|0x010000
  75. gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPeiTempRamBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPeiTempRamSize
  76. 0x100000|0xC00000
  77. gUefiOvmfPkgTokenSpaceGuid.PcdOvmfDxeMemFvBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfDxeMemFvSize
  78. FV = DXEFV
  79. ##########################################################################################
  80. # Set the SEV-ES specific work area PCDs
  81. #
  82. SET gUefiCpuPkgTokenSpaceGuid.PcdSevEsWorkAreaBase = $(MEMFD_BASE_ADDRESS) + gUefiOvmfPkgTokenSpaceGuid.PcdOvmfWorkAreaBase + gUefiOvmfPkgTokenSpaceGuid.PcdOvmfConfidentialComputingWorkAreaHeader
  83. SET gUefiCpuPkgTokenSpaceGuid.PcdSevEsWorkAreaSize = gUefiOvmfPkgTokenSpaceGuid.PcdOvmfWorkAreaSize - gUefiOvmfPkgTokenSpaceGuid.PcdOvmfConfidentialComputingWorkAreaHeader
  84. ##########################################################################################
  85. ################################################################################
  86. [FV.SECFV]
  87. FvNameGuid = 763BED0D-DE9F-48F5-81F1-3E90E1B1A015
  88. BlockSize = 0x1000
  89. FvAlignment = 16
  90. ERASE_POLARITY = 1
  91. MEMORY_MAPPED = TRUE
  92. STICKY_WRITE = TRUE
  93. LOCK_CAP = TRUE
  94. LOCK_STATUS = TRUE
  95. WRITE_DISABLED_CAP = TRUE
  96. WRITE_ENABLED_CAP = TRUE
  97. WRITE_STATUS = TRUE
  98. WRITE_LOCK_CAP = TRUE
  99. WRITE_LOCK_STATUS = TRUE
  100. READ_DISABLED_CAP = TRUE
  101. READ_ENABLED_CAP = TRUE
  102. READ_STATUS = TRUE
  103. READ_LOCK_CAP = TRUE
  104. READ_LOCK_STATUS = TRUE
  105. #
  106. # SEC Phase modules
  107. #
  108. # The code in this FV handles the initial firmware startup, and
  109. # decompresses the PEI and DXE FVs which handles the rest of the boot sequence.
  110. #
  111. INF OvmfPkg/IntelTdx/Sec/SecMain.inf
  112. INF RuleOverride=RESET_VECTOR OvmfPkg/ResetVector/ResetVector.inf
  113. ################################################################################
  114. [FV.DXEFV]
  115. FvForceRebase = FALSE
  116. FvNameGuid = 7CB8BDC9-F8EB-4F34-AAEA-3EE4AF6516A1
  117. BlockSize = 0x10000
  118. FvAlignment = 16
  119. ERASE_POLARITY = 1
  120. MEMORY_MAPPED = TRUE
  121. STICKY_WRITE = TRUE
  122. LOCK_CAP = TRUE
  123. LOCK_STATUS = TRUE
  124. WRITE_DISABLED_CAP = TRUE
  125. WRITE_ENABLED_CAP = TRUE
  126. WRITE_STATUS = TRUE
  127. WRITE_LOCK_CAP = TRUE
  128. WRITE_LOCK_STATUS = TRUE
  129. READ_DISABLED_CAP = TRUE
  130. READ_ENABLED_CAP = TRUE
  131. READ_STATUS = TRUE
  132. READ_LOCK_CAP = TRUE
  133. READ_LOCK_STATUS = TRUE
  134. APRIORI DXE {
  135. INF MdeModulePkg/Universal/DevicePathDxe/DevicePathDxe.inf
  136. INF MdeModulePkg/Universal/PCD/Dxe/Pcd.inf
  137. INF OvmfPkg/TdxDxe/TdxDxe.inf
  138. INF OvmfPkg/QemuFlashFvbServicesRuntimeDxe/FvbServicesRuntimeDxe.inf
  139. }
  140. #
  141. # DXE Phase modules
  142. #
  143. INF MdeModulePkg/Core/Dxe/DxeMain.inf
  144. INF MdeModulePkg/Universal/ReportStatusCodeRouter/RuntimeDxe/ReportStatusCodeRouterRuntimeDxe.inf
  145. INF MdeModulePkg/Universal/StatusCodeHandler/RuntimeDxe/StatusCodeHandlerRuntimeDxe.inf
  146. INF MdeModulePkg/Universal/PCD/Dxe/Pcd.inf
  147. INF MdeModulePkg/Core/RuntimeDxe/RuntimeDxe.inf
