libreboot / lbwww (public) (License: Unspecified) (since 2023-04-11) (hash sha1)
libreboot website (markdown files). https://libreboot.org/
Clone URLs: https://rocketgit.com/user/libreboot/lbwww ssh://rocketgit@ssh.rocketgit.com/user/libreboot/lbwww git://git.rocketgit.com/user/libreboot/lbwww
25.04 25.06 master
List of commits:
Subject Hash Author Date (UTC)
Libreboot 20240612 release 88ca46ad4ce0b79682ea88d97f8dbf801e846031 Leah Rowe 2024-06-12 07:40:32
update docs/maintain/ as per audit5 aea5574f17bf0755ae66c6592619a8b88f941fe8 Leah Rowe 2024-06-12 07:34:00
shorten the introduction on audit5 2a116950ed5f49ef97f18772d8eb2ef90efb4abe Leah Rowe 2024-06-11 14:29:59
correction 592fd5a38524e6abb39aad1f2a0013a57091c1e0 Leah Rowe 2024-06-10 10:12:44
Libreboot Build System Audit 5 38539e9feab75797bf31819b7fd70a475076a7a4 Leah Rowe 2024-06-09 23:30:10
update 2 (to make certain things make sense) 557921522a72f08587daaac5362c4805c8979c51 Leah Rowe 2024-06-09 22:09:09
update 6b95fd6afd25cf7fdc4b473295fd3187f048aecf Leah Rowe 2024-06-09 22:03:39
remove completed tasks 99728a5cef9b3f5f324361616da3c1a390fea0cb Leah Rowe 2024-06-09 15:26:44
remove superfluous article eb5f72881cb3a29952bc68ff399cb63b8ed6fd14 Leah Rowe 2024-06-05 12:57:28
misc/emulation: fix image path d68baade32d6f2c5e9ccdd21c9da210dde7f5940 Leah Rowe 2024-06-02 18:18:11
Update site/docs/hardware/dell9020.md 6fa59464fadbdd620d91468084c0bb92426d0e2e Gusher_123 2024-05-31 18:46:58
Update site/news/safety.md 94c1e51ce3b746e1356143434176f27c8e66cf3c Gusher_123 2024-05-31 18:33:39
Update site/docs/hardware/dell9020.md e4823653c6fbc7fe6b4ed9c0d54c0dddd6472fc9 Gusher_123 2024-05-31 18:26:32
remove obsolete information e27edff3877dc30b5c3d0b3a323f5136ac150d45 Leah Rowe 2024-05-28 18:04:32
Update site/docs/hardware/ga-g41m-es2l.md da2ec62369472714c18949ed5bea6dee04be6fef chrislogan2 2024-05-28 00:56:26
update 89868f9fa969cae2420581d45e5294b0444b4f6c Leah Rowe 2024-05-27 23:46:58
update ec4e4007fa874a7377005b171cf6a8b1a0c40c3c Leah Rowe 2024-05-27 23:07:53
don't demote the other safety warning 1930325800b0d457867e4b31d3716f1b6480a944 Leah Rowe 2024-05-27 11:09:06
grub payload warning 040249ca742becbbbf9f3cd4cf4e6e7a0ac1ff9e Leah Rowe 2024-05-27 11:02:37
put cc0 on site.cfg 1ea2893e03bb863485bdd3edb39f01af5de589cc Leah Rowe 2024-05-27 07:42:55
Commit 88ca46ad4ce0b79682ea88d97f8dbf801e846031 - Libreboot 20240612 release
Signed-off-by: Leah Rowe <info@minifree.org>
Author: Leah Rowe
Author date (UTC): 2024-06-12 07:40
Committer name: Leah Rowe
Committer date (UTC): 2024-06-12 07:40
Parent(s): aea5574f17bf0755ae66c6592619a8b88f941fe8
Signer:
Signing key:
Signing status: N
Tree: 578a725c93ad469ce3c93f4521bae103fbbc3b4b
File Lines added Lines deleted
site/docs/linux/grub_hardening.md 2 1
site/download.md 4 4
site/download.uk.md 5 5
site/index.de.md 3 3
site/index.fr.md 2 2
site/index.it.md 2 2
site/index.md 3 3
site/index.uk.md 2 2
site/index.zh-cn.md 1 1
site/news/MANIFEST 1 0
site/news/audit5.md 3 0
site/news/libreboot20240504.md 4 0
site/news/libreboot20240612.md 69 24
site/news/safety.md 2 2
File site/docs/linux/grub_hardening.md changed (mode: 100644) (index 2b0f69a..50caf76)
... ... This `bootorder` file has the following contents:
242 242 ``` ```
243 243
244 244 You can add it yourself if your image doesn't have it. With this, SeaBIOS You can add it yourself if your image doesn't have it. With this, SeaBIOS
245 only loads GRUB first.
245 only loads GRUB first. You can still put a GRUB config in CBFS to override
246 the default one, as of Libreboot 20240612.
246 247
247 248 NOTE: Before disabling the boot menu, make sure GRUB works. Access it using NOTE: Before disabling the boot menu, make sure GRUB works. Access it using
248 249 the `bootorder` file and/or press ESC in the SeaBIOS menu. Then disable the the `bootorder` file and/or press ESC in the SeaBIOS menu. Then disable the
File site/download.md changed (mode: 100644) (index bd6d5d2..673e3e1)
... ... LIBREBOOT](news/safety.md).**
31 31 GPG signing key GPG signing key
32 32 --------------- ---------------
33 33
34 **The latest release is Libreboot 20240504, under the `testing` directory.**
34 **The latest release is Libreboot 20240612, under the `stable` directory.**
35 35
36 36 ### NEW KEY ### NEW KEY
37 37
 
