Skip to content

Commit 28b3aeb

Browse files
committed
Add CCA BootSync Learning Path
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com>
1 parent 46ca0b4 commit 28b3aeb

4 files changed

Lines changed: 561 additions & 0 deletions

File tree

Lines changed: 67 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,67 @@
1+
---
2+
title: Arm CCA Boot Sync
3+
description: Learn how to use Arm CCA Boot Sync while launching Arm CCA Realms on an FVP with RME support.
4+
5+
minutes_to_complete: 60
6+
7+
who_is_this_for: This Learning Path is for developers who want to understand how to use Arm CCA Bootsync.
8+
9+
learning_objectives:
10+
- Gain an overview of Arm CCA Boot Sync and Boot Onjection Protocol.
11+
- Understand how Arm CCA Boot Sync can be used for defining UEFI variables, enabling Secure Boot and share secure data with Arm CCA Realms.
12+
- Lanch Arm CCA Realms with Secure Boot enabled and encrypted file system using an Armv9-A AEM Base Fixed Virtual Platform (FVP) with RME support.
13+
14+
prerequisites:
15+
- An AArch64 or x86_64 computer running Linux or macOS. Cloud-based instances can also be used; see the [Arm cloud service providers](/learning-paths/servers-and-cloud-computing/csp/)
16+
- Completion of the [Run an application in a Realm using the Arm Confidential Compute Architecture (CCA)](/learning-paths/servers-and-cloud-computing/cca-container) Learning Path
17+
18+
author:
19+
- Anton Antonov
20+
- Pareena Verma
21+
22+
generate_summary_faq: true
23+
rerun_summary: false
24+
rerun_faqs: false
25+
26+
### Tags
27+
skilllevels: Advanced
28+
subjects: Performance and Architecture
29+
armips:
30+
- Neoverse
31+
- Cortex-A
32+
operatingsystems:
33+
- Linux
34+
- macOS
35+
tools_software_languages:
36+
- FVP
37+
- RME
38+
- CCA
39+
- Docker
40+
- EDK2
41+
- Cryptsetup
42+
43+
further_reading:
44+
- resource:
45+
title: Arm Confidential Compute Architecture
46+
link: https://www.arm.com/architecture/security-features/arm-confidential-compute-architecture
47+
type: website
48+
- resource:
49+
title: Arm Confidential Compute Architecture Open-Source enablement
50+
link: https://www.youtube.com/watch?v=JXrNkYysuXw
51+
type: video
52+
- resource:
53+
title: Learn the architecture - Realm Management Extension
54+
link: https://developer.arm.com/documentation/den0126
55+
type: documentation
56+
- resource:
57+
title: Realm Management Monitor Specification
58+
link: https://developer.arm.com/documentation/den0137/latest/
59+
type: documentation
60+
61+
### FIXED, DO NOT MODIFY
62+
# ================================================================================
63+
weight: 1 # _index.md always has weight of 1 to order correctly
64+
layout: "learningpathall" # All files under learning paths have this same wrapper
65+
learning_path_main_page: "yes" # This should be surfaced when looking for related content. Only set for _index.md of learning path content.
66+
---
67+
Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
---
2+
# ================================================================================
3+
# FIXED, DO NOT MODIFY THIS FILE
4+
# ================================================================================
5+
weight: 21 # Set to always be larger than the content in this path to be at the end of the navigation.
6+
title: "Next Steps" # Always the same, html page title.
7+
layout: "learningpathall" # All files under learning paths have this same wrapper for Hugo processing.
8+
---
Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
---
2+
# User change
3+
title: "Overview of Arm CCA BootSync and Boot Injection protocol"
4+
5+
weight: 2 # 1 is first, 2 is second, etc.
6+
7+
# Do not modify these elements
8+
layout: "learningpathall"
9+
---
10+
11+
## Design overview
12+
13+
TO_DO: Explain Boot Injection protocol and Arm CCA Boot Sync wokflow.
14+
15+
For more details see:
16+
17+
- [ArmCcaBootSync/Readme.md](https://gitlab.arm.com/linux-arm/edk2-cca/-/blob/cca/4441_measured_boot_v1/ArmVirtPkg/ArmCcaBootSync/Readme.md)
18+
- Appendix A (Boot Injection) in [the RHI specifications document](https://confluence.arm.com/display/FENIMORE/RHI+specification)
19+
20+
21+
In the next section, you will launch realms and see how Arm CCA BootSync can be used.

0 commit comments

Comments
 (0)