Systems and methods for securely launching an embedded operating system using non-volatile memory namespace identifier mapping
A preboot module of BIOS may be configured to create a partition mapping table for namespace identifiers of sub-partitions of a boot partition, determine a configuration policy for the information handling system, store the configuration policy in a partition of non-volatile memory, launch execution of an embedded operating system kernel, and communicate the partition mapping table to the embedded operating system kernel based on the configuration policy, such that the embedded operating system kernel is enabled to load the configuration policy from the non-volatile memory and load and execute one or more applications based on the partition mapping table and the configuration policy.
1. An information handling system comprising:
a processor;
a non-volatile memory;
a boot partition having stored thereon, each in a sub-partition of the boot partition, an embedded operating system kernel and one or more applications executable on the embedded operating system kernel, wherein each sub-partition is associated with a namespace identifier; and
a basic input/output system communicatively coupled to the processor and embodied by executable instructions embodied in non-transitory computer readable media, the instructions configured to, when executed by the processor, implement a preboot module configured to:
create a partition mapping table for the namespace identifiers of the sub-partitions;
determine a configuration policy for the information handling system;
store the configuration policy in a partition of the non-volatile memory;
launch execution of the embedded operating system kernel; and
communicate the partition mapping table to the embedded operating system kernel based on the configuration policy;
such that the embedded operating system kernel is enabled to load the configuration policy from the non-volatile memory and load and execute the one or more applications based on the partition mapping table and the configuration policy.
2. The information handling system of claim 1 , wherein the non-volatile memory is implemented in accordance with the Non-Volatile Memory Express standard.
3. The information handling system of claim 1 , wherein the basic input/output system is configured to:
load configuration information from a dynamic platform configuration module; and
generate the configuration policy based on the configuration information.
4. The information handling system of claim 1 , wherein the preboot module executes during a driver execution environment of the basic input/output system.
5. The information handling system of claim 1 , wherein the basic input/output system comprises a Unified Extensible Firmware Interface.
6. A method comprising, in a basic input/output system of an information handling system comprising a non-volatile memory and a boot partition, having stored thereon, each in a sub-partition of the boot partition, an embedded operating system kernel and one or more applications executable on the embedded operating system kernel, wherein each sub-partition is associated with a namespace identifier, implementing a preboot module configured to:
create a partition mapping table for the namespace identifiers of the sub-partitions;
determine a configuration policy for the information handling system;
store the configuration policy in a partition of the non-volatile memory;
launch execution of the embedded operating system kernel; and
communicate the partition mapping table to the embedded operating system kernel based on the configuration policy;
such that the embedded operating system kernel is enabled to load the configuration policy from the non-volatile memory and load and execute the one or more applications based on the partition mapping table and the configuration policy.
7. The method of claim 6 , wherein the non-volatile memory is implemented in accordance with the Non-Volatile Memory Express standard.
8. The method of claim 6 , wherein the basic input/output system is configured to:
load configuration information from a dynamic platform configuration module; and
generate the configuration policy based on the configuration information.
9. The method of claim 6 , wherein the preboot module executes during a driver execution environment of the basic input/output system.
10. The method of claim 6 , wherein the basic input/output system comprises a Unified Extensible Firmware Interface.
11. An article of manufacture comprising:
a computer readable medium; and
computer-executable instructions carried on the computer readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to, in a basic input/output system of an information handling system, implement a preboot module configured to:
create a partition mapping table for namespace identifiers of sub-partitions;
determine a configuration policy for the information handling system;
store the configuration policy in a partition of non-volatile memory;
launch execution of an embedded operating system kernel; and
communicate the partition mapping table to the embedded operating system kernel based on the configuration policy;
such that the embedded operating system kernel is enabled to load the configuration policy from the non-volatile memory and load and execute one or more applications based on the partition mapping table and the configuration policy.
12. The article of claim 11 , wherein the non-volatile memory is implemented in accordance with the Non-Volatile Memory Express standard.
13. The article of claim 11 , wherein the basic input/output system is configured to:
load configuration information from a dynamic platform configuration module; and
generate the configuration policy based on the configuration information.
14. The article of claim 11 , wherein the preboot module executes during a driver execution environment of the basic input/output system.
15. The article of claim 11 , wherein the basic input/output system comprises a Unified Extensible Firmware Interface.