powerpc: Add support for adding an ESM blob to the zImage wrapper
authorBenjamin Herrenschmidt <benh@kernel.crashing.org>
Tue, 20 Aug 2019 02:13:13 +0000 (23:13 -0300)
committerMichael Ellerman <mpe@ellerman.id.au>
Thu, 29 Aug 2019 23:53:29 +0000 (09:53 +1000)
commit528229d210781b2da66c6d257a326c21099982b5
tree9491df4a49f466e49ec74f596b5e6dac28fad979
parent136bc0397ae21dbf63ca02e5775ad353a479cd2f
powerpc: Add support for adding an ESM blob to the zImage wrapper

For secure VMs, the signing tool will create a ticket called the "ESM blob"
for the Enter Secure Mode ultravisor call with the signatures of the kernel
and initrd among other things.

This adds support to the wrapper script for adding that blob via the "-e"
option to the zImage.pseries.

It also adds code to the zImage wrapper itself to retrieve and if necessary
relocate the blob, and pass its address to Linux via the device-tree, to be
later consumed by prom_init.

Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
[ bauerman: Minor adjustments to some comments. ]
Signed-off-by: Thiago Jung Bauermann <bauerman@linux.ibm.com>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Link: https://lore.kernel.org/r/20190820021326.6884-4-bauerman@linux.ibm.com
arch/powerpc/boot/main.c
arch/powerpc/boot/ops.h
arch/powerpc/boot/wrapper
arch/powerpc/boot/zImage.lds.S