DOCSLIB.ORG

The GNU GRUB Manual the Grand Unified Bootloader, Version 2.00, 23 June 2012

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
The GNU GRUB Manual the Grand Unified Bootloader, Version 2.00, 23 June 2012 the GNU GRUB manual The GRand Unified Bootloader, version 2.00, 23 June 2012. Gordon Matzigkeit Yoshinori K. Okuji Colin Watson Colin D. Bennett This manual is for GNU GRUB (version 2.00, 23 June 2012). Copyright c 1999,2000,2001,2002,2004,2006,2008,2009,2010,2011,2012 Free Software Foun- dation, Inc. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections. i Table of Contents 1 Introduction to GRUB ::::::::::::::::::::::::: 1 1.1 Overview :::::::::::::::::::::::::::::::::::::::::::::::::::::: 1 1.2 History of GRUB :::::::::::::::::::::::::::::::::::::::::::::: 1 1.3 Differences from previous versions :::::::::::::::::::::::::::::: 2 1.4 GRUB features::::::::::::::::::::::::::::::::::::::::::::::::: 3 1.5 The role of a boot loader ::::::::::::::::::::::::::::::::::::::: 5 2 Naming convention ::::::::::::::::::::::::::::: 7 3 Installation :::::::::::::::::::::::::::::::::::::: 9 3.1 Installing GRUB using grub-install ::::::::::::::::::::::::::::: 9 3.2 Making a GRUB bootable CD-ROM :::::::::::::::::::::::::: 10 3.3 The map between BIOS drives and OS devices :::::::::::::::: 10 3.4 BIOS installation ::::::::::::::::::::::::::::::::::::::::::::: 11 4 Booting::::::::::::::::::::::::::::::::::::::::: 13 4.1 How to boot operating systems :::::::::::::::::::::::::::::::: 13 4.1.1 How to boot an OS directly with GRUB :::::::::::::::::: 13 4.1.2 Chain-loading an OS ::::::::::::::::::::::::::::::::::::: 13 4.2 Loopback booting ::::::::::::::::::::::::::::::::::::::::::::: 14 4.3 Some caveats on OS-specific issues :::::::::::::::::::::::::::: 14 4.3.1 GNU/Hurd :::::::::::::::::::::::::::::::::::::::::::::: 14 4.3.2 GNU/Linux :::::::::::::::::::::::::::::::::::::::::::::: 14 4.3.3 DOS/Windows ::::::::::::::::::::::::::::::::::::::::::: 15 5 Writing your own configuration file :::::::::: 17 5.1 Simple configuration handling ::::::::::::::::::::::::::::::::: 17 5.2 Writing full configuration files directly ::::::::::::::::::::::::: 21 5.3 Multi-boot manual config ::::::::::::::::::::::::::::::::::::: 24 5.4 Embedding a configuration file into GRUB :::::::::::::::::::: 25 6 Theme file format ::::::::::::::::::::::::::::: 27 6.1 Introduction :::::::::::::::::::::::::::::::::::::::::::::::::: 27 6.2 Theme Elements :::::::::::::::::::::::::::::::::::::::::::::: 27 6.2.1 Colors ::::::::::::::::::::::::::::::::::::::::::::::::::: 27 6.2.2 Fonts :::::::::::::::::::::::::::::::::::::::::::::::::::: 27 6.2.3 Progress Bar ::::::::::::::::::::::::::::::::::::::::::::: 27 6.2.4 Circular Progress Indicator ::::::::::::::::::::::::::::::: 27 6.2.5 Labels ::::::::::::::::::::::::::::::::::::::::::::::::::: 28 6.2.6 Boot Menu::::::::::::::::::::::::::::::::::::::::::::::: 28 6.2.7 Styled Boxes ::::::::::::::::::::::::::::::::::::::::::::: 28 ii GNU GRUB Manual 2.00 6.2.8 Creating Styled Box Images :::::::::::::::::::::::::::::: 28 6.3 Theme File Manual ::::::::::::::::::::::::::::::::::::::::::: 29 6.3.1 Global Properties :::::::::::::::::::::::::::::::::::::::: 29 6.3.2 Format::::::::::::::::::::::::::::::::::::::::::::::::::: 29 6.3.3 Global Property List ::::::::::::::::::::::::::::::::::::: 29 6.3.4 Component Construction ::::::::::::::::::::::::::::::::: 30 6.3.5 Component List :::::::::::::::::::::::::::::::::::::::::: 30 6.3.6 Common properties :::::::::::::::::::::::::::::::::::::: 33 7 Booting GRUB from the network:::::::::::: 35 8 Using GRUB via a serial line::::::::::::::::: 37 9 Using GRUB with vendor power-on keys ::: 39 10 GRUB image files :::::::::::::::::::::::::::: 41 11 Filesystem syntax and semantics:::::::::::: 43 11.1 How to specify devices ::::::::::::::::::::::::::::::::::::::: 43 11.2 How to specify files :::::::::::::::::::::::::::::::::::::::::: 44 11.3 How to specify block lists :::::::::::::::::::::::::::::::::::: 44 12 GRUB's user interface ::::::::::::::::::::::: 45 12.1 The flexible command-line interface :::::::::::::::::::::::::: 45 12.2 The simple menu interface ::::::::::::::::::::::::::::::::::: 46 12.3 Editing a menu entry :::::::::::::::::::::::::::::::::::::::: 46 13 GRUB environment variables ::::::::::::::: 47 13.1 Special environment variables :::::::::::::::::::::::::::::::: 47 13.1.1 biosnum :::::::::::::::::::::::::::::::::::::::::::::::: 47 13.1.2 chosen :::::::::::::::::::::::::::::::::::::::::::::::::: 47 13.1.3 color highlight :::::::::::::::::::::::::::::::::::::::::: 47 13.1.4 color normal :::::::::::::::::::::::::::::::::::::::::::: 47 13.1.5 debug ::::::::::::::::::::::::::::::::::::::::::::::::::: 48 13.1.6 default :::::::::::::::::::::::::::::::::::::::::::::::::: 48 13.1.7 fallback ::::::::::::::::::::::::::::::::::::::::::::::::: 48 13.1.8 gfxmode :::::::::::::::::::::::::::::::::::::::::::::::: 49 13.1.9 gfxpayload :::::::::::::::::::::::::::::::::::::::::::::: 49 13.1.10 gfxterm font ::::::::::::::::::::::::::::::::::::::::::: 49 13.1.11 icondir::::::::::::::::::::::::::::::::::::::::::::::::: 49 13.1.12 lang ::::::::::::::::::::::::::::::::::::::::::::::::::: 49 13.1.13 locale dir :::::::::::::::::::::::::::::::::::::::::::::: 49 13.1.14 menu color highlight ::::::::::::::::::::::::::::::::::: 50 13.1.15 menu color normal::::::::::::::::::::::::::::::::::::: 50 13.1.16 net pxe boot file::::::::::::::::::::::::::::::::::::::: 50 13.1.17 net pxe dhcp server name ::::::::::::::::::::::::::::: 50 iii 13.1.18 net pxe domain :::::::::::::::::::::::::::::::::::::::: 50 13.1.19 net pxe extensionspath :::::::::::::::::::::::::::::::: 50 13.1.20 net pxe hostname:::::::::::::::::::::::::::::::::::::: 50 13.1.21 net pxe ip ::::::::::::::::::::::::::::::::::::::::::::: 50 13.1.22 net pxe mac ::::::::::::::::::::::::::::::::::::::::::: 50 13.1.23 net pxe rootpath :::::::::::::::::::::::::::::::::::::: 50 13.1.24 pager :::::::::::::::::::::::::::::::::::::::::::::::::: 50 13.1.25 prefix :::::::::::::::::::::::::::::::::::::::::::::::::: 51 13.1.26 pxe blksize::::::::::::::::::::::::::::::::::::::::::::: 51 13.1.27 pxe default gateway ::::::::::::::::::::::::::::::::::: 51 13.1.28 pxe default server:::::::::::::::::::::::::::::::::::::: 51 13.1.29 root ::::::::::::::::::::::::::::::::::::::::::::::::::: 51 13.1.30 superusers ::::::::::::::::::::::::::::::::::::::::::::: 51 13.1.31 theme ::::::::::::::::::::::::::::::::::::::::::::::::: 51 13.1.32 timeout :::::::::::::::::::::::::::::::::::::::::::::::: 51 13.2 The GRUB environment block ::::::::::::::::::::::::::::::: 