OvmfPkg/IntelTdx/IntelTdxX64.fdf

   1 ## @file
   2 #  Open Virtual Machine Firmware: FDF
   3 #
   4 #  Copyright (c) 2006 - 2019, Intel Corporation. All rights reserved.<BR>
   5 #  (C) Copyright 2016 Hewlett Packard Enterprise Development LP<BR>
   6 #
   7 #  SPDX-License-Identifier: BSD-2-Clause-Patent
   8 #
   9 ##
  10
  11 ################################################################################
  12
  13 [Defines]
  14 !include OvmfPkg/OvmfPkgDefines.fdf.inc
  15
  16 #
  17 # Build the variable store and the firmware code as one unified flash device
  18 # image.
  19 #
  20 [FD.OVMF]
  21 BaseAddress   = $(FW_BASE_ADDRESS)
  22 Size          = $(FW_SIZE)
  23 ErasePolarity = 1
  24 BlockSize     = $(BLOCK_SIZE)
  25 NumBlocks     = $(FW_BLOCKS)
  26
  27 !include OvmfPkg/VarStore.fdf.inc
  28
  29 $(VARS_SIZE)|$(FVMAIN_SIZE)
  30 FV = FVMAIN_COMPACT
  31
  32 $(SECFV_OFFSET)|$(SECFV_SIZE)
  33 FV = SECFV
  34
  35 #
  36 # Build the variable store and the firmware code as separate flash device
  37 # images.
  38 #
  39 [FD.OVMF_VARS]
  40 BaseAddress   = $(FW_BASE_ADDRESS)
  41 Size          = $(VARS_SIZE)
  42 ErasePolarity = 1
  43 BlockSize     = $(BLOCK_SIZE)
  44 NumBlocks     = $(VARS_BLOCKS)
  45
  46 !include OvmfPkg/VarStore.fdf.inc
  47
  48 [FD.OVMF_CODE]
  49 BaseAddress   = $(CODE_BASE_ADDRESS)
  50 Size          = $(CODE_SIZE)
  51 ErasePolarity = 1
  52 BlockSize     = $(BLOCK_SIZE)
  53 NumBlocks     = $(CODE_BLOCKS)
  54
  55 0x00000000|$(FVMAIN_SIZE)
  56 FV = FVMAIN_COMPACT
  57
  58 $(FVMAIN_SIZE)|$(SECFV_SIZE)
  59 FV = SECFV
  60
  61 ################################################################################
  62
  63 [FD.MEMFD]
  64 BaseAddress   = $(MEMFD_BASE_ADDRESS)
  65 Size          = 0xD00000
  66 ErasePolarity = 1
  67 BlockSize     = 0x10000
  68 NumBlocks     = 0xD0
  69
  70 0x000000|0x006000
  71 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPageTablesBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPageTablesSize
  72
  73 0x006000|0x001000
  74 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfLockBoxStorageBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfLockBoxStorageSize
  75
  76 0x007000|0x001000
  77 gEfiMdePkgTokenSpaceGuid.PcdGuidedExtractHandlerTableAddress|gUefiOvmfPkgTokenSpaceGuid.PcdGuidedExtractHandlerTableSize
  78
  79 0x008000|0x001000
  80 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbPageTableBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbPageTableSize
  81
  82 0x009000|0x002000
  83 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbSize
  84
  85 0x00B000|0x001000
  86 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfWorkAreaBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfWorkAreaSize
  87
  88 0x00C000|0x001000
  89 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbBackupBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbBackupSize
  90
  91 0x00D000|0x001000
  92 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSnpSecretsBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSnpSecretsSize
  93
  94 0x00E000|0x001000
  95 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfCpuidBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfCpuidSize
  96
  97 0x010000|0x010000
  98 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPeiTempRamBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPeiTempRamSize
  99
 100 0x100000|0xC00000
 101 gUefiOvmfPkgTokenSpaceGuid.PcdOvmfDxeMemFvBase|gUefiOvmfPkgTokenSpaceGuid.PcdOvmfDxeMemFvSize
 102 FV = DXEFV
 103
 104 ##########################################################################################
 105 # Set the SEV-ES specific work area PCDs
 106 #
 107 SET gUefiCpuPkgTokenSpaceGuid.PcdSevEsWorkAreaBase = $(MEMFD_BASE_ADDRESS) +  gUefiOvmfPkgTokenSpaceGuid.PcdOvmfWorkAreaBase + gUefiOvmfPkgTokenSpaceGuid.PcdOvmfConfidentialComputingWorkAreaHeader
 108 SET gUefiCpuPkgTokenSpaceGuid.PcdSevEsWorkAreaSize = gUefiOvmfPkgTokenSpaceGuid.PcdOvmfWorkAreaSize - gUefiOvmfPkgTokenSpaceGuid.PcdOvmfConfidentialComputingWorkAreaHeader
 109
 110
 111 ##########################################################################################
 112
 113 ################################################################################
 114
 115 [FV.SECFV]
 116 FvNameGuid         = 763BED0D-DE9F-48F5-81F1-3E90E1B1A015
 117 BlockSize          = 0x1000
 118 FvAlignment        = 16
 119 ERASE_POLARITY     = 1
 120 MEMORY_MAPPED      = TRUE
 121 STICKY_WRITE       = TRUE
 122 LOCK_CAP           = TRUE
 123 LOCK_STATUS        = TRUE
 124 WRITE_DISABLED_CAP = TRUE
 125 WRITE_ENABLED_CAP  = TRUE
 126 WRITE_STATUS       = TRUE
 127 WRITE_LOCK_CAP     = TRUE
 128 WRITE_LOCK_STATUS  = TRUE
 129 READ_DISABLED_CAP  = TRUE
 130 READ_ENABLED_CAP   = TRUE
 131 READ_STATUS        = TRUE
 132 READ_LOCK_CAP      = TRUE
 133 READ_LOCK_STATUS   = TRUE
 134
 135 #
 136 # SEC Phase modules
 137 #
 138 # The code in this FV handles the initial firmware startup, and
 139 # decompresses the PEI and DXE FVs which handles the rest of the boot sequence.
 140 #
 141 INF  OvmfPkg/IntelTdx/Sec/SecMain.inf
 142
 143 INF  RuleOverride=RESET_VECTOR OvmfPkg/ResetVector/ResetVector.inf
 144
 145 ################################################################################
 146
 147 [FV.DXEFV]
 148 FvForceRebase      = FALSE
 149 FvNameGuid         = 7CB8BDC9-F8EB-4F34-AAEA-3EE4AF6516A1
 150 BlockSize          = 0x10000
 151 FvAlignment        = 16
 152 ERASE_POLARITY     = 1
 153 MEMORY_MAPPED      = TRUE
 154 STICKY_WRITE       = TRUE
 155 LOCK_CAP           = TRUE
 156 LOCK_STATUS        = TRUE
 157 WRITE_DISABLED_CAP = TRUE
 158 WRITE_ENABLED_CAP  = TRUE
 159 WRITE_STATUS       = TRUE
 160 WRITE_LOCK_CAP     = TRUE
 161 WRITE_LOCK_STATUS  = TRUE
 162 READ_DISABLED_CAP  = TRUE
 163 READ_ENABLED_CAP   = TRUE
 164 READ_STATUS        = TRUE
 165 READ_LOCK_CAP      = TRUE
 166 READ_LOCK_STATUS   = TRUE
 167
 168 APRIORI DXE {
 169   INF  MdeModulePkg/Universal/DevicePathDxe/DevicePathDxe.inf
 170   INF  MdeModulePkg/Universal/PCD/Dxe/Pcd.inf
 171   INF  OvmfPkg/TdxDxe/TdxDxe.inf
 172   INF  OvmfPkg/QemuFlashFvbServicesRuntimeDxe/FvbServicesRuntimeDxe.inf
 173 }
 174
 175 #
 176 # DXE Phase modules
 177 #
 178 INF  MdeModulePkg/Core/Dxe/DxeMain.inf
 179
 180 INF  MdeModulePkg/Universal/ReportStatusCodeRouter/RuntimeDxe/ReportStatusCodeRouterRuntimeDxe.inf
