google / gce-tcb-verifier

Reference code for creating and verifying a GCE firmware signed reference value message.
Apache License 2.0
14 stars 3 forks source link

MRTD incorrect for large machine shapes #46

Closed deeglaze closed 3 weeks ago

deeglaze commented 1 month ago

The RAM banks that are visible to the TDHOB are not the simple 3 modeled in mrtd_from_ovmf. For example, c3-standard-176 has 176 gigs per NUMA node.

gpr=[0x0..0xbfffffff] (3 GiB)
gpr=[0xffe00000..0xffffffff] (2 MiB)
gpr=[0x100000000..0x2c3fffffff] (173 GiB)
gpr=[0x2c40000000..0x583fffffff] (176 GiB)
gpr=[0x5840000000..0x843fffffff] (176 GiB)
gpr=[0x8440000000..0xb03fffffff] (176 GiB)