mas.to is one of the many independent Mastodon servers you can use to participate in the fediverse.
Hello! mas.to is a fast, up-to-date and fun Mastodon server.

Administered by:

Server stats:

13K
active users

Leah Rowe is not a Rowebot

Arch Linux on a Librebooted Dell Latitude E6230 -- installed using the recently added U-Boot payload.

U-Boot provides a 64-bit UEFI environment on x86 in Libreboot. All of the photos below are of UEFI booting, in Libreboot!

U-Boot on x86 is still quite imperfect on real hardware, but can work well. A lot more testing needed; the way I do it is I load U-Boot from flash, via SeaBIOS ESC menu.

Simon Glass has been helping me. This will be available on most machines in the next Libreboot release.

Yes, Libreboot has UEFI now!

Still probably won't boot Windows.

My motivation here is U-Boot also has a slew of other boot methods, and will make dealing with Linux distros a lot easier for most people; it will also be of great help to BSD users, who currently rely on SeaBIOS in Libreboot.

I will provide a "SeaU-Boot" setup in the upcoming release, where SeaBIOS has a bootorder file loading U-Boot first, while still allowing other options via ESC menu. Same concept as SeaGRUB but with U-Boot.

@libreleah there is definite potential in the naming 🙂
How about:
„Depth charge“ for maybe battery management
„DaveyJones“ for security
„Wolfpack“ file compression something?

Ah, I like this 👍 😎

@libreleah

Does that mean that I soon may be able to create my own CA, self-sign the grub executable and/or the Linux kernel and then have a fully functional UEFI secure boot mode with Libreboot?

@mstrohm I'm uncertain as to whether U-Boot supports UEFI's "SecureBoot" feature; I haven't tested it yet, but I will.

Libreboot has (since very early days) supported a feature that I call "Secure libreBoot", whereby GRUB is the primary payload (after coreboot init) or SeaBIOS doesn't load oproms and loads GRUB straight away, with the SeaBIOS menu disabled.

GRUB then requries a password, optional GPG check on your kernel, and full disk encryption including /boot.

See:

libreboot.org/docs/linux/grub_

Libreboot – Hardened GNU boot loader (GRUB payload)Libreboot – Hardened GNU boot loader (GRUB payload)Libreboot – Hardened GNU boot loader (GRUB payload)

@mstrohm SecU-re-Boot though. That has a nice ring to it!

@libreleah this is super cool! i have a latitude variant, so i really want to try this out now. how fast does this boot and is this production ready?

@Logical_Error expect bugs. that's why i chainload it from seabios in case of brick. worst case, seabios still works and you can still access grub from seabios too.

@libreleah U-Boot has a native coreboot payload, but in my tests i can't boot from internal storage, will be possible in future to just use U-Boot?