Modern, secure, portable, multiprotocol bootloader and boot manager.
TrenchBoot Anti Evil Maid (current plan - v2) - Dasharo Universe
As Qubes OS users, promoters, and developers, we understand how essential it is to be aware of the latest developments in maintaining the security of your favorite operating system. We're excited to share our plans to integrate the TrenchBoot Project into Qubes OS's new Anti-Evil Maid (AEM) implementation. As you may know, traditional firmware security measures like UEFI Secure Boot and measured boot, even with a Static Root of Trust (SRT), may only sometimes be enough to ensure a completely secure environment for your operating system. Compromised firmware may allow for the injection of malicious software into your system, making it difficult to detect. To overcome these limitations, many silicon vendors have started implementing Dynamic Root of Trust (DRT) technologies to establish a secure environment for operating system launch and integrity measurements. We're excited to take advantage of these advancements through integration with the TrenchBoot Project.
Boot_sequence
This document has been assembled to supplement a set of instructions about writing one's own bootloader for the RP2040. Writing a bootloader requires some understanding of the boot sequence, but it became a bit too cumbersome to include that explanation in the bootloader documentation.
I Want to Love Linux. It Doesn’t Love Me Back: Post 4 – Wayland Is Growing Up. And Now We Don’t Have a Choice — fireborn
This post wasn’t supposed to exist — not yet. I meant to talk about bootloaders. About inaccessible USB installs. About the deafening silence between pressing the power button and hearing a screen reader. That post is still coming.
Genode - Genode Operating System Framework
We understand the complexity of code and policy as the most fundamental security problem shared by modern general-purpose operating systems. Because of high functional demands and dynamic workloads, however, this complexity cannot be avoided. But it can be organized. Genode is a novel OS architecture that is able to master complexity by applying a strict organizational structure to all software components including device drivers, system services, and applications. The Genode OS framework is an open-source tool kit for building highly secure component-based operating systems. It scales from embedded devices to dynamic general-purpose computing.
zenfyr.dev/bootloader-unlock-wall-of-shame
Keeping track of companies that "care about your data 🥺"
GRUB/EFI examples - ArchWiki
It is well known that different motherboard manufactures implement UEFI differently. The purpose of this page is to show hardware-specific methods known to work when installing/restoring GRUB in EFI mode.
The seL4 Microkernel | seL4
seL4 is both the world's most highly assured and the world's fastest operating system kernel. Its uniqueness lies in the formal mathematical proof that it behaves exactly as specified, enforcing strong security boundaries for applications running on top of it while maintaining the high performance that deployed systems need.
Tock OS A Rust Based Open Platform for Transparent and Secure Root of Trust Devices
12 eBPF-Powered CLI Utilities That Every Modern Linux Sysadmin Should Master
Classic Linux tools are always there, but eBPF is the natural upgrade as it looks directly in the kernel. Once you start using these tools, it’s hard to imagine managing Linux systems without them.
RAFS Filesystem | dragonflyoss/nydus | DeepWiki
RAFS (Registry Acceleration File System) is a read-only, chunk-deduplicated, on-demand-loading filesystem designed for container image serving. The filesystem implementation is located in the `rafs/`
linuxkit/linuxkit
A toolkit for building secure, portable and lean operating systems for containers
Arch boot process - ArchWiki
In order to boot Arch Linux, a Linux-capable boot loader must be set up. The boot loader is responsible for loading the kernel and initial ramdisk before initiating the boot process. The procedure is quite different for BIOS and UEFI systems.