On Tue, Nov 22, 2022 at 03:49:29PM -0600, Tom Lendacky wrote: > I bisected it to: > > 99b7f4b23d9f ("x86/boot/compressed, efi: Merge multiple definitions of image_offset into one") > > And doing the following fixed it: > > diff --git a/drivers/firmware/efi/libstub/x86-stub.c b/drivers/firmware/efi/libstub/x86-stub.c > index cb5f0befee57..a0bfd31358ba 100644 > --- a/drivers/firmware/efi/libstub/x86-stub.c > +++ b/drivers/firmware/efi/libstub/x86-stub.c > @@ -23,7 +23,7 @@ > const efi_system_table_t *efi_system_table; > const efi_dxe_services_table_t *efi_dxe_table; > -u32 image_offset; > +u32 image_offset __section(".data"); > static efi_loaded_image_t *image = NULL; > static efi_status_t > > I assume it has to do with being in .data vs .bss and not being explicitly > cleared with the encryption bit set. With the change to put image_offset in > the .data section, it is read as zero, where as when it was in the .bss > section it was reading "ciphertext". Thank you both. I'll refresh the set and run it here tomorrow too, to make sure it boots here too. Thx. -- Regards/Gruss, Boris. https://people.kernel.org/tglx/notes-about-netiquette