It turned out there was a bug in gnu-efi, in the linker script. I’ve added a local fix for this to the OBS UEFI project and filed a bug with gnu-efi on sourceforge. The net result is that the arm 32 bit binaries are now passing most of their tests (the remaining problems may be […]
Thanks to using architecture emulation containers, I can now build and test efitools for arm (both 64 bit: aarch64 and 32 bit armv7l) on my x86_64 laptop. To test the actual EFI binaries, you need the arm equivalent of OVMF which is ArmVirt. I’ve got the build service spitting out the images (still called OVMF […]
Some people noticed a while ago that version 1.5.1 was building for ia32, but 1.5.2 is the release that’s tested and works (1.5.1 had problems with the hash computations). The primary reason for this work is bringing up secure boot on the Intel Quark SoC board (I’ve got the Galileo Kipps Bay D but the […]
This is a short post to announce the release of efitools version 1.4. The packages are available here: http://download.opensuse.org/repositories/home:/jejb1:/UEFI/ Just select your distribution (various versions of Debian, Ubuntu, Fedora and openSUSE). The main additions over version 1.3 is that there are two new utilities: efi-readvar and efi-updatevar that allow you to read and manipulate the […]
I got a lot of complaints about the lack of Debian or Ubuntu packages. Apparently alien doesn’t work all that well, and some of the packages (like libc) are too new anyway on openSUSE. So I finally figured out how to get OBS to build debian packages. You can find them here: http://download.opensuse.org/repositories/home:/jejb1:/UEFI/ I should […]
Usually container related stuff goes on $EMPLOYER blog, but this time, I had a container need for my hobbies. the problem: how to build and test efitools for arm and aarch64 while not possessing any physical hardware. The solution is to build an architecture emulation container using qemu and mount namespaces such that when its […]
The first thing to do is set up a build environment. The Board support package that Intel supplies comes with a vast set of instructions and a three stage build process that uses the standard edk2 build to create firmware volumes, rips them apart again then re-lays them out using spi-flashtools to include the Arduino […]
At one of the Intel Technology Days conferences a while ago, Intel gave us a gift of a Galileo board, which is based on the Quark SoC, just before the general announcement. The promise of the Quark SoC was that it would be a fully open (down to the firmware) embedded system based on UEFI. […]
UEFI 2.4 has been out for a while (18 months to be exact). However, it’s taken me a while to redo the tianocore builds for the 2.4 base. This is now done, so the OVMF packages are now building 2.4 roms https://build.opensuse.org/package/show/home:jejb1:UEFI/OVMF Please remember that this is bleeding edge. I found a few bugs while […]
For technical reasons, all of my tools broke with all versions of TianoCore after r14141 (Update the DxeImageVerificationLib to support for Authenticode-signed UEFI images with multiple signatures.) What actually happened is that the multi signature verification code got stricter on the alignment requirements for signatures. The current sbsigntools (and even pesign) simply slapped the signature […]