Hi,
a new release is ready, and it comes with significant improvements.
Most prominently, this introduces an own stub and generation process for
unified kernel images, the combination of kernel, initrd, command line
arguments and device trees into a single UEFI binary - which could also
be signed. This serves in particular complex aarch64 integration
scenarios (multi-target support, thus multiple device trees) but can
also be an alternative to systemd's approach on x86.
Another small but important change is that we switch libebgenv.so to
libtool's version system. Thus, libebgenv-0.10.0.so becomes
libebgenv.so.0.0.0 now. This will be update according to that system
whenever we change the API of this library - and not just blindly when
we just release a new version of EFI Boot Guard.
Further news are a driver for HPE ProLiant machines and a lot of
cosmetics around output as well as internals of the boot loader. Also
the build is more customizable by allowing op-out from shell
completions, thus the related build dependencies. Last but not least:
The boot loader binary was shrunk by reducing its data section
significantly.
Oh, and we have a SECURITY.md policy now, describing how we will handle
any potential vulnerability reports. EFI Boot Guard being used in secure
boot setups more and more, and we want to make even clearer that we take
security very seriously.
With that: Thanks for all contributions!
Christian Storm (1):
Add libebgenv pkg-config
Jan Kiszka (33):
main: Clean up PCI_GET_*_ID macros
watchdog: iTCO: Use output helpers
watchdog: ipc4x7e_wdt: Use output helpers
watchdog: i6300esb: Use output helpers
watchdog: atom-quark: Use output helpers
watchdog: amdfch_wdt: Use output helpers
watchdog: Add driver to HPE ProLiant machines
ci: Add missing apt-get udpate before installation
Drop uefi_call_wrapper
ci: Add missing apt-get update in coverity workflow
configure: Fix aarch64 EFI arch
Drop redundant include
watchdog: wdat: Switch to standard return codes for missing support
Rework watchdog-free mode
Convert warning message into error
Allocate env data buffer dynamically
Makefile: Clean generated libebgenv.pc
README: Add HPE ProLiant watchdog
Avoid arithOperationsOnVoidPointer cppcheck exception
Update version.h dependency
Change versioning scheme of libebgenv.so
make_release: Add a reminder for library version updates
make_release: Update sub-shell invocations
Correct and simplify full kernel path output
Drop extra newline in output header
Convert open-coded outputs to INFO
Add security policy
Add stub for unified kernel images
tools: Add generator for unified kernel images
docs: Add description for unified kernel images
configure: Fold ARCH_I686 into ARCH_I586
kernel-stub: Warn when command line options are detected
Bump version number
Michael Adler (3):
docs: add info about git submodules
tools: fix compile warnings
Allow opting out of shell completion
Jan
--
Siemens AG, Corporate Technology, CT RDA IOT SES-DE
Corporate Competence Center Embedded Linux
--
You received this message because you are subscribed to the Google Groups "EFI
Boot Guard" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/efibootguard-dev/84f952cb-84d2-8c90-6f2b-ab4b9437788b%40siemens.com.
