TrenchBoot Update

on YouTube ↗32m

" summary

Progress update on TrenchBoot: a standalone DL stub binary and a secure launch resource table (SLRT) TLV format are being added so EFI stub can call back to trigger dynamic launch without kernel changes; GRUB gains a new Gexec platform to build kexec-style relaunch images. PCR behavior: PCRs 0–15 stay, locality 4 resets PCRs 17–22 for relaunch. Patches (v6 kernel series and GRUB branch) are staged for review, AMD work is underway and ARM DRTM prototyping follows.

AI-written summary · about

" chapters (14)

1. 0:00Introduction
2. 0:50Secure Launch Series
3. 7:16Hook Function
4. 10:57SLRT
5. 13:14DRTM Late Launch
6. 15:27How does this relaunch work
7. 17:26Running the Linux kernel
8. 18:14How does this look like
9. 18:49Roadmap
10. 20:52Plug
11. 22:22Jake
12. 25:01Relaunch
13. 26:44SLT
14. 28:48Resetting PCs

" related talks

• 20mReLaunch Revisited: A Refresher on TrenchBoot Late LaunchDaniel Smith, Daniel Kiper · Linux Plumbers Conference 2025
• 37mTrenchBoot - How to Nicely Boot System with Intel TXT and AMD SVMDaniel Smith, Daniel Kiper · Linux Security Summit North America 2019
• 32mChallenges and Status of Enabling TrenchBoot in Xen HypervisorPiotr Król, Michał Żygowski · Xen Project Summit 2024
• 31mUpdating Linux with TUX: Trust Update for Linux KernelSuhho Lee, Hyunik Kim · Linux Security Summit North America 2018
• 27mBreaking the Chain of TrustJesse Michael, Mickey Shkatov, Alex Bazhaniuk · FIRSTCON21 Virtual Edition 2.0
• 21m(Ab)using Linux as a Trusted BootloaderEric Richter · Linux Security Summit 2016
• 42mwolfBoot: Open Source Secure Boot and Remote Firmware Updates in Safety-critical..Daniele Lacamera · Safety-Critical Software Summit @ Embedded Open Source Summit 2023
• 22mBoot Requirements and Strategies for the EdgeFrançois-Frédéric Ozog · Linaro Connect Bangkok 2019