  148. INF MdeModulePkg/Universal/SecurityStubDxe/SecurityStubDxe.inf
  149. INF MdeModulePkg/Universal/EbcDxe/EbcDxe.inf
  150. INF UefiCpuPkg/CpuIo2Dxe/CpuIo2Dxe.inf
  151. INF UefiCpuPkg/CpuDxe/CpuDxe.inf
  152. INF FILE_GUID = $(UP_CPU_DXE_GUID) UefiCpuPkg/CpuDxe/CpuDxe.inf
  153. INF OvmfPkg/LocalApicTimerDxe/LocalApicTimerDxe.inf
  154. INF OvmfPkg/IncompatiblePciDeviceSupportDxe/IncompatiblePciDeviceSupport.inf
  155. INF OvmfPkg/PciHotPlugInitDxe/PciHotPlugInit.inf
  156. INF MdeModulePkg/Bus/Pci/PciHostBridgeDxe/PciHostBridgeDxe.inf
  157. INF MdeModulePkg/Bus/Pci/PciBusDxe/PciBusDxe.inf
  158. INF MdeModulePkg/Universal/ResetSystemRuntimeDxe/ResetSystemRuntimeDxe.inf
  159. INF MdeModulePkg/Universal/Metronome/Metronome.inf
  160. INF PcAtChipsetPkg/PcatRealTimeClockRuntimeDxe/PcatRealTimeClockRuntimeDxe.inf
  161. INF OvmfPkg/VirtioPciDeviceDxe/VirtioPciDeviceDxe.inf
  162. INF OvmfPkg/Virtio10Dxe/Virtio10.inf
  163. INF OvmfPkg/VirtioBlkDxe/VirtioBlk.inf
  164. INF OvmfPkg/VirtioScsiDxe/VirtioScsi.inf
  165. INF OvmfPkg/VirtioRngDxe/VirtioRng.inf
  166. !if $(PVSCSI_ENABLE) == TRUE
  167. INF OvmfPkg/PvScsiDxe/PvScsiDxe.inf
  168. !endif
  169. !if $(MPT_SCSI_ENABLE) == TRUE
  170. INF OvmfPkg/MptScsiDxe/MptScsiDxe.inf
  171. !endif
  172. !if $(LSI_SCSI_ENABLE) == TRUE
  173. INF OvmfPkg/LsiScsiDxe/LsiScsiDxe.inf
  174. !endif
  175. !if $(SECURE_BOOT_ENABLE) == TRUE
  176. INF SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigDxe.inf
  177. !endif
  178. INF MdeModulePkg/Universal/WatchdogTimerDxe/WatchdogTimer.inf
  179. INF MdeModulePkg/Universal/MonotonicCounterRuntimeDxe/MonotonicCounterRuntimeDxe.inf
  180. INF MdeModulePkg/Universal/CapsuleRuntimeDxe/CapsuleRuntimeDxe.inf
  181. INF MdeModulePkg/Universal/Console/ConPlatformDxe/ConPlatformDxe.inf
  182. INF MdeModulePkg/Universal/Console/ConSplitterDxe/ConSplitterDxe.inf
  183. INF MdeModulePkg/Universal/Console/GraphicsConsoleDxe/GraphicsConsoleDxe.inf
  184. INF MdeModulePkg/Universal/Console/TerminalDxe/TerminalDxe.inf
  185. INF MdeModulePkg/Universal/DriverHealthManagerDxe/DriverHealthManagerDxe.inf
  186. INF MdeModulePkg/Universal/BdsDxe/BdsDxe.inf
  187. INF MdeModulePkg/Application/UiApp/UiApp.inf
  188. INF OvmfPkg/QemuKernelLoaderFsDxe/QemuKernelLoaderFsDxe.inf
  189. INF MdeModulePkg/Universal/DevicePathDxe/DevicePathDxe.inf
  190. INF MdeModulePkg/Universal/Disk/DiskIoDxe/DiskIoDxe.inf
  191. INF MdeModulePkg/Universal/Disk/PartitionDxe/PartitionDxe.inf
  192. INF MdeModulePkg/Universal/Disk/RamDiskDxe/RamDiskDxe.inf
  193. INF MdeModulePkg/Universal/Disk/UnicodeCollation/EnglishDxe/EnglishDxe.inf
  194. INF MdeModulePkg/Bus/Scsi/ScsiBusDxe/ScsiBusDxe.inf
  195. INF MdeModulePkg/Bus/Scsi/ScsiDiskDxe/ScsiDiskDxe.inf
  196. INF OvmfPkg/SataControllerDxe/SataControllerDxe.inf
  197. INF MdeModulePkg/Bus/Ata/AtaAtapiPassThru/AtaAtapiPassThru.inf
  198. INF MdeModulePkg/Bus/Ata/AtaBusDxe/AtaBusDxe.inf
  199. INF MdeModulePkg/Bus/Pci/NvmExpressDxe/NvmExpressDxe.inf
  200. INF MdeModulePkg/Universal/HiiDatabaseDxe/HiiDatabaseDxe.inf
  201. INF MdeModulePkg/Universal/SetupBrowserDxe/SetupBrowserDxe.inf
  202. INF MdeModulePkg/Universal/DisplayEngineDxe/DisplayEngineDxe.inf