51 14 The list of available commands ::::::::::::: 53 14.1 The list of commands for the menu only :::::::::::::::::::::: 53 14.1.1 menuentry :::::::::::::::::::::::::::::::::::::::::::::: 53 14.1.2 submenu :::::::::::::::::::::::::::::::::::::::::::::::: 53 14.2 The list of general commands :::::::::::::::::::::::::::::::: 54 14.2.1 serial ::::::::::::::::::::::::::::::::::::::::::::::::::: 54 14.2.2 terminal input :::::::::::::::::::::::::::::::::::::::::: 54 14.2.3 terminal output ::::::::::::::::::::::::::::::::::::::::: 54 14.2.4 terminfo :::::::::::::::::::::::::::::::::::::::::::::::: 55 14.3 The list of command-line and menu entry commands ::::::::: 55 14.3.1 acpi::::::::::::::::::::::::::::::::::::::::::::::::::::: 55 14.3.2 badram ::::::::::::::::::::::::::::::::::::::::::::::::: 55 14.3.3 blocklist :::::::::::::::::::::::::::::::::::::::::::::::: 56 14.3.4 boot :::::::::::::::::::::::::::::::::::::::::::::::::::: 56 14.3.5 cat:::::::::::::::::::::::::::::::::::::::::::::::::::::: 56 14.3.6 chainloader ::::::::::::::::::::::::::::::::::::::::::::: 56 14.3.7 cmp :::::::::::::::::::::::::::::::::::::::::::::::::::: 56 14.3.8 configfile :::::::::::::::::::::::::::::::::::::::::::::::: 57 14.3.9 cpuid ::::::::::::::::::::::::::::::::::::::::::::::::::: 57 14.3.10 crc::::::::::::::::::::::::::::::::::::::::::::::::::::: 57 14.3.11 date ::::::::::::::::::::::::::::::::::::::::::::::::::: 57 14.3.12 drivemap :::::::::::::::::::::::::::::::::::::::::::::: 57 14.3.13 echo ::::::::::::::::::::::::::::::::::::::::::::::::::: 57 14.3.14 export ::::::::::::::::::::::::::::::::::::::::::::::::: 58 14.3.15 false ::::::::::::::::::::::::::::::::::::::::::::::::::: 58 14.3.16 gettext::::::::::::::::::::::::::::::::::::::::::::::::: 58 14.3.17 gptsync :::::::::::::::::::::::::::::::::::::::::::::::: 58 14.3.18 halt:::::::::::::::::::::::::::::::::::::::::::::::::::: 59 14.3.19 help ::::::::::::::::::::::::::::::::::::::::::::::::::: 59 14.3.20 initrd :::::::::::::::::::::::::::::::::::::::::::::::::: 59 14.3.21 initrd16:::::::::::::::::::::::::::::::::::::::::::::::: 59 iv GNU GRUB Manual 2.00 14.3.22 insmod :::::::::::::::::::::::::::::::::::::::::::::::: 59 14.3.23 keystatus :::::::::::::::::::::::::::::::::::::::::::::: 59 14.3.24 linux::::::::::::::::::::::::::::::::::::::::::::::::::: 60 14.3.25 linux16 :::::::::::::::::::::::::::::::::::::::::::::::: 60 14.3.26 list env :::::::::::::::::::::::::::::::::::::::::::::::: 60 14.3.27 load env ::::::::::::::::::::::::::::::::::::::::::::::: 60 14.3.28 loopback ::::::::::::::::::::::::::::::::::::::::::::::: 60 14.3.29 ls :::::::::::::::::::::::::::::::::::::::::::::::::::::: 61 14.3.30 normal::::::::::::::::::::::::::::::::::::::::::::::::: 61 14.3.31 normal exit :::::::::::::::::::::::::::::::::::::::::::: 61 14.3.32 parttool:::::::::::::::::::::::::::::::::::::::::::::::: 61 14.3.33 password :::::::::::::::::::::::::::::::::::::::::::::: 62 14.3.34 password pbkdf2 ::::::::::::::::::::::::::::::::::::::: 62 14.3.35 play :::::::::::::::::::::::::::::::::::::::::::::::::::
Load more

Recommended publications
  • Improving System Security Through TCB Reduction
