File site/news/libreboot2506.md changed (mode: 100644) (index 962dac5..f99252c) |
... |
... |
or GRUB to boot your operating |
43 |
43 |
system; on ARM(chromebooks) and certain x86 mainboards, we provide *U-Boot* (as |
system; on ARM(chromebooks) and certain x86 mainboards, we provide *U-Boot* (as |
44 |
44 |
a coreboot payload), which provides a lightweight UEFI implementation.. |
a coreboot payload), which provides a lightweight UEFI implementation.. |
45 |
45 |
|
|
46 |
|
Summarised list of changes |
|
|
46 |
|
Sumarised list of changes |
|
47 |
|
------------------------- |
|
48 |
|
|
|
49 |
|
This section provides a brief overview, summarising all of the changes. The |
|
50 |
|
next sections (after this) show *all* changes in detail. |
|
51 |
|
|
|
52 |
|
The most important changes are, thus: |
|
53 |
|
|
|
54 |
|
New mainboards: |
|
55 |
|
|
|
56 |
|
* Acer Q45T-AM support added (similar to G43T-AM3 mainboard) |
|
57 |
|
* Dell Precision T1700 SFF and MT |
|
58 |
|
|
|
59 |
|
Revision updates: |
|
60 |
|
|
|
61 |
|
* GRUB, SeaBIOS, Untitled, flashprog, U-Boot, uefitool have all been updated |
|
62 |
|
to newer revisions, from ~April 2025. |
|
63 |
|
|
|
64 |
|
Security: |
|
65 |
|
|
|
66 |
|
* GRUB has has *a lot* of security fixes applied to it from upstream, including |
|
67 |
|
a very large series of *73* major security fixes, and a few minor tweaks |
|
68 |
|
after the fact. |
|
69 |
|
* Globbing issues fixed in the Libreboot build system, lbmk. Better error |
|
70 |
|
handling in general. |
|
71 |
|
* ThinkPad T480/3050micro: Disable hyperthreading by default |
|
72 |
|
|
|
73 |
|
Feature changes: |
|
74 |
|
|
|
75 |
|
* Better, more reliable caching of Git repositories and files during download. |
|
76 |
|
Re-builds of sources make better use of local caching, instead of downloading |
|
77 |
|
from scratch every time (e.g. coreboot and GRUB sources). |
|
78 |
|
* Handling of vendor files is more reliable, caching everything more aggressively |
|
79 |
|
and even verifying checksums of *extracted* files, from inside update archives. |
|
80 |
|
* Non-root USB hub support added to GRUB, for xHCI devices |
|
81 |
|
* GRUB: better LVM scanning, for auto-boot especially with encrypted `/boot/`; |
|
82 |
|
Linux distros are easier to handle, in general. |
|
83 |
|
* Safer handling of vendor files; release images padded to prevent flashing, |
|
84 |
|
where such files are needed, until they have been inserted. |
|
85 |
|
* Better MAC address handling, on IFD-based systems. Insertion of MAC addresses |
|
86 |
|
is done by default, randomised by default, unless overridden by the user. |
|
87 |
|
|
|
88 |
|
Config changes: |
|
89 |
|
|
|
90 |
|
* Removed unnecessary sources by default, to make source archives smaller. Only |
|
91 |
|
the sources needed to build the binaries are included, in many cases. |
|
92 |
|
* Updated various dependencies configs, for installing build dependencies in |
|
93 |
|
various Linux distros (for the `./build dependencies` command which installs |
|
94 |
|
them in your distro). |
|
95 |
|
|
|
96 |
|
Bug fixes: |
|
97 |
|
|
|
98 |
|
* Better checksum verification for project files, when deciding whether to |
|
99 |
|
re-build a given upstream source. |
|
100 |
|
* General build system fixes, making the build process more reliable, with |
|
101 |
|
much stricter error handling (and some false error conditions have also been |
|
102 |
|
removed). |
|
103 |
|
* GRUB payload: Mark E820 reserved for cbmem, which means that you no longer |
|
104 |
|
need `iomem=relaxed` (kernel option) at boot time, to access the cbmem console. |
|
105 |
|
* Use `x` instead of `?` in nvmutil, as a character for randomness in MAC |
|
106 |
|
addresses, to work around a design quirk in ZSH. |
|
107 |
|
* Where files are operated on post-build, e.g. coreboot images, more strictly |
|
108 |
|
operate on them first, erroring out more reliably when a fault occurs; prevent |
|
109 |
|
bad files from being copied to final build destinations. This reduces the |
|
110 |
|
chance of bad/corrupt build artifacts being present in release builds. |
|
111 |
|
* HP EliteBook 820 G2 images now included in releases, because handling of |
|
112 |
|
the refcode files was corrected so that checksum verification passes during |
|
113 |
|
insertion. |
|
114 |
|
|
|
115 |
|
This, and more, has all been done. There was also a general focus on heavily |
|
116 |
|
auditing the build system, lbmk, so as to clean up the code. The amount of |
|
117 |
|
overall code in lbmk was *reduced*, without removing functionality. |
|
118 |
|
|
|
119 |
|
These next sections will repeat many of the above items, but in more detail. |
|
120 |
|
|
|
121 |
|
Detailed list of changes |
47 |
122 |
------------------------- |
------------------------- |
48 |
123 |
|
|
49 |
124 |
### Board support |
### Board support |