Date: Sat, 22 Jun 2019 14:34:49 -0500 From: Karl Denninger <karl@denninger.net> To: freebsd-current@freebsd.org Subject: Re: UEFI firmware and getting FreeBSD recognized by default: who to talk to? Message-ID: <87dee58e-66dc-ddf8-980b-a538875ae8b9@denninger.net> In-Reply-To: <cc6c9260-451b-ae5b-0612-51b1a5525116@bluestop.org> References: <1e08badd-a963-7e4b-98a7-52a9d3bd77a8@bluestop.org> <db7c8df3-ead3-9d56-bd9c-9ff732b401e9@denninger.net> <cc6c9260-451b-ae5b-0612-51b1a5525116@bluestop.org>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
On 6/22/2019 14:05, Rebecca Cran wrote:
> On 2019-06-22 12:59, Karl Denninger wrote:
>> I use Refind for this sort of thing and it has (thus far!) survived
>> upgrades. The only "gotcha" is that I had a Windows 10 "Feature"
>> upgrade that reset the default boot in the firmware to Windows; it
>> didn't damage anything but did require that I go reset the UEFI default
>> to boot the Refind EFI loader instead of the Windows one.
>
> I do like that rEFInd knows about FreeBSD, and it's one of the "UEFI OS"
> entries that remains. But I'd prefer it if a "FreeBSD" entry was
> automatically created!
It is.
All I had to do was put the EFI loader in a directory under the UEFI
partition and Refind found it. I didn't have to specifically tell it
that it was there.
The explicit "set" command (which I issued under Windows) is to tell the
firmware what the default is; you do it once on original installation of
Refind. The Windows 10 feature update set it back to default to
Windows, which was quite annoying but not really a big deal. One
command, once, from the Windows command line (same as the one to set it
in the first place) was all that was required.
The danger with tampering with where Windows 10 puts its EFI loader
(e.g. copying Refind there after moving it somewhere else) is that
Bitlocker may throw up on you if you do that. In fact you do have to do
things in the right order or Bitlocker's default configuration (at least
on a TPM equipped machine) will have a hissy fit -- you cannot change
anything in the EFI partition after initializing Bitlocker, including
the Refind configuration file (this most-specifically applies to the
"wait for boot time"; I find the default obnoxiously long) so you have
to make that edit and put the other stuff in the UEFI partition (e.g.
FreeBSD's EFI loader and Refind) BEFORE turning Bitlocker on.
I've been running this way since 12.x showed up since 12.x can boot a
geli-encrypted system directly on my laptop. Works nicely.
--
Karl Denninger
karl@denninger.net <mailto:karl@denninger.net>
/The Market Ticker/