    Improving System Security Through TCB Reduction Bernhard Kauer March 31, 2015 Dissertation vorgelegt an der Technischen Universität Dresden Fakultät Informatik zur Erlangung des akademischen Grades Doktoringenieur (Dr.-Ing.) Erstgutachter Prof. Dr. rer. nat. Hermann Härtig Technische Universität Dresden Zweitgutachter Prof. Dr. Paulo Esteves Veríssimo University of Luxembourg Verteidigung 15.12.2014 Abstract The OS (operating system) is the primary target of todays attacks. A single exploitable defect can be sufficient to break the security of the system and give fully control over all the software on the machine. Because current operating systems are too large to be defect free, the best approach to improve the system security is to reduce their code to more manageable levels. This work shows how the security-critical part of theOS, the so called TCB (Trusted Computing Base), can be reduced from millions to less than hundred thousand lines of code to achieve these security goals. Shrinking the software stack by more than an order of magnitude is an open challenge since no single technique can currently achieve this. We therefore followed a holistic approach and improved the design as well as implementation of several system layers starting with a newOS called NOVA. NOVA provides a small TCB for both newly written applications but also for legacy code running inside virtual machines. Virtualization is thereby the key technique to ensure that compatibility requirements will not increase the minimal TCB of our system. The main contribution of this work is to show how the virtual machine monitor for NOVA was implemented with significantly less lines of code without affecting the per- formance of its guest OS.
    [Show full text]
  • Installation and Configuration
    Installation and Configuration By High School Technology Services myhsts.org Recap From Previous Session ● UNIX, Linux and Open Source ● Duties of the System Administrator ● Superusers and the Root Login ● Sharing Superuser Privileges with Others (su and sudo Commands) ● TCP/IP Networking Fundamentals Planning: Hardware and Software Considerations Linux supports a wide range of PC hardware; but not even Linux supports every known device and system. Your PC must meet certain minimum requirements in order to run Linux. CPU - Linux does not support the Intel 286 and earlier processors. However, it fully supports the Intel 80386, 80486, Pentium, Pentium Pro, Pentium II, and Pentium III processors. Nevertheless, some users feel that their 80386 Linux systems respond sluggishly, particularly when running X. So, if you want optimum performance, you should install Linux on a PC having an 80486 processor or better. Linux also supports non-Intel processors such as the Cyrix 6x86 and the AMD K5 and K6. Most Linux users have systems that use Intel chips; if your system uses a non-Intel chip, you may find it more difficult to resolve possible problems. Planning: Hardware and Software Considerations Motherboard - Linux supports the standard ISA, EISA, PCI, and VESA (VLB) system buses used on most IBM-compatible PCs. Linux recently gained support for IBM's MCA bus, used in IBM's PS/2 series of computers. However, at the time of this writing, Debian GNU/Linux does not yet support the MCA bus. If you have an IBM PS/2, you may be unable to install Debian GNU/Linux (check the Debian Project web site for the latest available information on support for the MCA bus).
