US 11,989,303 B2
Secure boot partition for cloud compute nodes
Brian Spencer Payne, Portland, OR (US)
Assigned to Oracle International Corporation, Redwood Shores, CA (US)
Filed by Oracle International Corporation, Redwood Shores, CA (US)
Filed on Mar. 2, 2022, as Appl. No. 17/684,699.
Prior Publication US 2023/0281313 A1, Sep. 7, 2023
Int. Cl. G06F 21/57 (2013.01); G06F 9/4401 (2018.01)
CPC G06F 21/575 (2013.01) [G06F 9/4416 (2013.01)] 22 Claims
OG exemplary drawing
 
1. A computer-implemented method, the method comprising: transmitting, by a computing device of a cloud computing system, a first request to a smart network interface card, the first request requesting a pre-boot execution environment executable, the smart network interface card being associated with a metadata management service that manages secure boot metadata operable for verifying a boot loader; receiving, by the computing device and from the smart network interface card, the pre-boot execution environment executable; verifying, by the computing device, the pre-boot execution environment executable; and executing, by computing device, the pre-boot execution environment executable in response to verifying the pre-boot execution environment executable, the executing of the pre-boot execution environment executable comprising: transmitting a second request to the smart network interface card, the second request requesting the secure boot metadata, the pre-boot execution environment executable being configured to request the secure boot metadata from the smart network interface card; receiving, from the smart network interface card, the secure boot metadata; mounting a boot partition; loading the boot loader, the boot loader being obtained from the boot partition; verifying the boot loader based at least in part on the secure boot metadata; and executing the boot loader in response to verifying the boot loader; wherein the pre-boot execution environment executable is a program file that is capable of running on the computing device.