corebooting Intel-based systems

If you suspend your transcription on amara.org, please add a timestamp below to indicate how far you progressed! This will help others to resume your work!

Please do not press “publish” on amara.org to save your progress, use “save draft” instead. Only press “publish” when you're done with quality control.

Video duration
Not yet available
Language
English
Abstract
Gaining a reasonable level of trust on the firmware that runs your everyday activities

Corebootable or not corebootable, that is the question.

The nerdiest nerds already corebooted their old X230 ThinkPads... but what about your new ThinkPad, or even your gaming rig? Well, Intel has a trick called the "BootGuard" inside the Management Engine.
It is supposed to protect the firmware and only allow updates from signed sources... somewhat like the Secure Boot. This means we can't coreboot our newer machines, right?

..right? Well, for that to work... it needs team-play between OEMs and Intel, which doesn't always work out.

In this talk you will learn how to port coreboot to modern Intel systems - how we did it and even got to game on them.

We'll go over coreboot development, tell you how to find ~~potential subjects~~ compatible mainboards and what it would take to boot on them!). We'll explain what are "payloads", which one is right for you, and what it takes to make such system run mainline Linux.

We'll also take a look at current state of AMD systems and how they're doing with OpenSIL (which will replace AGESA in the coming years).

Talk ID
38c3-45
Event:
38c3
Day
4
Room
Saal ZIGZAG
Start
2:45 p.m.
Duration
00:40:00
Track
Hardware & Making
Type of
Talk
Speaker
aprl
elly
aprl
elly
Talk Slug & media link
38c3-45-corebooting-intel-based-systems

The video is not yet available