 181 INF  MdeModulePkg/Universal/StatusCodeHandler/RuntimeDxe/StatusCodeHandlerRuntimeDxe.inf
 182 INF  MdeModulePkg/Universal/PCD/Dxe/Pcd.inf
 183
 184 INF  MdeModulePkg/Core/RuntimeDxe/RuntimeDxe.inf
 185 INF  MdeModulePkg/Universal/SecurityStubDxe/SecurityStubDxe.inf
 186 INF  MdeModulePkg/Universal/EbcDxe/EbcDxe.inf
 187 INF  UefiCpuPkg/CpuIo2Dxe/CpuIo2Dxe.inf
 188 INF  UefiCpuPkg/CpuDxe/CpuDxe.inf
 189 INF  OvmfPkg/LocalApicTimerDxe/LocalApicTimerDxe.inf
 190 INF  OvmfPkg/IncompatiblePciDeviceSupportDxe/IncompatiblePciDeviceSupport.inf
 191 INF  OvmfPkg/PciHotPlugInitDxe/PciHotPlugInit.inf
 192 INF  MdeModulePkg/Bus/Pci/PciHostBridgeDxe/PciHostBridgeDxe.inf
 193 INF  MdeModulePkg/Bus/Pci/PciBusDxe/PciBusDxe.inf
 194 INF  MdeModulePkg/Universal/ResetSystemRuntimeDxe/ResetSystemRuntimeDxe.inf
 195 INF  MdeModulePkg/Universal/Metronome/Metronome.inf
 196 INF  PcAtChipsetPkg/PcatRealTimeClockRuntimeDxe/PcatRealTimeClockRuntimeDxe.inf
 197
 198 INF  OvmfPkg/VirtioPciDeviceDxe/VirtioPciDeviceDxe.inf
 199 INF  OvmfPkg/Virtio10Dxe/Virtio10.inf
 200 INF  OvmfPkg/VirtioBlkDxe/VirtioBlk.inf
 201 INF  OvmfPkg/VirtioScsiDxe/VirtioScsi.inf
 202 INF  OvmfPkg/VirtioRngDxe/VirtioRng.inf
 203 !if $(PVSCSI_ENABLE) == TRUE
 204 INF  OvmfPkg/PvScsiDxe/PvScsiDxe.inf
 205 !endif
 206 !if $(MPT_SCSI_ENABLE) == TRUE
 207 INF  OvmfPkg/MptScsiDxe/MptScsiDxe.inf
 208 !endif
 209 !if $(LSI_SCSI_ENABLE) == TRUE
 210 INF  OvmfPkg/LsiScsiDxe/LsiScsiDxe.inf
 211 !endif
 212
 213 !if $(SECURE_BOOT_ENABLE) == TRUE
 214   INF  SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigDxe.inf
 215 !endif
 216
 217 INF  MdeModulePkg/Universal/WatchdogTimerDxe/WatchdogTimer.inf
 218 INF  MdeModulePkg/Universal/MonotonicCounterRuntimeDxe/MonotonicCounterRuntimeDxe.inf
 219 INF  MdeModulePkg/Universal/CapsuleRuntimeDxe/CapsuleRuntimeDxe.inf
 220 INF  MdeModulePkg/Universal/Console/ConPlatformDxe/ConPlatformDxe.inf
 221 INF  MdeModulePkg/Universal/Console/ConSplitterDxe/ConSplitterDxe.inf
 222 INF  MdeModulePkg/Universal/Console/GraphicsConsoleDxe/GraphicsConsoleDxe.inf
 223 INF  MdeModulePkg/Universal/Console/TerminalDxe/TerminalDxe.inf
 224 INF  MdeModulePkg/Universal/DriverHealthManagerDxe/DriverHealthManagerDxe.inf
 225 INF  MdeModulePkg/Universal/BdsDxe/BdsDxe.inf
 226 INF  MdeModulePkg/Application/UiApp/UiApp.inf
 227 INF  OvmfPkg/QemuKernelLoaderFsDxe/QemuKernelLoaderFsDxe.inf
 228 INF  MdeModulePkg/Universal/DevicePathDxe/DevicePathDxe.inf
 229 INF  MdeModulePkg/Universal/Disk/DiskIoDxe/DiskIoDxe.inf
 230 INF  MdeModulePkg/Universal/Disk/PartitionDxe/PartitionDxe.inf
 231 INF  MdeModulePkg/Universal/Disk/RamDiskDxe/RamDiskDxe.inf
 232 INF  MdeModulePkg/Universal/Disk/UnicodeCollation/EnglishDxe/EnglishDxe.inf
 233 INF  MdeModulePkg/Bus/Scsi/ScsiBusDxe/ScsiBusDxe.inf
 234 INF  MdeModulePkg/Bus/Scsi/ScsiDiskDxe/ScsiDiskDxe.inf
 235 INF  OvmfPkg/SataControllerDxe/SataControllerDxe.inf
 236 INF  MdeModulePkg/Bus/Ata/AtaAtapiPassThru/AtaAtapiPassThru.inf
 237 INF  MdeModulePkg/Bus/Ata/AtaBusDxe/AtaBusDxe.inf
 238 INF  MdeModulePkg/Bus/Pci/NvmExpressDxe/NvmExpressDxe.inf
 239 INF  MdeModulePkg/Universal/HiiDatabaseDxe/HiiDatabaseDxe.inf
 240 INF  MdeModulePkg/Universal/SetupBrowserDxe/SetupBrowserDxe.inf
 241 INF  MdeModulePkg/Universal/DisplayEngineDxe/DisplayEngineDxe.inf
