add ownerboot to the other.md page

Signed-off-by: Leah Rowe <leah@libreboot.org>
master
Leah Rowe 2025-01-11 23:22:04 +00:00
parent fcc3df60e2
commit a3dd7d120a
1 changed files with 28 additions and 0 deletions

View File

@ -178,6 +178,34 @@ With MrChromebox's guidance, you can have a completely up to date UEFI firmware
on your machine, and get good use out of your Chromebook for many more years,
with regular security updates.
Ownerboot
---------
Git repository: <https://codeberg.org/amjoseph/ownerboot>
Ownerboot is an interesting one; it uses the Nix package manager to compile
coreboot images, with a Linux-based payload on supported x86 and ARM64
devices. Similar conceptually to Heads, but with a *much* cleaner build system
design.
It comes with the LVM2 and cryptsetup sources included in builds by default, so
it can easily be used to create a fully encrypted system, much like Canoeboot's
own [hardened GRUB](docs/gnulinux/grub_hardening.md) setup.
Since it uses Nix, reproducible builds are quite feasible and this is one of
the project's primary goals. Interestingly enough, it also supports both the
gru kevin chromebook and the ASUS KGPE-D16 boards, which Canoeboot supports but
Canoeboot uses U-Boot and a combination of SeaBIOS/GRUB, respectively, on these
boards.
Ownerboot's build system can also cross compile everything, so it's quite
portable across various host CPUs. It also extends coreboot's normal/fallback
payload scheme. See: <https://codeberg.org/amjoseph/ownerboot/src/branch/master/doc/fallback.md>
All of this combined makes for a highly configurable boot setup, and the Linux
payload in flash (using kexec to boot another kernel) is highly flexible,
offering many opportunities for security hardening (like Heads).
Skulls
------