... ... there is a Git repository that you can download from. Go here:
83 83 HTTPS mirrors {#https} HTTPS mirrors {#https}
84 84 ------------- -------------
85 85
86 **The latest release is Libreboot 20240504, under the `testing` directory.**
86 **The latest release is Libreboot 20240612, under the `stable` directory.**
87 87
88 88 These mirrors are recommended, since they use TLS (https://) encryption. These mirrors are recommended, since they use TLS (https://) encryption.
89 89
 
... ... crontab. This page tells you how to use crontab:
174 174 HTTP mirrors {#http} HTTP mirrors {#http}
175 175 ------------ ------------
176 176
177 **The latest release is Libreboot 20240504, under the `testing` directory.**
177 **The latest release is Libreboot 20240612, under the `stable` directory.**
178 178
179 179 WARNING: these mirrors are non-HTTPS which means that they are WARNING: these mirrors are non-HTTPS which means that they are
180 180 unencrypted. Your traffic could be subject to interference by unencrypted. Your traffic could be subject to interference by
 
... ... if using HTTPS.
188 188 FTP mirrors {#ftp} FTP mirrors {#ftp}
189 189 ----------- -----------
190 190
191 **The latest release is Libreboot 20240504, under the `testing` directory.**
191 **The latest release is Libreboot 20240612, under the `stable` directory.**
192 192
193 193 WARNING: FTP is also unencrypted, like HTTP. The same risks are present. WARNING: FTP is also unencrypted, like HTTP. The same risks are present.
194 194
File site/download.uk.md changed (mode: 100644) (index a1c01cc..4f6ef8e)
... ... LIBREBOOT](news/safety.md).**
31 31 Код підпису GPG Код підпису GPG
32 32 --------------- ---------------
33 33
34 **Останнім випуском є Libreboot 20240504, в директорії `testing`.**
34 **Останнім випуском є Libreboot 20240612, в директорії `stable`.**
35 35
36 36 ### НОВИЙ КЛЮЧ ### НОВИЙ КЛЮЧ
37 37
 
... ... will expire on 26 December 2028.
50 50 Повний відбиток ключа: `98CC DDF8 E560 47F4 75C0 44BD D0C6 2464 FA8B 4856` Повний відбиток ключа: `98CC DDF8 E560 47F4 75C0 44BD D0C6 2464 FA8B 4856`
51 51
52 52 This key is for Libreboot releases *after* the 20160907 release, and up This key is for Libreboot releases *after* the 20160907 release, and up
53 to the Libreboot 20240504 release. This key *expired* during December 2023,
53 to the Libreboot 20240612 release. This key *expired* during December 2023,
54 54 so you should use the *newer* key (see above) for the releases after so you should use the *newer* key (see above) for the releases after
55 55 Libreboot 20240126. Libreboot 20240126.
56 56
 
