search

nix-community / lanzaboote

Secure Boot for NixOS [maintainers=@blitz @raitobezarius @nikstur]
GNU General Public License v3.0
917 stars 44 forks source link

RISC-V support #28

Open RaitoBezarius opened 1 year ago

RaitoBezarius commented 1 year ago

I want SecureBoot on RISC-V, that's all.

RaitoBezarius commented 1 year ago
RaitoBezarius commented 1 year ago

I will receive my VF2 on 5 Jan. apparently, will see how hard is it to setup at least a remote builder for software and even a testbed (???).

sreehax commented 7 months ago

Part of the trouble will be in compiling rust onto riscv uefi. I have tried this in the past, and the issue I ran into was that LLVM did not seem to want to build a RISC-V PE/COFF object file at all. The only workarounds for this are either 1. fix LLVM or 2. actually create a riscv ELF binary, but create a faux COFF header with assembly that jumps to the ELF code. This is what the linux kernel uses to boot as EFISTUB on arm64. All of this work will probably fall onto uefi-rs (https://github.com/rust-osdev/uefi-rs/issues/241). References: