add ownerboot to the other.md page
Signed-off-by: Leah Rowe <leah@libreboot.org>master
parent
fcc3df60e2
commit
a3dd7d120a
|
@ -178,6 +178,34 @@ With MrChromebox's guidance, you can have a completely up to date UEFI firmware
|
|||
on your machine, and get good use out of your Chromebook for many more years,
|
||||
with regular security updates.
|
||||
|
||||
Ownerboot
|
||||
---------
|
||||
|
||||
Git repository: <https://codeberg.org/amjoseph/ownerboot>
|
||||
|
||||
Ownerboot is an interesting one; it uses the Nix package manager to compile
|
||||
coreboot images, with a Linux-based payload on supported x86 and ARM64
|
||||
devices. Similar conceptually to Heads, but with a *much* cleaner build system
|
||||
design.
|
||||
|
||||
It comes with the LVM2 and cryptsetup sources included in builds by default, so
|
||||
it can easily be used to create a fully encrypted system, much like Canoeboot's
|
||||
own [hardened GRUB](docs/gnulinux/grub_hardening.md) setup.
|
||||
|
||||
Since it uses Nix, reproducible builds are quite feasible and this is one of
|
||||
the project's primary goals. Interestingly enough, it also supports both the
|
||||
gru kevin chromebook and the ASUS KGPE-D16 boards, which Canoeboot supports but
|
||||
Canoeboot uses U-Boot and a combination of SeaBIOS/GRUB, respectively, on these
|
||||
boards.
|
||||
|
||||
Ownerboot's build system can also cross compile everything, so it's quite
|
||||
portable across various host CPUs. It also extends coreboot's normal/fallback
|
||||
payload scheme. See: <https://codeberg.org/amjoseph/ownerboot/src/branch/master/doc/fallback.md>
|
||||
|
||||
All of this combined makes for a highly configurable boot setup, and the Linux
|
||||
payload in flash (using kexec to boot another kernel) is highly flexible,
|
||||
offering many opportunities for security hardening (like Heads).
|
||||
|
||||
Skulls
|
||||
------
|
||||
|
||||
|
|
Loading…
Reference in New Issue