https://github.com/aws/uefi
UEFI
https://github.com/aws/uefi
Last synced: about 1 month ago
JSON representation
UEFI
- Host: GitHub
- URL: https://github.com/aws/uefi
- Owner: aws
- License: other
- Created: 2022-10-21T13:27:51.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2024-08-18T06:23:15.000Z (over 1 year ago)
- Last Synced: 2025-01-28T19:48:33.234Z (10 months ago)
- Language: Nix
- Homepage:
- Size: 81.1 KB
- Stars: 27
- Watchers: 9
- Forks: 2
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
- awesome-tee-blockchain - aws/uefi - EDK2 changes for reproducible UEFI binaries on Nitro. (Code Repositories / Others)
README
# UEFI
This repository contains the changes that need to be applied on top of
[edk2](https://github.com/tianocore/edk2) in order to run x86_64 guests on
Nitro-based EC2 instances. We use [Nix](https://nixos.org/download.html) for
creating reproducible builds of the UEFI binaries to ensure that the same UEFI
binaries that are used with instance launches can be reproduced on any environment.
EC2 customers running instances with AMD SEV-SNP support can match their
running UEFI firmware with the binaries released here and even reproduce the
binaries themselves.
## How to build
Amazon EC2 instances that have AMD SEV-SNP enabled will use UEFI binaries built
in this repository as instance boot firmware. The Github workflow that is run
on every new release uses Nix to build the binary. However, the binary can also
be generated manually after installing [Nix](https://nixos.org/download.html)
by running the command:
```
nix-build --pure
```
This will produce the `result/ovmf_img.fd` binary which can be matched
against running and released UEFI binaries.
## How to generate a measurement
The [sev-snp-measure](https://github.com/virtee/sev-snp-measure) tool
can be used to generate measurements, e.g. for a guest with 4 vCPUs:
```
./sev-snp-measure.py --mode snp --vcpus=4 --vmm-type=ec2 --ovmf=ovmf_img.fd
```
## Security
See [CONTRIBUTING](CONTRIBUTING.md#security-issue-notifications) for more information.
## License
This project is licensed under the [BSD-2-Clause-Patent License](LICENSE).