    [Show full text]
  • Multiboot Specification Version 0.6.96
    The Multiboot Specification version 0.6.96 Yoshinori K. Okuji, Bryan Ford, Erich Stefan Boleyn, Kunihiro Ishiguro Copyright c 1995,96 Bryan Ford <[email protected]> Copyright c 1995,96 Erich Stefan Boleyn <[email protected]> Copyright c 1999,2000,2001,2002,2005,2006,2009,2010 Free Software Foundation, Inc. Permission is granted to make and distribute verbatim copies of this manual provided the copyright notice and this permission notice are preserved on all copies. Permission is granted to copy and distribute modified versions of this manual under the conditions for verbatim copying, provided also that the entire result- ing derived work is distributed under the terms of a permission notice identical to this one. Permission is granted to copy and distribute translations of this manual into another language, under the above conditions for modified versions. Chapter 1: Introduction to Multiboot Specification 1 1 Introduction to Multiboot Specification This chapter describes some rough information on the Multiboot Specification. Note that this is not a part of the specification itself. 1.1 The background of Multiboot Specification Every operating system ever created tends to have its own boot loader. Installing a new operating system on a machine generally involves installing a whole new set of boot mech- anisms, each with completely different install-time and boot-time user interfaces. Getting multiple operating systems to coexist reliably on one machine through typical chaining mechanisms can be a nightmare. There is little or no choice of boot loaders for a particular operating system | if the one that comes with the operating system doesn't do exactly what you want, or doesn't work on your machine, you're screwed.
    [Show full text]
  • The GNU GRUB Manual the Grand Unified Bootloader, Version 2.02, 25 April 2017
    the GNU GRUB manual The GRand Unified Bootloader, version 2.02, 25 April 2017. Gordon Matzigkeit Yoshinori K. Okuji Colin Watson Colin D. Bennett This manual is for GNU GRUB (version 2.02, 25 April 2017). Copyright c 1999,2000,2001,2002,2004,2006,2008,2009,2010,2011,2012,2013 Free Software Foundation, Inc. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections. i Table of Contents 1 Introduction to GRUB ::::::::::::::::::::::::: 1 1.1 Overview :::::::::::::::::::::::::::::::::::::::::::::::::::::: 1 1.2 History of GRUB :::::::::::::::::::::::::::::::::::::::::::::: 1 1.3 Differences from previous versions :::::::::::::::::::::::::::::: 2 1.4 GRUB features::::::::::::::::::::::::::::::::::::::::::::::::: 3 1.5 The role of a boot loader ::::::::::::::::::::::::::::::::::::::: 5 2 Naming convention ::::::::::::::::::::::::::::: 7 3 OS-specific notes about grub tools :::::::::::: 9 4 Installation ::::::::::::::::::::::::::::::::::::: 11 4.1 Installing GRUB using grub-install :::::::::::::::::::::::::::: 11 4.2 Making a GRUB bootable CD-ROM :::::::::::::::::::::::::: 12 4.3 The map between BIOS drives and OS devices :::::::::::::::: 13 4.4 BIOS installation ::::::::::::::::::::::::::::::::::::::::::::: 13 5 Booting::::::::::::::::::::::::::::::::::::::::: 15 5.1 How to boot operating systems :::::::::::::::::::::::::::::::: 15 5.1.1 How to boot an OS directly with GRUB ::::::::::::::::::
    [Show full text]
  • HYPER-CUBE: High-Dimensional Hypervisor Fuzzing
    HYPER-CUBE: High-Dimensional Hypervisor Fuzzing Sergej Schumilo, Cornelius Aschermann, Ali Abbasi, Simon Worner¨ and Thorsten Holz Ruhr-Universitat¨ Bochum Abstract—Virtual machine monitors (VMMs, also called hy- In the past, fuzz testing (“fuzzing”) has proven to be a pervisors) represent a very critical part of a modern software very successful technique for uncovering novel vulnerabilities stack: compromising them could allow an attacker to take full in complex applications [11], [17], [38], [40], [45], [53], [54]. control of the whole cloud infrastructure of any cloud provider. Unfortunately, only a limited number of resources on fuzzing Hence their security is critical for many applications, especially hypervisors is available at the moment. The reason behind this in the context of Infrastructure-as-a-Service. In this paper, we lack of support for fuzzing this type of software applications present the design and implementation of HYPER-CUBE, a novel fuzzer that aims explicitly at testing hypervisors in an efficient, is the fact that there are several additional challenges for effective, and precise way. Our approach is based on a custom fuzzing this lower-level component: In contrast to current operating system that implements a custom bytecode interpreter. fuzzers that mostly support interaction with a single interface This high-throughput design for long-running, interactive targets (e.g., stdin [54] or syscalls [5]), fuzzing hypervisors requires allows us to fuzz a large number of both open source and to interact with several different devices using a variety of proprietary hypervisors. In contrast to one-dimensional fuzzers interfaces and protocols. For example, the guest system can such as AFL, HYPER-CUBE can interact with any number of trigger arbitrary hypercalls, perform arbitrary I/O operations, interfaces in any order.