/[S/MIME encrypted email preferred]/
[-- Attachment #2 --]
0 *H
010
`He 0 *H
00 H^Ōc!5
H0
*H
01 0 UUS10U Florida10U Niceville10U
Cuda Systems LLC10U Cuda Systems CA1!0 U Cuda Systems LLC 2017 CA0
170817164217Z
270815164217Z0{1 0 UUS10U Florida10U
Cuda Systems LLC10U Cuda Systems CA1%0#U Cuda Systems LLC 2017 Int CA0"0
*H
0
h-5B>[;olӴ0~͎O9}9Ye*$ g !ukvʶLzN`jL>MD'7U 45CB+kY`bd~b*c3Ny-78ju]9H euέsӬDؽmgwER?&UURj'}9nWD i`XcbGz \gG=u%\Oi13ߝ4
K44pYQr]Ie/r0+eEޝݖ0C15Mݚ@JSZ(zȏ NTa(25DD5.l<g[[Z arQQ%Buȴ~~`IohRbʳڟu2MS8EdFUClCMaѳ !}ș+2k/bųE,n当ꖛ\(8 WV8 d]b yXw ܊:I39
00 U ]^§Q\ӎ0U #0T039N0b01 0 UUS10U Florida10U Niceville10U
Cuda Systems LLC10U Cuda Systems CA1!0 U Cuda Systems LLC 2017 CA @Ui0U 0 0U 0
*H
:P U!>vJ n io -#ן]Wyu jǑR̀Q
nƇ!G ѦF g\ yLx gw=OPycehf[ }ܷ['4ڝ\[p 6\o.B&JF" ZC{;*o*mcCcLY߾`
t*S!(` ]DHP5A~/NPp6=mhk밣'doA$86hm5ӚS@ j ެEgl
)0JG`%k35PaC?σ
׳HEt}!P㏏%*BxbQwaKG$6 h¦Mve; [o-Iی&
I,Tc ߎ#t wPA@l0P+KXBպT zGv;NcI3&J ĬUPNa?/%W6G۟N000 k#Xd\ =0
*H
0{1 0 UUS10U Florida10U
Cuda Systems LLC10U Cuda Systems CA1%0#U Cuda Systems LLC 2017 Int CA0
170817212120Z
220816212120Z0W1 0 UUS10U Florida10U
Cuda Systems LLC10U karl@denninger.net0"0
*H
0
T[I-ΆϏ dn;Å@שy.us~_ZG%<MYd\gvfnsa1'6Egyjs"C [{~ _K Pn+<*pv#Q+H/7[-vqDV^U>f%GX)H.|l`M(Cr >е͇6#odc"YljҦln8@5SA0&ۖ"OGj?UDWZ5 dDB 7k-)9Izs-JAv
J 6L$Ն1SmY.Lqw*SH;EF'DĦH]MOgQQ|Mٙג2Z9y@ y]}6ٽeY9Y2xˆ$T=e CǺǵbn֛{j |@LLt1[Dk5:$= ` M 00<+00.0,+0 http://ocsp.cudasystems.net:88880 U 0 0 `HB0U 0 U %0++03 `HB
&$OpenSSL Generated Client Certificate0 U %՞V =;bzQ0U #0]^§Q\ӎϡ01 0 UUS10U Florida10U Niceville10U
Cuda Systems LLC10U Cuda Systems CA1!0 U Cuda Systems LLC 2017 CA H^Ōc!5
H0 U 0karl@denninger.net0
*H
۠A0-j%--$% g2#ޡ1^>{K+uGE v1ş7Af&b&O; .;A5* U)ND2bF|\= ]<sˋL!wrw٧> YMÄ3\mWR hSv!_zvl? 3_ xU%\^#O*Gk̍YI_&Fꊛ@&1n } ͬ:{hTP3B.;bU8:Z=^Gw8 !k-@xE@i,+'Iᐚ:f hztX7/(hY` O.1}a`%RW^akǂpCAufgDix UTЩ/7}%=jnVZvcF<M=
2^GKH5魉
_O4ެByʈySkw=5@h.0z>
W1000{1 0 UUS10U Florida10U
Cuda Systems LLC10U Cuda Systems CA1%0#U Cuda Systems LLC 2017 Int CA k#Xd\ =0
`He E0 *H
1 *H
0 *H
1
190622193450Z0O *H
1B@h/G|]՟ T8hahx.}E5Qn?¸ouxZ>Ov0l *H
1_0]0 `He*0 `He0
*H
0*H
0
*H
@0+0
*H
(0 +7100{1 0 UUS10U Florida10U
Cuda Systems LLC10U Cuda Systems CA1%0#U Cuda Systems LLC 2017 Int CA k#Xd\ =0 *H
10{1 0 UUS10U Florida10U
Cuda Systems LLC10U Cuda Systems CA1%0#U Cuda Systems LLC 2017 Int CA k#Xd\ =0
*H
/&-B% YU$}3z(}v¶}
] F-
%PȀ];샦n K6`ѺI"8E_K^l'ǿCJoC'ʐ3hкj C2׆օG$ To{lYԮ'Yo9D<L-yb</Cmz,Y>U\iGEvlҞ+B) zh&*U
V3HQP5ѿ:`vG?6/<ٌ cYT
k%<ߣ[ౝ6~T;jڮ+Av4Wm
ӝ! l% 36u2S?ךBo_d {.m?ÃVw'c.'ɜTG \EE76磽`eoXd3m mM įCRw$lC3zX_r
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?87dee58e-66dc-ddf8-980b-a538875ae8b9>