... ... Libreboot 20240126.
83 83 Дзеркала HTTPS {#https} Дзеркала HTTPS {#https}
84 84 ------------- -------------
85 85
86 **Останнім випуском є Libreboot 20240504, в директорії `testing`.**
86 **Останнім випуском є Libreboot 20240612, в директорії `stable`.**
87 87
88 88 Дані дзеркала є рекомендованими, оскільки використовують TLS (https://) шифрування. Дані дзеркала є рекомендованими, оскільки використовують TLS (https://) шифрування.
89 89
 
... ... crontab. Ця сторінка розповідає вам, як викорис
174 174 Дзеркала HTTP {#http} Дзеркала HTTP {#http}
175 175 ------------ ------------
176 176
177 **Останнім випуском є Libreboot 20240504, під директорією `testing`.**
177 **Останнім випуском є Libreboot 20240612, під директорією `stable`.**
178 178
179 179 УВАГА: ці дзеркала є не-HTTPS, що означає, що вони УВАГА: ці дзеркала є не-HTTPS, що означає, що вони
180 180 незашифровані. Ваш трафік може бути об'єктом втручання незашифровані. Ваш трафік може бути об'єктом втручання
 
... ... crontab. Ця сторінка розповідає вам, як викорис
188 188 Дзеркала FTP {#ftp} Дзеркала FTP {#ftp}
189 189 ----------- -----------
190 190
191 **Останнім випуском є Libreboot 20240504, під директорією `testing`.**
191 **Останнім випуском є Libreboot 20240612, під директорією `stable`.**
192 192
193 193 УВАГА: FTP є також незашифрованим, подібно HTTP. Ті ж самі ризики присутні. УВАГА: FTP є також незашифрованим, подібно HTTP. Ті ж самі ризики присутні.
194 194
File site/index.de.md changed (mode: 100644) (index cf3f0bd..d8c739c)
... ... for [Libreboot preinstallation](https://minifree.org/product/installation-servic
21 21 The founder and lead developer of Libreboot, Leah Rowe, also owns and operates The founder and lead developer of Libreboot, Leah Rowe, also owns and operates
22 22 Minifree; sales provide funding for Libreboot. Minifree; sales provide funding for Libreboot.
23 23
24 **NEUESTE VERSION: Die neueste Version von Libreboot ist 20240504, veröffentlicht
25 am 4. May 2024.
26 Siehe auch: [Libreboot 20240504 release announcement](news/libreboot20240504.md).**
24 **NEUESTE VERSION: Die neueste Version von Libreboot ist 20240612, veröffentlicht
25 am 12. June 2024.
26 Siehe auch: [Libreboot 20240612 release announcement](news/libreboot20240612.md).**
27 27
28 28 Warum solltest Du *Libreboot* verwenden? Warum solltest Du *Libreboot* verwenden?
29 29 ---------------------------- ----------------------------
File site/index.fr.md changed (mode: 100644) (index a6d1e3e..4166d10)
... ... for [Libreboot preinstallation](https://minifree.org/product/installation-servic
19 19 The founder and lead developer of Libreboot, Leah Rowe, also owns and operates The founder and lead developer of Libreboot, Leah Rowe, also owns and operates
20 20 Minifree; sales provide funding for Libreboot. Minifree; sales provide funding for Libreboot.
21 21
22 **NOUVELLE VERSION: La dernière version est [Libreboot 20240504](news/libreboot20240504.md), sortie
23 le 4 May 2024.**
22 **NOUVELLE VERSION: La dernière version est [Libreboot 20240612](news/libreboot20240612.md), sortie
23 le 12 June 2024.**
24 24
25 25 Pourquoi devriez-vous utiliser *Libreboot*? Pourquoi devriez-vous utiliser *Libreboot*?
26 26 ----------------------------------- -----------------------------------
File site/index.it.md changed (mode: 100644) (index 10b408b..eb36cb7)
... ... for [Libreboot preinstallation](https://minifree.org/product/installation-servic
20 20 The founder and lead developer of Libreboot, Leah Rowe, also owns and operates The founder and lead developer of Libreboot, Leah Rowe, also owns and operates
21 21 Minifree; sales provide funding for Libreboot. Minifree; sales provide funding for Libreboot.
22 22
23 **ULTIMO RILASCIO: L'ultimo rilascio e' Libreboot 20240504, rilasciato il 4 May 2024.