    [Show full text]
  • Bootstrapping
    Bootstrapping Steve Muckle Dave Eckhardt Synchronization Checkpoint “3.5” – Today (Due date is 11/16, so we are at T-2) Look for e-mail after class Key deliverable: STATUS file (now & projections) Help Wanted Possible summer openings hacking for Facilities Bring me a resume around February A few good students wanted 15-610 (Spring) 15-412 (Fall) Carnegie Mellon University 2 Motivation What happens when you turn on your PC? How do we get to main() in kernel.c? Carnegie Mellon University 3 Overview Requirements of Booting Ground Zero The BIOS The Boot Loader Our projects: Multiboot, OSKit BIOS extensions: PXE, APM Other universes: “big iron”, Open Firmware Further reading Carnegie Mellon University 4 Requirements of Booting Initialize machine to a known state Make sure basic hardware works Inventory hardware Load a real operating system Run the real operating system Carnegie Mellon University 5 Ground Zero You turn on the machine Execution begins in real mode at a specific memory address Real mode - primeval x86 addressing mode Only 1 MB of memory is addressable First instruction fetch address is 0xFFFF0 Carnegie Mellon University 6 Ground Zero You turn on the machine Execution begins in real mode at a specific memory address Real mode - primeval x86 addressing mode Only 1 MB of memory is addressable First instruction fetch address is 0xFFFF0 “End of memory” (20-bit infinity), minus 4 Contains a jump to the actual BIOS entry point Great, what’s a BIOS? Carnegie Mellon University 7 Basic Input/Output
    [Show full text]
  • Final Year Project
    Final Year Project Porting MINIX to Xen Name Ivan Kelly ID Number 0225991 Supervisor John Sturdy Course Computer Systems Submitted in part requirement for final year project course CS4618 to University of Limerick, Ireland on May 8, 2006 i Copyright c 2006, Ivan Kelly. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is available at http://www.gnu.org/licenses/fdl.html. Acknowledgements MINIX on Xen would not have been possible without the support of many people. I would like to thank the Xen Team, not only for creating Xen, but for providing support through IRC and email. Without the help of Mark Williamson and Keir Fraser in particular, this project would have never gotten off the ground. I would also like to thank Andrew S. Tanenbaum whose help in the early days of the project, helped me see what needed to be done. I would like to thank John Sturdy and Mel Gorman for talking me through many difficult problems during the implementation of MINIX on Xen. I would like to thank my friends and family for their support and my housemates for bring- ing me tea, and listening to my ranting. Lastly, I would like to thank Pili for her love and support, and for her willingness to endure hours of rants regarding GDTs and interrupt handlers.