  203. INF MdeModulePkg/Universal/MemoryTest/NullMemoryTestDxe/NullMemoryTestDxe.inf
  204. INF OvmfPkg/SioBusDxe/SioBusDxe.inf
  205. INF MdeModulePkg/Bus/Pci/PciSioSerialDxe/PciSioSerialDxe.inf
  206. INF MdeModulePkg/Bus/Isa/Ps2KeyboardDxe/Ps2KeyboardDxe.inf
  207. INF MdeModulePkg/Universal/SmbiosDxe/SmbiosDxe.inf
  208. INF OvmfPkg/SmbiosPlatformDxe/SmbiosPlatformDxe.inf
  209. INF MdeModulePkg/Universal/Acpi/AcpiTableDxe/AcpiTableDxe.inf
  210. INF OvmfPkg/AcpiPlatformDxe/AcpiPlatformDxe.inf
  211. INF MdeModulePkg/Universal/Acpi/S3SaveStateDxe/S3SaveStateDxe.inf
  212. INF MdeModulePkg/Universal/Acpi/BootScriptExecutorDxe/BootScriptExecutorDxe.inf
  213. INF MdeModulePkg/Universal/Acpi/BootGraphicsResourceTableDxe/BootGraphicsResourceTableDxe.inf
  214. INF FatPkg/EnhancedFatDxe/Fat.inf
  215. INF MdeModulePkg/Universal/Disk/UdfDxe/UdfDxe.inf
  216. INF OvmfPkg/VirtioFsDxe/VirtioFsDxe.inf
  217. !if $(TOOL_CHAIN_TAG) != "XCODE5"
  218. INF OvmfPkg/LinuxInitrdDynamicShellCommand/LinuxInitrdDynamicShellCommand.inf
  219. !endif
  220. INF ShellPkg/Application/Shell/Shell.inf
  221. INF MdeModulePkg/Logo/LogoDxe.inf
  222. INF OvmfPkg/TdxDxe/TdxDxe.inf
  223. #
  224. # Usb Support
  225. #
  226. INF MdeModulePkg/Bus/Pci/UhciDxe/UhciDxe.inf
  227. INF MdeModulePkg/Bus/Pci/EhciDxe/EhciDxe.inf
  228. INF MdeModulePkg/Bus/Pci/XhciDxe/XhciDxe.inf
  229. INF MdeModulePkg/Bus/Usb/UsbBusDxe/UsbBusDxe.inf
  230. INF MdeModulePkg/Bus/Usb/UsbKbDxe/UsbKbDxe.inf
  231. INF MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf
  232. INF OvmfPkg/QemuVideoDxe/QemuVideoDxe.inf
  233. INF OvmfPkg/QemuRamfbDxe/QemuRamfbDxe.inf
  234. INF OvmfPkg/VirtioGpuDxe/VirtioGpu.inf
  235. INF OvmfPkg/PlatformDxe/Platform.inf
  236. INF OvmfPkg/IoMmuDxe/IoMmuDxe.inf
  237. #
  238. # Variable driver stack (non-SMM)
  239. #
  240. INF OvmfPkg/QemuFlashFvbServicesRuntimeDxe/FvbServicesRuntimeDxe.inf
  241. INF OvmfPkg/EmuVariableFvbRuntimeDxe/Fvb.inf
  242. INF MdeModulePkg/Universal/FaultTolerantWriteDxe/FaultTolerantWriteDxe.inf
  243. INF MdeModulePkg/Universal/Variable/RuntimeDxe/VariableRuntimeDxe.inf
  244. #
  245. # EFI_CC_MEASUREMENT_PROTOCOL
  246. #
  247. INF SecurityPkg/Tcg/TdTcg2Dxe/TdTcg2Dxe.inf
  248. ################################################################################
  249. [FV.FVMAIN_COMPACT]
  250. FvNameGuid = 48DB5E17-707C-472D-91CD-1613E7EF51B0
  251. FvAlignment = 16
  252. ERASE_POLARITY = 1
  253. MEMORY_MAPPED = TRUE
  254. STICKY_WRITE = TRUE
  255. LOCK_CAP = TRUE
  256. LOCK_STATUS = TRUE
  257. WRITE_DISABLED_CAP = TRUE
  258. WRITE_ENABLED_CAP = TRUE
  259. WRITE_STATUS = TRUE
  260. WRITE_LOCK_CAP = TRUE
  261. WRITE_LOCK_STATUS = TRUE
  262. READ_DISABLED_CAP = TRUE
  263. READ_ENABLED_CAP = TRUE
  264. READ_STATUS = TRUE
  265. READ_LOCK_CAP = TRUE
  266. READ_LOCK_STATUS = TRUE
  267. FILE FV_IMAGE = 9E21FD93-9C72-4c15-8C4B-E77F1DB2D792 {
  268. SECTION GUIDED EE4E5898-3914-4259-9D6E-DC7BD79403CF PROCESSING_REQUIRED = TRUE {
  269. #
  270. # These firmware volumes will have files placed in them uncompressed,
  271. # and then both firmware volumes will be compressed in a single
  272. # compression operation in order to achieve better overall compression.