 242 INF  MdeModulePkg/Universal/MemoryTest/NullMemoryTestDxe/NullMemoryTestDxe.inf
 243
 244 INF  OvmfPkg/SioBusDxe/SioBusDxe.inf
 245 INF  MdeModulePkg/Bus/Pci/PciSioSerialDxe/PciSioSerialDxe.inf
 246 INF  MdeModulePkg/Bus/Isa/Ps2KeyboardDxe/Ps2KeyboardDxe.inf
 247
 248 INF  MdeModulePkg/Universal/SmbiosDxe/SmbiosDxe.inf
 249 INF  OvmfPkg/SmbiosPlatformDxe/SmbiosPlatformDxe.inf
 250
 251 INF  MdeModulePkg/Universal/Acpi/AcpiTableDxe/AcpiTableDxe.inf
 252 INF  OvmfPkg/AcpiPlatformDxe/AcpiPlatformDxe.inf
 253 INF  MdeModulePkg/Universal/Acpi/S3SaveStateDxe/S3SaveStateDxe.inf
 254 INF  MdeModulePkg/Universal/Acpi/BootScriptExecutorDxe/BootScriptExecutorDxe.inf
 255 INF  MdeModulePkg/Universal/Acpi/BootGraphicsResourceTableDxe/BootGraphicsResourceTableDxe.inf
 256
 257 INF  FatPkg/EnhancedFatDxe/Fat.inf
 258 INF  MdeModulePkg/Universal/Disk/UdfDxe/UdfDxe.inf
 259 INF  OvmfPkg/VirtioFsDxe/VirtioFsDxe.inf
 260
 261 !if $(TOOL_CHAIN_TAG) != "XCODE5"
 262 INF  OvmfPkg/LinuxInitrdDynamicShellCommand/LinuxInitrdDynamicShellCommand.inf
 263 !endif
 264 INF  ShellPkg/Application/Shell/Shell.inf
 265
 266 INF MdeModulePkg/Logo/LogoDxe.inf
 267
 268 INF OvmfPkg/TdxDxe/TdxDxe.inf
 269
 270 #
 271 # Usb Support
 272 #
 273 INF  MdeModulePkg/Bus/Pci/UhciDxe/UhciDxe.inf
 274 INF  MdeModulePkg/Bus/Pci/EhciDxe/EhciDxe.inf
 275 INF  MdeModulePkg/Bus/Pci/XhciDxe/XhciDxe.inf
 276 INF  MdeModulePkg/Bus/Usb/UsbBusDxe/UsbBusDxe.inf
 277 INF  MdeModulePkg/Bus/Usb/UsbKbDxe/UsbKbDxe.inf
 278 INF  MdeModulePkg/Bus/Usb/UsbMassStorageDxe/UsbMassStorageDxe.inf
 279
 280 INF  OvmfPkg/QemuVideoDxe/QemuVideoDxe.inf
 281
 282 INF  OvmfPkg/QemuRamfbDxe/QemuRamfbDxe.inf
 283 INF  OvmfPkg/VirtioGpuDxe/VirtioGpu.inf
 284 INF  OvmfPkg/PlatformDxe/Platform.inf
 285 INF  OvmfPkg/IoMmuDxe/IoMmuDxe.inf
 286
 287 #
 288 # Variable driver stack (non-SMM)
 289 #
 290 INF  OvmfPkg/QemuFlashFvbServicesRuntimeDxe/FvbServicesRuntimeDxe.inf
 291 INF  OvmfPkg/EmuVariableFvbRuntimeDxe/Fvb.inf
 292 INF  MdeModulePkg/Universal/FaultTolerantWriteDxe/FaultTolerantWriteDxe.inf
 293 INF  MdeModulePkg/Universal/Variable/RuntimeDxe/VariableRuntimeDxe.inf
 294
 295 ################################################################################
 296
 297 [FV.FVMAIN_COMPACT]
 298 FvNameGuid         = 48DB5E17-707C-472D-91CD-1613E7EF51B0
 299 FvAlignment        = 16
 300 ERASE_POLARITY     = 1
 301 MEMORY_MAPPED      = TRUE
 302 STICKY_WRITE       = TRUE
 303 LOCK_CAP           = TRUE
 304 LOCK_STATUS        = TRUE
 305 WRITE_DISABLED_CAP = TRUE
 306 WRITE_ENABLED_CAP  = TRUE
 307 WRITE_STATUS       = TRUE
 308 WRITE_LOCK_CAP     = TRUE
 309 WRITE_LOCK_STATUS  = TRUE
 310 READ_DISABLED_CAP  = TRUE
 311 READ_ENABLED_CAP   = TRUE
 312 READ_STATUS        = TRUE
 313 READ_LOCK_CAP      = TRUE
 314 READ_LOCK_STATUS   = TRUE
 315
 316 FILE FV_IMAGE = 9E21FD93-9C72-4c15-8C4B-E77F1DB2D792 {
 317    SECTION GUIDED EE4E5898-3914-4259-9D6E-DC7BD79403CF PROCESSING_REQUIRED = TRUE {
 318      #
 319      # These firmware volumes will have files placed in them uncompressed,
 320      # and then both firmware volumes will be compressed in a single
 321      # compression operation in order to achieve better overall compression.
