Patina: a Rust implementation of UEFI firmware

(github.com)

104 points | by hasheddan 11 days ago

4 comments

  • treffer 11 days ago
    Interesting. But who is OpenDevicePartnership?

    Looking at the members on the repository this seems to be a Microsoft project?

    • mariuolo 11 days ago
      Can one even do UEFI firmware projects without at least keeping Microsoft in the loop?

      As far as I remmeber, they control the issuance of keys for bootloaders. Or is this project supposed to do away with that?

      • mjg59 1 hour ago
        If you want to implement UEFI secure boot and verify existing signed objects then you need to incorporate Microsoft-issued certificates into your firmware, but that's very different from needing Microsoft to be in the loop - the certificates are public, you can download them and stick them in anything.
      • 7bit 10 days ago
        Already today you can remove the Microsoft keys from most mein board's UEFI and enroll your own. You can perfectly make your own UEFI implementation without Microsoft.
        • BonusPlay 3 hours ago
          Except that many component manufacturers release their efi capsules signed with Microsoft PKI. So no, you can't fully remove them if you want to verify updates.
          • zamadatix 2 hours ago
            While "So no, you can't fully remove them if you want to verify updates" is a valid point, it's also an answer to a different question than the one asked.
      • pjmlp 11 days ago
        Microsoft even has their own Rust project for UEFI.

        https://microsoft.github.io/mu/

        • zang0 7 days ago
          Patina is a significant evolution of Mu.

          Mu has some bits & pieces of Rust code and EDKII is still the upstream for Mu.

          Patina is 100% Rust DXE Core implemented from spec.

          • CaptainOfCoit 4 hours ago
            Are you somehow related to either projects? You seem to have a good understanding of both pieces :)
      • Luker88 3 hours ago
        Most of the top contributors are @microsoft.com so I would say it's a bit more than just "in the loop".
  • Palomides 3 hours ago
    I couldn't find a list anywhere, does this currently run on any hardware?
  • shmerl 4 hours ago
    Can this be an alternative to TianoCore for qemu/kvm set ups?