Tianocore/edk2.git/OvmfPkg, branch dependabot/github_actions/actions/setup-python-6

OvmfPkg/ResetVector: reorganize #vc exit handler setup.

2025-09-11T19:32:07+00:00

Move setup + teardown of the #vc exception handler to separate functions. Setup as early as possible (right after entering 32-bit mode). Teardown as late as possible (right before entering 64-bit mode). This makes the cpuid instruction work in all 32-bit code, no matter what mode (native/TDX/SEV) the code is running in. Specifically the TDX probe code works properly in SEV mode because the #vc handler emulates the instruction properly. Signed-off-by: Gerd Hoffmann

OvmfPkg/ResetVector: move ReloadFlat32 call

2025-09-11T19:32:07+00:00

Move the call from IntelTdx.asm to Main.asm. This is needed when using the Main32 entry point. Right now is used in TDX mode only, but this can potentially used by other modes (native, SEV) too. So prepare for that. Signed-off-by: Gerd Hoffmann

OvmfPkg/MemFd: switch Microvm build to include

2025-09-11T17:47:40+00:00

Signed-off-by: Gerd Hoffmann

OvmfPkg/MemFd: switch OvmfPkgIa32X64 build to include

2025-09-11T17:47:40+00:00

Signed-off-by: Gerd Hoffmann

OvmfPkg/MemFd: add AmdSev changes, switch AmdSev build to include

2025-09-11T17:47:40+00:00

Signed-off-by: Gerd Hoffmann

OvmfPkg/MemFd: move MEMFD config from OvmfPkgX64 to include file

2025-09-11T17:47:40+00:00

Signed-off-by: Gerd Hoffmann

OvmfPkg: Add NETWORK_ISCSI_DEFAULT_ENABLE build flag

2025-09-11T08:19:20+00:00

REF: https://github.com/tianocore/edk2/issues/11483 Introduce a new build flag NETWORK_ISCSI_DEFAULT_ENABLE to control whether iSCSI support is enabled by default without setting fwcfg. This allows developers to decide at build time if the IScsiDxe driver should be included and enabled by default. If NETWORK_ISCSI_DEFAULT_ENABLE is set to FALSE, IScsiDxe will still be built when NETWORK_ISCSI_ENABLE is TRUE, but the default PCD value (gUefiOvmfPkgTokenSpaceGuid.PcdEntryPointOverrideDefaultValue) will be set to "no". This ensures iSCSI remains disabled at runtime unless enabled explicitly by fwcfg. This change provides more flexibility for both build-time and runtime configuration of iSCSI support. Signed-off-by: Richard Lyu

OvmfPkg: Remove OVMF IA32

2025-09-09T18:49:32+00:00

This commit removes OVMF IA32 from edk2 per RFC https://edk2.groups.io/g/devel/topic/rfc_remove_ovmf_ia32_and/114152215. OVMF IA32 is a 32 bit only platform that no longer represents the vast majority of physical platforms. The RFC details more reasoning in much more depth. OVMF IA32 will be kept in a branch off the edk2-stable202508 tag for any long term consumers; it will receive build break updates only (e.g. if an upstream submodule changes location). Signed-off-by: Oliver Smith-Denny

OvmfPkg/MemEncryptSevLib: Check if SEV-SNP coherency mitigitation is needed

2025-09-09T17:43:31+00:00

CPUID bit Fn8000001F_EBX[31] defines the COHERNECY_SFW_NO CPUID bit that, when set, indicates that the software mitigation for this vulnerability is not needed. Add support to check for this CPUID bit and avoid the mitigation if set. Signed-off-by: Tom Lendacky

OvmfPkg/ResetVector: Make ReceivedVc a flag in SEV-ES workarea

2025-09-09T17:43:31+00:00

In preparation for adding another indicator flag, change the ReceivedVc field into a flags field. Since the code is used by both assembler and C files, use bitmasks for field definitions. The VC flag is bit 0. Signed-off-by: Tom Lendacky