    [Show full text]
  • TECHNISCHE UNIVERSITÄT MÜNCHEN Lehrstuhl Für
    TECHNISCHE UNIVERSITÄT MÜNCHEN Lehrstuhl für Datenverarbeitung Runtime integrity framework based on trusted computing Chun Hui Suen Vollständiger Abdruck der von der Fakultät für Elektrotechnik und Informationstechnik der Technische Universität München zur Erlangung des akademischen Grades eines Doktor-Ingenieurs (Dr. -Ing.) genehmigten Dissertation. Vorsitzender: Univ. -Prof. Dr. -Ing. U. Schlichtmann Prüfer der Dissertation: 1. Univ. -Prof. Dr. -Ing. K. Diepold 2. Univ. -Prof. Dr. -Ing. G. Sigl Die Dissertation wurde am 02.02.2012 bei der Technische Universität München eingereicht und durch die Fakultät für Elektrotechnik und Informationstechnik am 26.06.2012 angenommen. Runtime integrity framework based on trusted computing Chun Hui Suen Runtime integrity framework based on trusted computing Chun Hui Suen July 2, 2012 Lehrstuhl für Datenverarbeitung Technische Universität München Abstract I present in this dissertation, a technique to measure the integrity of an operating system, so that the user can verify that all critical software components, including the operating system kernel, is running in a known valid state. The technique solves a key problem of providing continuous runtime verification of kernel memory-space. The measurement is integrated with a trustworthy verification chain from the firmware, host machine, hypervisor, guest machine to applications, based on existing techniques from Trust Computing and guest security mechanisms. This is accomplished by checking the guest kernel against a known reference, to provide instant feedback on changes in its integrity. A Trusted Platform Module (TPM) is used to provide a complete integrity measurement chain from the hardware to the host and guest system. A working implementation of the entire framework has been achieved for a 64- bit Linux host and guest system, using QEMU and KVM as two different virtualization techniques.
    [Show full text]
  • Write Your Own (Minimal) Operating System Kernel
    Write Your Own (minimal) Operating System Kernel Jan Hauffa ([email protected]) Outline 1. Tools 2. Basic i386 System Programming 3. Implementation of a Minimal OS Kernel 4. Debugging 1. Tools Tools ● gcc, binutils, qemu, xorriso ● Windows: Cygwin, MinGW ● Mac: Xcode, DIY, MacPorts ● gcc cross compiler toolchain ● GRUB2 or BURG bootloader Why Build a Cross Compiler? ● gcc and binutils are usually „tuned“ for a specific target OS: ● binary format: Linux = ELF, MacOS = Mach-O, Windows = PE-COFF ● features that require runtime support: stack protection, stack probing, … ● Run „gcc -v“ to see what your system compiler drags in. ● We need a „clean“ toolchain that can generate a specific binary format. Building the Cross Compiler ● Get the latest versions of gmp, mpfr from http://ftp.gnu.org/gnu/ and mpc from http://www.multiprecision.org/ ● Build and install into a local prefix, I use /usr/local/cc ● Get the latest gcc-core from ftp.gnu.org. 1. mkdir build-gcc && cd build-gcc 2. ../gcc-XXX/configure -–target=i586-elf --prefix=/usr/local/cc -–disable-nls -–enable-languages=c -–without-headers -–with-gmp=/usr/local/cc --with-mpfr=/usr/local/cc --with-mpc=/usr/local/cc 3. make all-gcc 4. sudo make install-gcc 5. make all-target-libgcc 6. sudo make install-target-libgcc detailed instructions: http://wiki.osdev.org/GCC_Cross-Compiler More boring stuff... ● If you're on Windows or MacOS, you'll need a „cross debugger“ that can handle ELF binaries. ● Get the latest GDB from ftp.gnu.org. ./configure --target=i586-elf --prefix=/usr/local/cc ● We need a bootloader: ● on Linux, build GRUB2 ● on Windows and MacOS, follow the instructions on https://help.ubuntu.com/community/Burg to build BURG ● Run grub-mkrescue to build an ISO image.
    [Show full text]
  • Masters Thesis, Toomas Soome 2018
    UNIVERSITY OF TARTU Institute of Computer Science Computer Science Curriculum Toomas Soome Porting and Developing a Boot Loader Master’s Thesis (30 ECTS) Supervisor(s): Meelis Roos Tartu 2018 Porting and Developing a Boot Loader Abstract: This paper describes the project to replace outdated boot program in illumos project with alternative one, allowing to provide better support for modern and future computer systems and having an architecture to support extending and improving the implementation. Keywords: Boot Loader, Operating System, FreeBSD, illumos CERCS: P175 Informatics, systems theory Boot programmi portimine ja arendamine Lühikokkuvõte: See magistritöö kirjeldab projekti, mille eesmärk oli asendada illumos projektis aegunud boot programm alternatiivsega, mis võimaldab paremini toetada kaasaegseid ja tuleviku süsteeme ning mille arhitektuur võimaldab parenduste ja täienduste kirjutamist. Võtmesõnad: Boot Loader, Operating System, FreeBSD, illumos CERCS: P175 Informaatika, süsteemiteooria 2 Table of Contents 1 Introduction .............................................................................................................. 5 1.1 What is this all about ......................................................................................... 5 2 Boot Loader .............................................................................................................. 6 2.1 Boot Loader Components.................................................................................. 6 Access to the Storage ...............................................................................................
