Conversation

Notices

1. Embed this notice
   Leah Rowe is not a Rowebot (libreleah@mas.to)'s status on Thursday, 21-Nov-2024 03:29:37 JST Leah Rowe is not a Rowebot

   Arch Linux on a Librebooted Dell Latitude E6230 -- installed using the recently added U-Boot payload.

   U-Boot provides a 64-bit UEFI environment on x86 in Libreboot. All of the photos below are of UEFI booting, in Libreboot!

   U-Boot on x86 is still quite imperfect on real hardware, but can work well. A lot more testing needed; the way I do it is I load U-Boot from flash, via SeaBIOS ESC menu.

   Simon Glass has been helping me. This will be available on most machines in the next Libreboot release.

   • Embed this notice
     Leah Rowe is not a Rowebot (libreleah@mas.to)'s status on Thursday, 21-Nov-2024 03:38:14 JST Leah Rowe is not a Rowebot

     in reply to

     Yes, Libreboot has UEFI now!

     Still probably won't boot Windows.

     My motivation here is U-Boot also has a slew of other boot methods, and will make dealing with Linux distros a lot easier for most people; it will also be of great help to BSD users, who currently rely on SeaBIOS in Libreboot.

     I will provide a "SeaU-Boot" setup in the upcoming release, where SeaBIOS has a bootorder file loading U-Boot first, while still allowing other options via ESC menu. Same concept as SeaGRUB but with U-Boot.

   • Embed this notice
     Leah Rowe is not a Rowebot (libreleah@mas.to)'s status on Thursday, 21-Nov-2024 05:46:15 JST Leah Rowe is not a Rowebot

     in reply to

     • Mark Daniels-Wr. 🟢

     @MarkDW No-U-Boot

   • Embed this notice
     Mark Daniels-Wr. 🟢 (markdw@mstdn.social)'s status on Thursday, 21-Nov-2024 05:46:16 JST Mark Daniels-Wr. 🟢

     in reply to

     @libreleah there is definite potential in the naming 🙂
     How about:
     „Depth charge“ for maybe battery management
     „DaveyJones“ for security
     „Wolfpack“ file compression something?

     Ah, I like this 👍 😎

   • Embed this notice
     Leah Rowe is not a Rowebot (libreleah@mas.to)'s status on Thursday, 21-Nov-2024 05:50:58 JST Leah Rowe is not a Rowebot

     in reply to

     • Moritz Strohm

     @mstrohm I'm uncertain as to whether U-Boot supports UEFI's "SecureBoot" feature; I haven't tested it yet, but I will.

     Libreboot has (since very early days) supported a feature that I call "Secure libreBoot", whereby GRUB is the primary payload (after coreboot init) or SeaBIOS doesn't load oproms and loads GRUB straight away, with the SeaBIOS menu disabled.

     GRUB then requries a password, optional GPG check on your kernel, and full disk encryption including /boot.

     See:

     https://libreboot.org/docs/linux/grub_hardening.html

   • Embed this notice
     Moritz Strohm (mstrohm@kanoa.de)'s status on Thursday, 21-Nov-2024 05:50:59 JST Moritz Strohm

     in reply to

     @libreleah

     Does that mean that I soon may be able to create my own CA, self-sign the grub executable and/or the Linux kernel and then have a fully functional UEFI secure boot mode with Libreboot?

   • Embed this notice
     Leah Rowe is not a Rowebot (libreleah@mas.to)'s status on Thursday, 21-Nov-2024 05:52:19 JST Leah Rowe is not a Rowebot

     in reply to

     • Moritz Strohm

     @mstrohm SecU-re-Boot though. That has a nice ring to it!

   • Embed this notice
     Leah Rowe is not a Rowebot (libreleah@mas.to)'s status on Thursday, 21-Nov-2024 18:39:23 JST Leah Rowe is not a Rowebot

     in reply to

     • LogicalErzor

     @Logical_Error expect bugs. that's why i chainload it from seabios in case of brick. worst case, seabios still works and you can still access grub from seabios too.

   • Embed this notice
     LogicalErzor (logical_error@fosstodon.org)'s status on Thursday, 21-Nov-2024 18:39:24 JST LogicalErzor

     in reply to

     @libreleah this is super cool! i have a latitude variant, so i really want to try this out now. how fast does this boot and is this production ready?