Skip to content

Commit 15a5c08

Browse files
authored
Merge pull request #3442 from anta5010/bootsync
Add CCA BootSync Learning Path
2 parents ea1f8c8 + d185a6b commit 15a5c08

4 files changed

Lines changed: 565 additions & 0 deletions

File tree

Lines changed: 71 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,71 @@
1+
---
2+
title: Arm CCA Boot Sync
3+
description: Learn how to use Arm CCA Boot Sync while launching Arm CCA Realms on an FVP with RME support.
4+
5+
draft: true
6+
cascade:
7+
draft: true
8+
9+
minutes_to_complete: 60
10+
11+
who_is_this_for: This Learning Path is for developers who want to understand how to use Arm CCA Bootsync.
12+
13+
learning_objectives:
14+
- Gain an overview of Arm CCA Boot Sync and Boot Onjection Protocol.
15+
- Understand how Arm CCA Boot Sync can be used for defining UEFI variables, enabling Secure Boot and share secure data with Arm CCA Realms.
16+
- Lanch Arm CCA Realms with Secure Boot enabled and encrypted file system using an Armv9-A AEM Base Fixed Virtual Platform (FVP) with RME support.
17+
18+
prerequisites:
19+
- An AArch64 or x86_64 computer running Linux or macOS. Cloud-based instances can also be used; see the [Arm cloud service providers](/learning-paths/servers-and-cloud-computing/csp/)
20+
- Completion of the [Run an application in a Realm using the Arm Confidential Compute Architecture (CCA)](/learning-paths/servers-and-cloud-computing/cca-container) Learning Path
21+
22+
author:
23+
- Anton Antonov
24+
- Pareena Verma
25+
26+
generate_summary_faq: true
27+
rerun_summary: false
28+
rerun_faqs: false
29+
30+
### Tags
31+
skilllevels: Advanced
32+
subjects: Performance and Architecture
33+
armips:
34+
- Neoverse
35+
- Cortex-A
36+
operatingsystems:
37+
- Linux
38+
- macOS
39+
tools_software_languages:
40+
- FVP
41+
- RME
42+
- CCA
43+
- Docker
44+
- EDK2
45+
- Cryptsetup
46+
47+
further_reading:
48+
- resource:
49+
title: Arm Confidential Compute Architecture
50+
link: https://www.arm.com/architecture/security-features/arm-confidential-compute-architecture
51+
type: website
52+
- resource:
53+
title: Arm Confidential Compute Architecture Open-Source enablement
54+
link: https://www.youtube.com/watch?v=JXrNkYysuXw
55+
type: video
56+
- resource:
57+
title: Learn the architecture - Realm Management Extension
58+
link: https://developer.arm.com/documentation/den0126
59+
type: documentation
60+
- resource:
61+
title: Realm Management Monitor Specification
62+
link: https://developer.arm.com/documentation/den0137/latest/
63+
type: documentation
64+
65+
### FIXED, DO NOT MODIFY
66+
# ================================================================================
67+
weight: 1 # _index.md always has weight of 1 to order correctly
68+
layout: "learningpathall" # All files under learning paths have this same wrapper
69+
learning_path_main_page: "yes" # This should be surfaced when looking for related content. Only set for _index.md of learning path content.
70+
---
71+
Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
---
2+
# ================================================================================
3+
# FIXED, DO NOT MODIFY THIS FILE
4+
# ================================================================================
5+
weight: 21 # Set to always be larger than the content in this path to be at the end of the navigation.
6+
title: "Next Steps" # Always the same, html page title.
7+
layout: "learningpathall" # All files under learning paths have this same wrapper for Hugo processing.
8+
---
Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
---
2+
# User change
3+
title: "Overview of Arm CCA BootSync and Boot Injection protocol"
4+
5+
weight: 2 # 1 is first, 2 is second, etc.
6+
7+
# Do not modify these elements
8+
layout: "learningpathall"
9+
---
10+
11+
## Design overview
12+
13+
TO_DO: Explain Boot Injection protocol and Arm CCA Boot Sync wokflow.
14+
15+
For more details see:
16+
17+
- [ArmCcaBootSync/Readme.md](https://gitlab.arm.com/linux-arm/edk2-cca/-/blob/cca/4441_measured_boot_v1/ArmVirtPkg/ArmCcaBootSync/Readme.md)
18+
- Appendix A (Boot Injection) in [the RHI specifications document](https://confluence.arm.com/display/FENIMORE/RHI+specification)
19+
20+
21+
In the next section, you will launch realms and see how Arm CCA BootSync can be used.

0 commit comments

Comments
 (0)