24 Vedi: [Libreboot 20240504 annuncio di rilascio](news/libreboot20240504.md).**
23 **ULTIMO RILASCIO: L'ultimo rilascio e' Libreboot 20240612, rilasciato il 12 June 2024.
24 Vedi: [Libreboot 20240612 annuncio di rilascio](news/libreboot20240612.md).**
25 25
26 26 Per quale ragione utilizzare *Libreboot*? Per quale ragione utilizzare *Libreboot*?
27 27 ----------------------------------------- -----------------------------------------
File site/index.md changed (mode: 100644) (index b8090f1..755d8fe)
... ... for [Libreboot preinstallation](https://minifree.org/product/installation-servic
23 23 The founder and lead developer of Libreboot, Leah Rowe, also owns and operates The founder and lead developer of Libreboot, Leah Rowe, also owns and operates
24 24 Minifree; sales provide funding for Libreboot. Minifree; sales provide funding for Libreboot.
25 25
26 **NEW RELEASE: The latest release is Libreboot 20240504, released on
27 4 May 2024.
28 See: [Libreboot 20240504 release announcement](news/libreboot20240504.md).**
26 **NEW RELEASE: The latest release is Libreboot 20240612, released on
27 6 June 2024.
28 See: [Libreboot 20240612 release announcement](news/libreboot20240612.md).**
29 29
30 30 *We* believe the freedom to [study, share, modify and use *We* believe the freedom to [study, share, modify and use
31 31 software](https://writefreesoftware.org/), without any software](https://writefreesoftware.org/), without any
File site/index.uk.md changed (mode: 100644) (index 7b2c0da..786bc8e)
... ... for [Libreboot preinstallation](https://minifree.org/product/installation-servic
21 21 The founder and lead developer of Libreboot, Leah Rowe, also owns and operates The founder and lead developer of Libreboot, Leah Rowe, also owns and operates
22 22 Minifree; sales provide funding for Libreboot. Minifree; sales provide funding for Libreboot.
23 23
24 **НОВИЙ ВИПУСК: Останній випуск Libreboot 20240504, випущено 25 травень 2024.
25 Дивіться: [Оголошення про випуск Libreboot 20240504](news/libreboot20240504.md).**
24 **НОВИЙ ВИПУСК: Останній випуск Libreboot 20240612, випущено 12 червень 2024.
25 Дивіться: [Оголошення про випуск Libreboot 20240612](news/libreboot20240612.md).**
26 26
27 27 Чому вам варто використовувати *Libreboot*? Чому вам варто використовувати *Libreboot*?
28 28 ---------------------------- ----------------------------
File site/index.zh-cn.md changed (mode: 100644) (index e1460b3..b44199c)
... ... x-toc-enable: true
12 12 Libreboot 的创始人和主要开发者，Leah Rowe，也是 Minifree 的所有者和经营者； Libreboot 的创始人和主要开发者，Leah Rowe，也是 Minifree 的所有者和经营者；
13 13 销售电脑为 Libreboot 提供资金。 销售电脑为 Libreboot 提供资金。
14 14
15 **新版发布: 最新版本 Libreboot 20240504 已在 2024 年 05 月 04 日发布。详见: [Libreboot 20240504 发布公告](news/libreboot20240504.md).**
15 **新版发布: 最新版本 Libreboot 20240612 已在 2024 年 06 月 12 日发布。详见: [Libreboot 20240612 发布公告](news/libreboot20240612.md).**
16 16
17 17 为什么要使用 *Libreboot*? 为什么要使用 *Libreboot*?
18 18 ---------------------------- ----------------------------
File site/news/MANIFEST changed (mode: 100644) (index 59f3df3..05e7d2a)
1 libreboot20240612.md
1 2 audit5.md audit5.md
2 3 libreboot20240504.md libreboot20240504.md
3 4 libreboot20240225.md libreboot20240225.md
File site/news/audit5.md changed (mode: 100644) (index 29effdf..dcb8b30)
2 2 % Leah Rowe % Leah Rowe
3 3 % 9 June 2024 % 9 June 2024
4 4
5 **A new release is now available, with these changes. Learn more by reading
6 about the [Libreboot 20240612 release](libreboot20240612.md).**
7
5 8 Introduction Introduction
6 9 ============ ============
7 10
File site/news/libreboot20240504.md changed (mode: 100644) (index bb1f92a..d2699fd)
2 2 % Leah Rowe % Leah Rowe
3 3 % 4 May 2024 % 4 May 2024
4 4
5 **Do not use the 20240504 release. This changelog is still provided as
6 reference, but there were problems with this release. Please instead use
