ReLaunch Revisited: A Refresher on TrenchBoot Late Launch
summary
Secure ReLaunch integrates D-RTM “late launch” into Linux by adding a new GXE platform for GRUB that kexecs to a multiboot ELF, uses a SLRT struct to hand state into the relaunch kernel, and reuses existing GRUB and kernel plumbing. Two deploy options exist for the kernel image: pass via kexec or embed in the GRUB image. Intel support lands first, AMD follows, and upstream merge is targeted within a few merge windows (roughly six to nine months); UEFI/SD boot and 32‑bit reset quirks remain unresolved.
AI-written summary · about
chapters (8)
- 0:00Introduction to presenters
- 0:21What is Late Launch
- 3:33GRUB implementation for DRTM
- 6:04Secure launch process flow
- 9:00Current development status
- 12:51SD boot and UKI support
- 17:55Kernel vs firmware implementation
- 20:02Q&A and wrap-up
related talks
32mTrenchBoot Update
37mTrenchBoot - How to Nicely Boot System with Intel TXT and AMD SVM
39m“Early Boot and Late Attach” of Remote Processor...
21m(Ab)using Linux as a Trusted Bootloader
32mChallenges and Status of Enabling TrenchBoot in Xen Hypervisor
46mStatus of Embedded Linux
28mExtending EFI support in Linux to new architectures
49mAn Introduction To Coreboot and LinuxBoot: Building Modern Open Boot Stack