Re: When will the FreeBSD (u)EFI work?

From: Nathan Whitehorn <nwhitehorn_at_freebsd.org>
Date: Sun, 29 Mar 2020 20:11:16 -0700
On 2020-03-29 20:02, Simon J. Gerraty wrote:
> Nathan Whitehorn <nwhitehorn_at_freebsd.org> wrote:
>> It's basically this that has been the problem: we need a way to manage
>> updates of the EFI loader in this situation, which we don't currently
>> have. The ESP needs to be mounted at a standard point,
>> installworld/freebsd-update/etc. need to know to replace files there, we
>> need to fall back cleanly on older systems, etc. The original (failed --
> Actually if you are doing secure boot, the *last* thing you want is to
> update /efi/boot with an unsigned update.
>
> So I would think it should be done as a unique operation - do you don't
> do it accidentally.
>
> At least that's how I'm handling it for embedded devices.
> _______________________________________________
> freebsd-current_at_freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe_at_freebsd.org"
>

The problem then is that we have treated loader as a
continuously-updatable part of the OS, like the kernel, and the update
system and development process assumes they get updated in sync.
-Nathan
Received on Mon Mar 30 2020 - 01:11:27 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:41:23 UTC