[Bug 2069232] Re: Missing measurements on confidential computing platforms (Intel TDX)

[Mate Kukri]

@hectorcao, I am including your upstream patch in the next Ubuntu GRUB

** Changed in: grub2-unsigned (Ubuntu)
     Assignee: Hector CAO (hectorcao) => Mate Kukri (mkukri)

** Changed in: grub2-signed (Ubuntu)
     Assignee: (unassigned) => Mate Kukri (mkukri)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2-signed in Ubuntu.
https://bugs.launchpad.net/bugs/2069232

Title:
  Missing measurements on confidential computing platforms (Intel TDX)

Status in grub:
  Unknown
Status in The Kobuk project:
  Confirmed
Status in grub2-signed package in Ubuntu:
  New
Status in grub2-unsigned package in Ubuntu:
  Confirmed

Bug description:
  When we run a Confidential VM with grub bootlodaer on Intel TDX
  platform, the module tpm is not loaded and boot measurements are not
  done for the guest VM.

  This bug will prevent grub of doing measurements on confidential computing platform
  (the bug has been confirmed on Intel TDX). This lack of measurements will break the
  remote attestation

  See upstream bug : https://savannah.gnu.org/bugs/?65821

  Upstream fix :
  https://git.savannah.gnu.org/cgit/grub.git/commit/?id=86df79275d065d87f4de5c97e456973e8b4a649c

To manage notifications about this bug go to:
https://bugs.launchpad.net/grub/+bug/2069232/+subscriptions