Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 29 Mar 2020 20:11:16 -0700
From:      Nathan Whitehorn <nwhitehorn@freebsd.org>
To:        "Simon J. Gerraty" <sjg@juniper.net>
Cc:        Kyle Evans <kevans@freebsd.org>, Rebecca Cran <rebecca@bsdio.com>, Tomoaki AOKI <junchoon@dec.sakura.ne.jp>, FreeBSD Current <freebsd-current@freebsd.org>, bsd-lists@bsdforge.com
Subject:   Re: When will the FreeBSD (u)EFI work?
Message-ID:  <18df34fe-6256-6e68-ead5-481e83a501fe@freebsd.org>
In-Reply-To: <16728.1585537356@kaos.jnpr.net>
References:  <318FDBAF-448F-4C55-A9A8-69D71A73E43B@me.com> <344e85545cfc47c9835fc5918e5b1dc1@udns.ultimatedns.net> <20200329211137.012a8fd62b58525b027bcfb6@dec.sakura.ne.jp> <40bacb99-d463-cbad-3ccf-b3ddd6856d10@bsdio.com> <CACNAnaF-5ZD-9Cu%2BBrNtWE-LCZsbhzoW=CwcLVZ-JGMM1QdVkQ@mail.gmail.com> <675a41c7-46c1-f548-b285-e5ede55db76a@freebsd.org> <16728.1585537356@kaos.jnpr.net>

next in thread | previous in thread | raw e-mail | index | archive | help


On 2020-03-29 20:02, Simon J. Gerraty wrote:
> Nathan Whitehorn <nwhitehorn@freebsd.org> wrote:
>> It's basically this that has been the problem: we need a way to manage
>> updates of the EFI loader in this situation, which we don't currently
>> have. The ESP needs to be mounted at a standard point,
>> installworld/freebsd-update/etc. need to know to replace files there, we
>> need to fall back cleanly on older systems, etc. The original (failed --
> Actually if you are doing secure boot, the *last* thing you want is to
> update /efi/boot with an unsigned update.
>
> So I would think it should be done as a unique operation - do you don't
> do it accidentally.
>
> At least that's how I'm handling it for embedded devices.
> _______________________________________________
> freebsd-current@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"
>

The problem then is that we have treated loader as a
continuously-updatable part of the OS, like the kernel, and the update
system and development process assumes they get updated in sync.
-Nathan



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?18df34fe-6256-6e68-ead5-481e83a501fe>