3 ms·

From a glance, it looks interesting to get started. Reminds me of some 'bare metal OS' series for Raspberry Pi: https://www.rpi4os.com https://www.rpi4os.com

From a glance, it looks interesting to get started. Reminds me of some 'bare metal OS' series for Raspberry Pi: https://www.rpi4os.com https://www.rpi4os.com and https://s-matyukevich.github.io/raspberry-pi-os https://s-matyukevich.github.io/raspberry-pi-os and https://github.com/rsta2/circle https://github.com/rsta2/circle Recent x64 AMD and Intel PC's use UEFI secure boot and require signed boot images, so this simple approach won't boot out-of-the box anymore I suspect. Same for Mac M1. So some update would be useful, without requiring to disable UEFI secure boot.

cillian64 5y ago
I’ve never come across an amd64 system where secure boot couldn’t be disabled in the BIOS (as you’d do when installing Linux) - do you have any examples of this?
- the_only_law 5y ago
  Not OP, but I’m pretty sure I’ve seen more and more firmware lately that does not want to give me any usual functionality at all.
  - emteycz 5y ago
    Demand your money back, only Windows can be signed, so the device is not up to spec if you can't disable it.
- erwincoumans 5y ago
  Of course you can switch secure boot off. I am just interested in a solution that boots with security on: just out of curiosity, this is about learning after all.
nurettin 5y ago
Is this UEFI something you have to design your OS around, or do we get away with a simple "how to sign custom kernel image" search?
- emteycz 5y ago
  You can't sign your custom kernel, only Windows can be signed and signing has to be disabled for Linux and other OS. UEFI offers some basic IO functionality, it's like BIOS in that regard. You don't design your OS around it, you use it to have easy graphics, networking etc during boot time, then you switch to your own drivers and don't touch UEFI again.
- erwincoumans 5y ago
  Custom signing will do of course, this is just out of curiosity. https://ubuntu.com/blog/how-to-sign-things-for-secure-boot https://ubuntu.com/blog/how-to-sign-things-for-secure-boot

cillian64 5y ago

I’ve never come across an amd64 system where secure boot couldn’t be disabled in the BIOS (as you’d do when installing Linux) - do you have any examples of this?

the_only_law 5y ago
Not OP, but I’m pretty sure I’ve seen more and more firmware lately that does not want to give me any usual functionality at all.
- emteycz 5y ago
  Demand your money back, only Windows can be signed, so the device is not up to spec if you can't disable it.
erwincoumans 5y ago
Of course you can switch secure boot off. I am just interested in a solution that boots with security on: just out of curiosity, this is about learning after all.

nurettin 5y ago

Is this UEFI something you have to design your OS around, or do we get away with a simple "how to sign custom kernel image" search?

emteycz 5y ago
You can't sign your custom kernel, only Windows can be signed and signing has to be disabled for Linux and other OS. UEFI offers some basic IO functionality, it's like BIOS in that regard. You don't design your OS around it, you use it to have easy graphics, networking etc during boot time, then you switch to your own drivers and don't touch UEFI again.
erwincoumans 5y ago
Custom signing will do of course, this is just out of curiosity. https://ubuntu.com/blog/how-to-sign-things-for-secure-boot https://ubuntu.com/blog/how-to-sign-things-for-secure-boot