From 218be451d0a109392e9ba3de9fe322b54ddf630b Mon Sep 17 00:00:00 2001 From: xiangchao-pub Date: Sat, 29 Nov 2025 11:22:25 +0800 Subject: [PATCH] Add the operation of automatically replacing virtio_console when the VM starts to the readme.md file. --- trustzone-awared-vm/docs/README.md | 66 ++++++++++++++++-------------- 1 file changed, 36 insertions(+), 30 deletions(-) diff --git a/trustzone-awared-vm/docs/README.md b/trustzone-awared-vm/docs/README.md index 61cef1e..ae542a5 100644 --- a/trustzone-awared-vm/docs/README.md +++ b/trustzone-awared-vm/docs/README.md @@ -1,10 +1,10 @@ ## Host 环境搭建 1. 安装依赖 -```shell -yum install gcc patch make kernel-devel-$(uname -r) kernel-headers-$(uname -r) ninja-build -yum install glib2 glib2-devel pixman-devel -yum install openssl-devel -``` + ```shell + yum install gcc patch make kernel-devel-$(uname -r) kernel-headers-$(uname -r) ninja-build + yum install glib2 glib2-devel pixman-devel + yum install openssl-devel + ``` 2. `vtzb_proxy`编译 ```shell git clone https://gitee.com/openeuler/tee-gp-proxy.git @@ -27,10 +27,10 @@ yum install openssl-devel 1. 920 机型请参考[官方文档](https://www.hikunpeng.com/document/detail/zh/kunpengcctrustzone/trustzone/fg/kunpengtrustzone_20_0019.html)。 2. 920 新型号请参考[官方文档](https://www.hikunpeng.com/document/detail/zh/kunpengcctrustzone/cca/devg/Kunpeng_ommercialcryptography_16_0015.html) 3. 在`tzdriver`编译后，将`tzdriver.ko` 复制到指定目录 - ```bash - mkdir -p "/lib/modules/$(uname -r)/kernel/drivers/trustzone/" - cp tzdriver.ko /lib/modules/$(uname -r)/kernel/drivers/trustzone - ``` + ```bash + mkdir -p "/lib/modules/$(uname -r)/kernel/drivers/trustzone/" + cp tzdriver.ko /lib/modules/$(uname -r)/kernel/drivers/trustzone + ``` ## qemu与虚机配置 1. 获取`qemu v6.2.0`源码 @@ -64,14 +64,14 @@ yum install openssl-devel yum -y install edk2-aarch64.noarch libvirt ``` 2. 启动虚机 - ```shell - systemctl start/restart libvirtd.service - setenforce 0 - virsh define vm-libvirt.xml - virsh start nvm-ta-1 - /* 若新安装，用VNC登录安装，注意打开端口防火墙 */ - iptables -I INPUT -p tcp –dport 5901 -j ACCEPT - ``` + ```shell + systemctl start/restart libvirtd.service + setenforce 0 + virsh define vm-libvirt.xml + virsh start nvm-ta-1 + /* 若新安装，用VNC登录安装，注意打开端口防火墙 */ + iptables -I INPUT -p tcp –dport 5901 -j ACCEPT + ``` 9. 多虚机配置 ```xml @@ -86,9 +86,9 @@ yum install openssl-devel 3. `name` 恒为`vtzf_serialport0`； ## VM环境搭建 1. 安装依赖 -```shell -yum install make kernel-devel-$(uname -r) kernel-headers-$(uname -r) git gcc openssl-devel -``` + ```shell + yum install make kernel-devel-$(uname -r) kernel-headers-$(uname -r) git gcc openssl-devel + ``` 1. `itrustee_client`编译安装 1. 920 机型请参考[官方文档](https://www.hikunpeng.com/document/detail/zh/kunpengcctrustzone/trustzone/fg/kunpengtrustzone_20_0019.html)。 2. 920 新型号请参考[官方文档](https://www.hikunpeng.com/document/detail/zh/kunpengcctrustzone/cca/devg/Kunpeng_ommercialcryptography_16_0015.html) @@ -100,21 +100,29 @@ yum install make kernel-devel-$(uname -r) kernel-headers-$(uname -r) git gcc ope ``` 3. 编译`virtio_console.ko`并加载（仅5.10内核需要执行此步骤） 1. 编译`virtio_console` 并替换内核默认的`virtio_console`！ - ``` + ```shell cd tee-gp-proxy/trustzone-awared-vm/VM/virtio/char make - cp virtio_console.ko /lib/modules/$(uname -r)/kernel/drivers/char - cd /lib/modules/$(uname -r)/kernel/drivers/char - mv virtio_console.ko.xz virtio_console.ko.xz.back - xz -k -9 ./virtio_console.ko + mkdir -p /lib/modules/$(uname -r)/kernel/drivers/trustzone + cp virtio_console.ko /lib/modules/$(uname -r)/kernel/drivers/trustzone rmmod virtio_console - insmod /lib/modules/$(uname -r)/kernel/drivers/char/virtio_console.ko + insmod /lib/modules/$(uname -r)/kernel/drivers/trustzone/virtio_console.ko ``` -8. 编译`vtzdriver`并加载`vtzfdriver.ko`, `vtzfdriver`加载后不可卸载, 如需卸载请重启 + 2. 设置虚机启动自动替换`virtio_console`模块 + - 编辑`rc.local`文件 + ```shell + vi /etc/rc.local + ``` + - 在文件末尾添加如下内容 + + ```shell + rmmod virtio_console + insmod /lib/modules/$(uname -r)/kernel/drivers/trustzone/virtio_console.ko + ``` +5. 编译`vtzdriver`并加载`vtzfdriver.ko`, `vtzfdriver`加载后不可卸载, 如需卸载请重启 ```bash cd tee-gp-proxy/trustzone-awared-vm/VM/vtzdriver make - mkdir -p /lib/modules/$(uname -r)/kernel/drivers/trustzone cp vtzfdriver.ko /lib/modules/$(uname -r)/kernel/drivers/trustzone insmod /lib/modules/$(uname -r)/kernel/drivers/trustzone/vtzfdriver.ko ``` @@ -131,8 +139,6 @@ nohup /usr/bin/vtz_proxy & ``` #### 在`VM`中需要执行以下命令 ```shell -rmmod virtio_console #仅5.10内核需要执行此步骤 -insmod /lib/modules/$(uname -r)/kernel/drivers/char/virtio_console.ko #仅5.10内核需要执行此步骤 insmod /lib/modules/$(uname -r)/kernel/drivers/trustzone/vtzfdriver.ko nohup /usr/bin/teecd & ``` -- Gitee