<gozu>
mato: trying out mirage-pvh, and it ... just works. much appreciated.
<gozu>
mato: trying to boot it through grub2 failes with grub (rightly) pointing out there is no multiboot header (aka elfnote of the right type). briefly pingponged with marmarek about it, basicly seeing two options.
<gozu>
mato: a) add support for the "plain xen elf" to grub, or b) adding a grub-multiboot header to the binary.
<gozu>
mato: for reasons of "i had to look inside grub before and lockdown2 is straining my liver too much already" i am trending to (b) ... for which your input would be appreciated since i dont know a whole lot about the ocaml/mirage build sys and my guess is "some linker poking required".
zmijunkie1 has joined #mirage
zmijunkie has quit [Ping timeout: 240 seconds]
<mato>
gozu: why do you want to boot with grub2 in the first place?
<mato>
gozu: i don't understand the use-case, since the direct elf boot works fine...?
mort___ has joined #mirage
vesper has quit [Ping timeout: 256 seconds]
vesper11 has joined #mirage
jnavila has joined #mirage
<gozu>
mato: for qubes, it is a question of how the kernel is delivered. straight booting the kernel means it needs to be installed into dom0 in some way, which is ... less desirable from a security point of view compared to the alternative: installing it as a template-vm.
jnavila has quit [Read error: Connection reset by peer]
<gozu>
mato: for the "as a template" way, the template rootfs basicly just contains the grub.cfg and mirage (or other) kernel, and dom0 just starts grub and points it at the rootfs.
vesper has joined #mirage
<gozu>
mato: this has worked reasonably well for the last year or so using virtmode pv.
<gozu>
(oh, closer to two years ny now. though whether 2020 counts is up to debate)
vesper11 has quit [Ping timeout: 272 seconds]
<gozu>
the "template" way is required for other targets (like "someone makes a freebsd teplate") anyways, the nice thing about this working for mirage too is that it would allow having just "one" solution for "installing vms from untrusted sources" instead of two very different ones.
<mato>
gozu: mmm... can you email me with a long-form of what you actually want, and cc marmarek or relevant folks? irc is too transient for this.
<mato>
gozu: firstname@lastname.net
vesper11 has joined #mirage
vesper has quit [Ping timeout: 260 seconds]
<gozu>
mato: hm, would rather have it somewhere "more open", and by that i dont mean crossposting to several MLs. github issue ok with you?
<mato>
gozu: that's also fine, yes
<gozu>
mato: ok, will see to that tomorrow. thanks for the replies!
<mato>
gozu: you're welcome. i probably won't respond until next week in detail, taking some days off now.
<gozu>
mato: not in a hurry about that at all, was just looking at templated-mirage-pvh today because this was the first time i got mirage-pvh working at all. (and fiddling with the boot path is so much easier when you know the kernel works...)