Trammell Hudson

Results 159 issues of Trammell Hudson

This WIP patch addresses #935 : fixes a dependency for the coreboot utilities, removes an unused i386 musl-cross build, and adds a cache of the musl-cross `configure` files to save...

enhancement
buildsystem

This is very preliminary support for the `tpm2-tools` linked against musl and running in the initrd. This brings in some heavy weight dependencies, like openssl, so it requires a large...

enhancement
initrd

Right now we're maintaining a fairly large Linux kernel patch that implements the Boot Device Selection (BDS) part of the DXE code: https://github.com/osresearch/heads/blob/master/patches/linux-4.9.80/0000-efi_bds.patch This does several things: * Changes the...

enhancement

An [attempt to port LinuxBoot to the Dell E7420](https://github.com/hardenedlinux/Debian-GNU-Linux-Profiles/blob/master/docs/hardened_boot/linuxboot-attempt.md) mentions that there are no guidelines for which DXE modules are necessary to retain, which can be discarded etc. We should...

documentation

The Leopard mainboard comes in several variants with different UEFI layouts and memory controller configurations. We could support them as separate mainboards (named `leopard-ddr3` and `leopard-ddr4` or something similar) or...

enhancement
buildsystem

The Leopard AMI firmware has per-file compressed sections, which are not supported by the edk2 `DxeCore`. The symptom is that the `linuxboot.rom` file is created, but `DxeCore` doesn't load any...

bug
buildsystem

The TPM is not detected by the LinuxBoot kernel. It appears that the "`Tpm20Acpi`" DXE is not being run; we've removed most of the TCG things, so a dependency analysis...

enhancement

![LinuxBoot on Leopard](https://farm1.staticflickr.com/790/40252572164_8abeee94f9_z_d.jpg) [LinuxBoot works on Leopard](https://github.com/osresearch/linuxboot/commit/0c3abfac222a862c8148f2ed1e6dd8b7709d1871), but there are some issues with very slow boot times. Some of the required DXE/SMM modules are very slow to startup: * PchBiosWriteProtect.efi...

enhancement

Releases aren't ready until chipsec stops complaining.

enhancement
security

The Linux kernel patch for `CONFIG_EFI_BDS` deliberately doesn't lock SMM so that it is possible for the boot kernel to install custom SMM modules. However, there needs to be a...

security