    [Show full text]
  • The GNU GRUB Manual the Grand Unified Bootloader, Version 2.06, 10 May 2021
    the GNU GRUB manual The GRand Unified Bootloader, version 2.06, 10 May 2021. Gordon Matzigkeit Yoshinori K. Okuji Colin Watson Colin D. Bennett This manual is for GNU GRUB (version 2.06, 10 May 2021). Copyright c 1999,2000,2001,2002,2004,2006,2008,2009,2010,2011,2012,2013 Free Software Foundation, Inc. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections. i Table of Contents 1 Introduction to GRUB ::::::::::::::::::::::::: 1 1.1 Overview :::::::::::::::::::::::::::::::::::::::::::::::::::::: 1 1.2 History of GRUB :::::::::::::::::::::::::::::::::::::::::::::: 1 1.3 Differences from previous versions :::::::::::::::::::::::::::::: 2 1.4 GRUB features::::::::::::::::::::::::::::::::::::::::::::::::: 3 1.5 The role of a boot loader ::::::::::::::::::::::::::::::::::::::: 5 2 Naming convention ::::::::::::::::::::::::::::: 7 3 OS-specific notes about grub tools :::::::::::: 9 4 Installation ::::::::::::::::::::::::::::::::::::: 11 4.1 Installing GRUB using grub-install :::::::::::::::::::::::::::: 11 4.2 Making a GRUB bootable CD-ROM :::::::::::::::::::::::::: 12 4.3 The map between BIOS drives and OS devices :::::::::::::::: 13 4.4 BIOS installation ::::::::::::::::::::::::::::::::::::::::::::: 13 5 Booting::::::::::::::::::::::::::::::::::::::::: 15 5.1 How to boot operating systems :::::::::::::::::::::::::::::::: 15 5.1.1 How to boot an OS directly with GRUB ::::::::::::::::::
    [Show full text]
  • UEFI Summer Plugfest 2011
    presented by TrenchBoot and GRUB – A Quick Introduction UEFI 2020 Virtual Plugfest June 16, 2020 Daniel Kiper, Oracle & Daniel P. Smith, Apertus Solutions www.uefi.org 1 Meet the Presenter Daniel Kiper Software Engineer Member Company: Oracle www.uefi.org 2 Agenda • TrenchBoot – What is it? • TrenchBoot and UEFI Secure Boot • TrenchBoot and GRUB – Why? • GRUB - Current State and Challenges • Questions? • Documentation www.uefi.org 3 TrenchBoot • TrenchBoot is a cross-community integration project focused on launch integrity • This means there is no “one thing” that is TrenchBoot • The name was a play off of dealing with the muddy mess of trying to find a way to unify boot integrity • The purpose is to develop a common, unified approach to building trust in the platform through launch integrity • And to work with existing Open Source ecosystem to integrate the approach into their respective projects • The intention here is to have a unified Dynamic Launch approach between Xen, KVM, Linux, BSD(s), and potentially proprietary kernels www.uefi.org 4 Motivation • The idea for TrenchBoot originated in 2014 dealing with the limitations of using tboot to launch Xen for the OpenXT project • Access to the TXT TPM event log is blocked • Conflict over access to the UEFI boot services • Can only measure Multiboot modules that were loaded into memory by the bootloader • Supports only one attestation action: predetermined the PCR manifest verification • Only supports the Intel TXT, no love for AMD’s Secure Startup and other architectures and platforms
    [Show full text]