Yekutanga yemazuva ano sevha platform yakavakirwa paCoreBoot yakaunzwa

Vagadziri kubva ku9elements ported CoreBoot yeSupermicro server mamaboard X11SSH-TF. Zvatochinja zvaisanganisira muCoreBoot codebase huru uye ichave chikamu chekuburitswa kukuru kunotevera. Iyo Supermicro X11SSH-TF ndiyo yekutanga yemazuva ano server bhodhi ine Intel Xeon processor inogona kushandiswa neCoreBoot. Bhodhi inotsigira Xeon processors (E3-1200V6 Kabylake-S kana E3-1200V5 Skylake-S) uye inogona kugadzirirwa kusvika ku64 GB ye RAM (4 x UDIMM DDR4 2400MHz).

Basa rakapera pamwe chete neVPN mupi Mullvad sechikamu chepurojekiti System Transparency, yakanangana nekusimbisa kuchengetedzwa kweiyo server zvivakwa uye kubvisa zvevaridzi zvikamu izvo zvisingakwanisi kudzorwa. CoreBoot ndeyemahara analogue yeproprietary firmware uye inowanikwa kuti izere kuongororwa uye kuongororwa. CoreBoot inoshandiswa seyakadzika firmware yekutanga kwehardware uye kurongeka kwebhoti. Kusanganisira kutanga kweiyo giraidhi chip, PCIe, SATA, USB, RS232. Panguva imwecheteyo, CoreBoot inobatanidza mabhinari zvikamu FSP 2.0 (Intel Firmware Support Package) uye binary firmware yeIntel ME subsystem, inodiwa kutanga uye kutanga CPU uye chipset.

Kuti uvhure sisitimu yekushandisa inokurudzirwa kushandisa SeaBios kana LinuxBoot (Kuitwa kweUEFI kwakavakirwa pa Tianocore haisati yatsigirwa nekuda kwekusawirirana neAspeed NGI graphics subsystem, inoshanda chete mumeseji modhi). Pamusoro pekuwedzera rutsigiro rwebhodhi kuCoreBoot, vatori vechikamu vakashandisawo rutsigiro rweTPM (Trusted Platform Module) 1.2/2.0 modules yakavakirwa paIntel ME uye vakagadzirira mutyairi weASPEED 2400 SuperI/O controller, inoita mabasa eBMC (Baseboard). Management Controller).

Kuti utore kure kure kwebhodhi, iyo IPMI interface inopiwa neBMC AST2400 controller inotsigirwa, asi kushandisa IPMI, iyo yekutanga firmware inofanirwa kuiswa muBMC controller. Verified download functionality yakaitwa zvakare. Ku utility superiotool AST2400 rutsigiro rwakawedzerwa, uye inteltool rutsigiro rweIntel Xeon E3-1200. Intel SGX (Software Guard Extensions) haisati yatsigirwa nekuda kwekugadzikana kwezvinhu.

Source: opennet.ru

Voeg