 322      #
 323      SECTION FV_IMAGE = DXEFV
 324    }
 325  }
 326
 327 # !include OvmfPkg/FvmainCompactScratchEnd.fdf.inc
 328
 329 ################################################################################
 330
 331 [Rule.Common.SEC]
 332   FILE SEC = $(NAMED_GUID) {
 333     PE32     PE32           $(INF_OUTPUT)/$(MODULE_NAME).efi
 334     UI       STRING ="$(MODULE_NAME)" Optional
 335     VERSION  STRING ="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
 336   }
 337
 338 [Rule.Common.DXE_CORE]
 339   FILE DXE_CORE = $(NAMED_GUID) {
 340     PE32     PE32           $(INF_OUTPUT)/$(MODULE_NAME).efi
 341     UI       STRING="$(MODULE_NAME)" Optional
 342     VERSION  STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
 343   }
 344
 345 [Rule.Common.DXE_DRIVER]
 346   FILE DRIVER = $(NAMED_GUID) {
 347     DXE_DEPEX    DXE_DEPEX Optional      $(INF_OUTPUT)/$(MODULE_NAME).depex
 348     PE32     PE32                    $(INF_OUTPUT)/$(MODULE_NAME).efi
 349     UI       STRING="$(MODULE_NAME)" Optional
 350     VERSION  STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
 351     RAW ACPI  Optional               |.acpi
 352     RAW ASL   Optional               |.aml
 353   }
 354
 355 [Rule.Common.DXE_RUNTIME_DRIVER]
 356   FILE DRIVER = $(NAMED_GUID) {
 357     DXE_DEPEX    DXE_DEPEX Optional      $(INF_OUTPUT)/$(MODULE_NAME).depex
 358     PE32     PE32                    $(INF_OUTPUT)/$(MODULE_NAME).efi
 359     UI       STRING="$(MODULE_NAME)" Optional
 360     VERSION  STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
 361   }
 362
 363 [Rule.Common.UEFI_DRIVER]
 364   FILE DRIVER = $(NAMED_GUID) {
 365     DXE_DEPEX    DXE_DEPEX Optional      $(INF_OUTPUT)/$(MODULE_NAME).depex
 366     PE32     PE32                    $(INF_OUTPUT)/$(MODULE_NAME).efi
 367     UI       STRING="$(MODULE_NAME)" Optional
 368     VERSION  STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
 369   }
 370
 371 [Rule.Common.UEFI_DRIVER.BINARY]
 372   FILE DRIVER = $(NAMED_GUID) {
 373     DXE_DEPEX DXE_DEPEX Optional      |.depex
 374     PE32      PE32                    |.efi
 375     UI        STRING="$(MODULE_NAME)" Optional
 376     VERSION   STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
 377   }
 378
 379 [Rule.Common.UEFI_APPLICATION]
 380   FILE APPLICATION = $(NAMED_GUID) {
 381     PE32     PE32                    $(INF_OUTPUT)/$(MODULE_NAME).efi
 382     UI       STRING="$(MODULE_NAME)" Optional
 383     VERSION  STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
 384   }
 385
 386 [Rule.Common.UEFI_APPLICATION.BINARY]
 387   FILE APPLICATION = $(NAMED_GUID) {
 388     PE32      PE32                    |.efi
 389     UI        STRING="$(MODULE_NAME)" Optional
 390     VERSION   STRING="$(INF_VERSION)" Optional BUILD_NUM=$(BUILD_NUMBER)
 391   }
 392
 393 [Rule.Common.USER_DEFINED.CSM]
 394   FILE FREEFORM = $(NAMED_GUID) {
 395     RAW BIN                |.bin
 396   }
 397
 398 [Rule.Common.SEC.RESET_VECTOR]
 399   FILE RAW = $(NAMED_GUID) {
 400     RAW BIN   Align = 16   |.bin
 401   }