  273. #
  274. SECTION FV_IMAGE = DXEFV
  275. }
  276. }
  277. # !include OvmfPkg/Include/Fdf/FvmainCompactScratchEnd.fdf.inc
  278. ################################################################################
  279. [Rule.Common.SEC]
  280. FILE SEC = $(NAMED_GUID) {
  281. PE32 PE32 $(INF_OUTPUT)/$(MODULE_NAME).efi
  282. UI STRING ="$(MODULE_NAME)" Optional
  283. VERSION STRING ="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
  284. }
  285. [Rule.Common.DXE_CORE]
  286. FILE DXE_CORE = $(NAMED_GUID) {
  287. PE32 PE32 $(INF_OUTPUT)/$(MODULE_NAME).efi
  288. UI STRING="$(MODULE_NAME)" Optional
  289. VERSION STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
  290. }
  291. [Rule.Common.DXE_DRIVER]
  292. FILE DRIVER = $(NAMED_GUID) {
  293. DXE_DEPEX DXE_DEPEX Optional $(INF_OUTPUT)/$(MODULE_NAME).depex
  294. PE32 PE32 $(INF_OUTPUT)/$(MODULE_NAME).efi
  295. UI STRING="$(MODULE_NAME)" Optional
  296. VERSION STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
  297. RAW ACPI Optional |.acpi
  298. RAW ASL Optional |.aml
  299. }
  300. [Rule.Common.DXE_RUNTIME_DRIVER]
  301. FILE DRIVER = $(NAMED_GUID) {
  302. DXE_DEPEX DXE_DEPEX Optional $(INF_OUTPUT)/$(MODULE_NAME).depex
  303. PE32 PE32 $(INF_OUTPUT)/$(MODULE_NAME).efi
  304. UI STRING="$(MODULE_NAME)" Optional
  305. VERSION STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
  306. }
  307. [Rule.Common.UEFI_DRIVER]
  308. FILE DRIVER = $(NAMED_GUID) {
  309. DXE_DEPEX DXE_DEPEX Optional $(INF_OUTPUT)/$(MODULE_NAME).depex
  310. PE32 PE32 $(INF_OUTPUT)/$(MODULE_NAME).efi
  311. UI STRING="$(MODULE_NAME)" Optional
  312. VERSION STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
  313. }
  314. [Rule.Common.UEFI_DRIVER.BINARY]
  315. FILE DRIVER = $(NAMED_GUID) {
  316. DXE_DEPEX DXE_DEPEX Optional |.depex
  317. PE32 PE32 |.efi
  318. UI STRING="$(MODULE_NAME)" Optional
  319. VERSION STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
  320. }
  321. [Rule.Common.UEFI_APPLICATION]
  322. FILE APPLICATION = $(NAMED_GUID) {
  323. PE32 PE32 $(INF_OUTPUT)/$(MODULE_NAME).efi
  324. UI STRING="$(MODULE_NAME)" Optional
  325. VERSION STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
  326. }
  327. [Rule.Common.UEFI_APPLICATION.BINARY]
  328. FILE APPLICATION = $(NAMED_GUID) {
  329. PE32 PE32 |.efi
  330. UI STRING="$(MODULE_NAME)" Optional
  331. VERSION STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
  332. }
  333. [Rule.Common.USER_DEFINED.CSM]
  334. FILE FREEFORM = $(NAMED_GUID) {
  335. RAW BIN |.bin
  336. }
  337. [Rule.Common.SEC.RESET_VECTOR]
  338. FILE RAW = $(NAMED_GUID) {
  339. RAW BIN Align = 16 |.bin
  340. }