github/acrn-hypervisor
1
0
Fork 0
mirror of https://github.com/projectacrn/acrn-hypervisor.git synced 2025-06-19 12:12:16 +00:00
Code Issues Projects Releases Wiki Activity

doc: review edit for enable_laag_secure_boot

Browse Source 
Review update to PR #3938

Signed-off-by: David B. Kinder <david.b.kinder@intel.com>
This commit is contained in:
David B. Kinder 2019-11-08 10:52:56 -08:00 committed by David Kinder
parent 38abceb761
commit 2d810ea456
1 changed files with 16 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
doc/tutorials/enable_laag_secure_boot.rst
View File

@ -36,7 +36,7 @@ Generate keys
For formal case, key generation and management can be referenced by:
`Ubuntu-KeyGeneration`_ or `Windows-secure-boot-key-creation-and-management-guidance`_.
For testing, the keys can be created on the KBL NUC by below commands:
For testing, the keys can be created on the KBL NUC with these commands:
.. code-block:: none
@ -59,7 +59,8 @@ The keys to sign bootloader or kernel: **db.key**, **db.crt**
Create virtual disk to hold the keys
====================================
Follow below commands to create virtual disk and copy keys:
Follow these commands to create a virtual disk and copy the keys
generated above:
.. code-block:: none
@ -76,8 +77,8 @@ Follow below commands to create virtual disk and copy keys:
Enroll keys in OVMF
===================
#. Customize the ``launch_uos.sh`` script to boot with the virtual disk which
contains the keys for enrollment:
#. Customize the ``launch_uos.sh`` script to boot with the virtual disk
that contains the keys for enrollment:
.. code-block:: none
:emphasize-lines: 6,7,9
@ -102,7 +103,7 @@ Enroll keys in OVMF
#. Launch the customized script to enroll keys::
$ sudo ./launch_virtual_disk.sh
$ sudo ./launch_virtual_disk.sh
#. Type ``exit`` command in UEFI shell.
@ -199,12 +200,12 @@ Follow these commands to sign the Clear Linux VM binaries.
#. Download and decompress the Clear Linux image::
$ wget https://download.clearlinux.org/releases/31080/clear/clear-31080-kvm.img.xz
$ unxz clear-31080-kvm.img.xz
$ wget https://download.clearlinux.org/releases/31080/clear/clear-31080-kvm.img.xz
$ unxz clear-31080-kvm.img.xz
#. Download the script to sign image::
$ wget https://raw.githubusercontent.com/projectacrn/acrn-hypervisor/master/doc/scripts/sign_image.sh
$ wget https://raw.githubusercontent.com/projectacrn/acrn-hypervisor/master/doc/scripts/sign_image.sh
#. Run the script to sign image.
@ -235,13 +236,13 @@ Follow these commands to sign the Clear Linux VM binaries.
Boot Clear Linux signed image
*****************************
#. Modify the ``launch_uos.sh`` script to use signed image.
#. Modify the ``launch_uos.sh`` script to use the signed image.
.. code-block:: none
:emphasize-lines: 5,6,8
$ sudo vim /usr/share/acrn/samples/nuc/launch_uos.sh
acrn-dm -A -m $mem_size -c $2 -s 0:0,hostbridge \
-s 2,pci-gvt -G "$3" \
-l com1,stdio \
@ -265,9 +266,11 @@ Boot Clear Linux signed image
#. Type ``exit`` to enter Bios configuration.
#. Navigate to the **Boot Manager** and select **UEFI Misc Device** to boot signed Clear Linux image.
#. Navigate to the **Boot Manager** and select **UEFI Misc Device** to
boot the signed Clear Linux image.
#. Log in as root and use ``dmesg`` to check the secure boot status on User VM.
#. Login as root and use ``dmesg`` to check the secure boot status on
the User VM.
.. code-block:: none
:emphasize-lines: 2