7 the [Libreboot 20240612 release](libreboot20240612.md).**
8
5 9 Introduction Introduction
6 10 ============ ============
7 11
File site/news/libreboot20240612.md copied from file site/news/audit5.md (similarity 92%) (mode: 100644) (index 29effdf..752650d)
1 % Libreboot Build System Audit 5
1 % Libreboot 20240612 released!
2 2 % Leah Rowe % Leah Rowe
3 % 9 June 2024
3 % 12 June 2024
4 4
5 5 Introduction Introduction
6 6 ============ ============
7 7
8 Libreboot is a free/opensource boot firmware project. It replaces your
9 proprietary BIOS/UEFI firmware, on supported x86 and ARM computers. It does
10 this by providing an automated build system to download, patch and compile
11 the various upstream sources (e.g. coreboot, GRUB, SeaBIOS). Coreboot is used
12 for hardware initialisation, configuring everything from your CPU, memory
13 controller all way to peripherals, readying the hardware so that it can run
14 software, e.g. Linux/BSD operating systems. You can essentially think of *lbmk*,
15 which is Libreboot's build system, as a *source-based package manager*. It is
16 what the Libreboot releases are built with. The *lbmk* build system essentially
17 implements a *coreboot distro*, the same way you might think of a Linux
18 distribution.
19
20 Extensive auditing has been performed on lbmk, since the Libreboot 20240504
21 release. These audits fix bugs, reduce code bloat and generally improve the
22 efficiency of lbmk, adding and removing features in a careful, conservative
23 way, with a focus on *clean code*. Remember the magic words: code equals bugs.
24
25 This article covers changes from Libreboot 20240504, up to
26 revision `2ee186aee3aa3ab9619ed9549bd3b82909dcfbd0` from 9 June 2024.
27
28 You can read about the *previous* audit in the article
29 for [Libreboot Build System Audit 4](audit4.md).
8 Libreboot is a free/open source BIOS/UEFI replacement on x86 and ARM, providing
9 boot firmware that initialises the hardware in your computer, to then load an
10 operating system (e.g. Linux/BSD). It is specifically a *coreboot distribution*,
11 in the same way that Debian is a Linux distribution. It provides an automated
12 build system to produce coreboot ROM images with a variety of payloads such as
13 GNU GRUB or SeaBIOS, with regular well-tested releases to make coreboot as easy
14 to use as possible for non-technical users. From a project management perspective,
15 this works in *exactly* the same way as a Linux distro, providing the same type
16 of infrastructure, but for your boot firmware instead of your operating system.
17 It makes use of [coreboot](https://www.coreboot.org/) for hardware initialisation,
18 and then a payload such as [SeaBIOS](https://www.seabios.org/SeaBIOS)
19 or [GNU GRUB](https://www.gnu.org/software/grub/) to boot your operating
20 system; on ARM(chromebooks), we provide *U-Boot* (as a coreboot payload).
21
22 This is a *bugfix* release, and is considered stable. It fixes a series of bugs
23 that were discovered in the previous Libreboot 20240504 release from 4 May 2024.
24 The [errata](libreboot20240504.md#errata) on Libreboot 20240504 meant that all
25 ROM images had to be removed, so a new stable release had to be made ASAP to
26 compensate.
27
28 A new *testing* release is planned for July, adding many more new mainboards;
29 today's stable release only fixes bugs and adds some new features to the build
30 system, which have been rigorously tested during the course of the recent audit.
31
32 The changes of the recent [5th build system audit](audit5.md) are included, in
33 this release, in addition to a few minor fixes made since that date. The audit
34 was completed on 9 June 2024 and today is 12 June 2024. The release came unstuck.
35
36 Changes since Audit 5
37 =====================
38
39 Audit 5 was only recent, and forms most of the changes in this release, so look
