I pushed this patch to Libreboot:

lbmk.git - libreboot build system (LibreBoot MaKe)

It implements a decision: The next Libreboot release will only provide ROM images with *libre* raminit, on Haswell (ThinkPad T440p/W541, Optiplex 9020). This is in line with Libreboot's Binary Blob Reduction Policy:

Libreboot – Binary Blob Reduction Policy

MRC is a raminit blob. Libreboot has a free/opensource replacement written by Angel Pons. A recent update fixes S3 resume and is stable in my tests. Next release ETA May 2024.

Leah Rowe ( #39c3 ☎️FORK☎️ ) 2 years ago

I'm currently shipping, on Minifree machines, a Libreboot revision (56f16bc88357054ac19318e5e4f293a4d9776752) from *today*, containing recent improvements such as GRUB argon2 support(*1) or optimised GRUB modules(*2). The machines boot faster, on this revision. *1:

Libreboot – Encrypted /boot/ on LUKSv2 now possible in Libreboot GRUB (PHC argon2 imported)

*2:

lbmk.git - libreboot build system (LibreBoot MaKe)

Libreboot machines sold here:

Minifree Ltd – Libreboot T480 with 4-core i5-8250u, Intel UHD 630 graphics, 32GB/64GB DDR4 RAM, Intel AX210 WiFi, 1TB/2TB NVMe SSD and Debian Linux

I lead the Libreboot project, and often give customers newer revisions between releases. ETA mid-September for new release.

Leah Rowe ( #39c3 ☎️FORK☎️ ) 2 years ago

I pushed a patch to Libreboot:

lbmk.git - libreboot build system (LibreBoot MaKe)

It optimises selection of GRUB modules, shrinking the GRUB payload in flash; useless modules that we had for no good reason. Everything seems to work. It saves about 50-55KB compressed (564KB vs 619KB when tested). It doesn't seem like a lot, but in flash it's a big deal. I can probably optimise more. Uncompressed, about 700KB saved (1.8MB vs 2.5MB - could be smaller, but I include all the crypto modules, and lots of file system modules).

Leah Rowe ( #39c3 ☎️FORK☎️ ) 2 years ago

Libreboot laptops on

Minifree Ltd – Libreboot T480 with 4-core i5-8250u, Intel UHD 630 graphics, 32GB/64GB DDR4 RAM, Intel AX210 WiFi, 1TB/2TB NVMe SSD and Debian Linux

now come with 1TB SSD or 2TB SSD; the 480GB SSD option is gone, and now 1TB is the default. 2TB is the upgrade option. I sell laptops with Libreboot pre-installed, and your choice of Linux distro or a BSD (e.g. OpenBSD, FreeBSD). Libreboot replaces proprietary BIOS/UEFI firmware, offering faster boot speeds and greater security than proprietary firmware. I'm the founder of Libreboot, and its lead developer. These sales fund my work, and my research.

Leah Rowe ( #39c3 ☎️FORK☎️ ) 2 years ago

This customer is getting FreeBSD. Libreboot T440p laptop, with stable release FreeBSD 13.2 and Xfce. Everything configured. Yeah and the first thing I do is install Vim when configuring a system, FreeBSD included! My company:

Minifree Ltd – Libreboot T480 with 4-core i5-8250u, Intel UHD 630 graphics, 32GB/64GB DDR4 RAM, Intel AX210 WiFi, 1TB/2TB NVMe SSD and Debian Linux

I sell laptops with Libreboot pre-installed, which replaces proprietary BIOS/UEFI firmware. Libreboot offers greater security and faster boot speeds, plus many more features. I'm the lead developer and founder of Libreboot; sales fund the project.

Leah Rowe ( #39c3 ☎️FORK☎️ ) 2 years ago

2400 sloc now. Was 3300 pre-audit. Libreboot Build System Audit 2 continues. Patch:

lbmk.git - libreboot build system (LibreBoot MaKe)

Dependencies scripts are unified into the *main* build script. Files for each supported distro simply list packages, and specify what package manage command to use. I'm aiming for <2k sloccount on resources/scripts/ in lbmk. It can and will be done. The design of Libreboot's build system is highly efficient, but there's a lot of old cruft in there that I'm purging.

Leah Rowe ( #39c3 ☎️FORK☎️ ) 2 years ago

Extremely fun fact: LUKS2 decrypt now works in Libreboot, with these patches:

lbmk.git - libreboot build system (LibreBoot MaKe)

GRUB already had LUKS2, but did not support argon2i/id, the most common key derivation on LUKSv2 setups. It still only supported PBKDF2 so you had to do: LUKSv2 with PBKDF2, or use LUKSv1. These patches imports the PHC argon2i/id implementation, into GRUB:

GitHub

GitHub - P-H-C/phc-winner-argon2: The password hash Argon2, winner of PHC

The password hash Argon2, winner of PHC . Contribute to P-H-C/phc-winner-argon2 development by creating an account on GitHub.

Booting encrypted /boot/ in Libreboot GRUB is again possible!

Leah Rowe ( #39c3 ☎️FORK☎️ ) 2 years ago

One of my aunts is visiting and she's what you would call the "cool aunt". I was telling her about Libreboot and she instinctively understood it, what it's about, things about it from the past year or so, how it started, the *ideology* behind it and that of the wider free software movement. She is now a free software supporter. She said learning about it is like waking up from the matrix, comparing Libreboot to neo's little red pill. (which means she also likes The Matrix) Coolest aunt ever.

Leah Rowe ( #39c3 ☎️FORK☎️ ) 2 years ago

Random fun fact: Chile was building an analog of our modern internet way back in the 1970s. A massive, national communications network for business and government to coordinate efficiently. The engineer (Stafford Beer) who designed it was from Surrey, in the UK, and worked for the Allende goverment that was building this system. After the 1973 coup, General Pinochet had the system destroyed.

Project Cybersyn - Wikipedia

Had it caught on, we might have had global internet in our homes in the 1970s.