40 further down for a list of those changes or read [the audit 5 page](audit5.md).
41
42 Some minor changes have been made in the few days since completion of that
43 audit, namely:
44
45 * Add a patch from Nico Huber fixing the Intel graphics device on certain
46 Xeon processors that can be used on Haswell macchines. Unlikely to be used
47 by Libreboot users, but for example it has been discovered that the Dell
48 Precision T1700 is mostly compatible with the 9020 MT images; some GPIOs and
49 such may not be configured correctly yet, and a proper T1700 port is not yet
50 available.
51 * Add a patch from Mate Kukri fixing DP++ on Dell OptiPlex 9020 ports; enables
52 use of a passive adapter for HDMI/DVI on the displayport.
53 * Coreboot trees: use coreboot's own nasm mirror as backup, instead of the
54 macports mirror that was used in audit5. In audit5, a feature was added where
55 crossgcc tarballs are downloaded by lbmk, with redundant links, rather than
56 relying on the coreboot build system to do this. (and this means that cross
57 gcc tarballs are now included in the release tarballs, enabling fully offline
58 builds on boards that don't need to download vendor files at build time)
59 * NVMe patch for GRUB payload: it is still present, but it is now *only* enabled
60 on boards that can physically *have* NVMe SSDs; on boards that don't need the
61 patch, it is not present. This means there are three GRUB trees: `default`
62 which most boards use and lacks nvme/xhci support, `nvme` which contains the
63 NVMe support and `xhci` which contains both xHCI and NVMe support. Each board
64 is configured to use the appropriate GRUB tree, as required.
65
66 The reason for separating the NVMe patch to only those boards that need it, is
67 precisely to avoid any potential issues if a board doesn't need it. The NVMe
68 patch has been extensively tested, on all of the boards that actually have it.
69
70 Audit 5 changes
71 ===============
72
73 Since the recent audit 5 changes are included in this release, the changelog
74 of that audit has simply been copied for sake of efficiency. Firstly:
30 75
31 76 Modest code size reduction Modest code size reduction
32 77 -------------------------- --------------------------
File site/news/safety.md changed (mode: 100644) (index d833997..0ba334d)
... ... Introduction
12 12 implemented, and this page is still relevant for Libreboot 20231021. It applies implemented, and this page is still relevant for Libreboot 20231021. It applies
13 13 to any system that requires vendor code to be inserted inside ROM images.** to any system that requires vendor code to be inserted inside ROM images.**
14 14
15 (it also applies to Libreboot 20231101, 20231106, 20240126, 20240225
16 and 20240504)
15 (it also applies to Libreboot 20231101, 20231106, 20240126, 20240225, 20240504
16 and 20240612)
17 17
18 18 **UPDATE (16 August 2023): This also applies to the recently added Dell **UPDATE (16 August 2023): This also applies to the recently added Dell
19 19 Precision T1650 mainboard.** Precision T1650 mainboard.**
Hints:
Before first commit, do not forget to setup your git environment:
git config --global user.name "your_name_here"
git config --global user.email "your@email_here"

Clone this repository using HTTP(S):
git clone https://rocketgit.com/user/libreboot/lbwww

Clone this repository using ssh (do not forget to upload a key first):
git clone ssh://rocketgit@ssh.rocketgit.com/user/libreboot/lbwww

Clone this repository using git:
git clone git://git.rocketgit.com/user/libreboot/lbwww

You are allowed to anonymously push to this repository.
This means that your pushed commits will automatically be transformed into a merge request:
... clone the repository ...
... make some changes and some commits ...
git push origin main