diff options
Diffstat (limited to 'www')
| -rw-r--r-- | www/conduct.md | 9 | ||||
| -rw-r--r-- | www/download.md | 2 | ||||
| -rw-r--r-- | www/faq.md | 42 | ||||
| -rw-r--r-- | www/git.md | 26 | ||||
| -rw-r--r-- | www/index.md | 5 | ||||
| -rw-r--r-- | www/management.md | 12 | ||||
| -rw-r--r-- | www/news/MANIFEST | 2 | ||||
| -rw-r--r-- | www/news/alyssa-resignation.md | 77 | ||||
| -rw-r--r-- | www/news/talos.md | 41 | ||||
| -rw-r--r-- | www/suppliers.md | 24 |
10 files changed, 191 insertions, 49 deletions
diff --git a/www/conduct.md b/www/conduct.md index aa8bea1e..313321c0 100644 --- a/www/conduct.md +++ b/www/conduct.md @@ -82,14 +82,13 @@ Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting one of the moderators privately via IRC private message (see list below): -* Alyssa Rosenzweig: **alyssa** on Freenode -* Andrew Robbins: **and\_who** on Freenode +* Andrew Robbins: **and\_who** on Freenode, email <mailto:andrew@libreboot.org> * Jason Self: **jxself** on Freenode -* Leah Rowe: **\_4of7** on Freenode +* Leah Rowe: **\_4of7** on Freenode, email <mailto:leah@libreboot.org> * Paul Kocialkowski: **paulk-X** Freenode (X is variable, for this - person. + person, email <mailto:paul@libreboot.org> check in the channel) -* Swift Geek: **swiftgeek** on Freenode +* Swift Geek: **swiftgeek** on Freenode, email <mailto:swiftgeek@libreboot.org> If the complaint is for abuses on the Libreboot subreddit at [r/libreboot](https://www.reddit.com/r/libreboot/) then there are a separate diff --git a/www/download.md b/www/download.md index 18155a9c..38215118 100644 --- a/www/download.md +++ b/www/download.md @@ -49,6 +49,8 @@ Project, USA) <https://elgrande74.net/libreboot/> (elgrande74.net, France) +<https://nephelai.zanity.net/mirror/libreboot/> (zanity.net, New Zealand) + RSYNC mirrors {#rsync} ------------- @@ -17,7 +17,20 @@ Flashrom complains about DEVMEM access If running `flashrom -p internal` for software based flashing, and you get an error related to /dev/mem access, you should reboot with `iomem=relaxed` kernel parameter before running flashrom, or use a kernel -that has `CONFIG\_STRICT\_DEVMEM` not enabled. +that has `CONFIG_STRICT_DEVMEM` and `CONFIG_IO_STRICT_DEVMEM` not enabled. + +Example flashrom output with both `CONFIG_STRICT_DEVMEM` and `CONFIG_IO_STRICT_DEVMEM` enabled: +``` +flashrom v0.9.9-r1955 on Linux 4.11.9-1-ARCH (x86_64) +flashrom is free software, get the source code at https://flashrom.org + +Calibrating delay loop... OK. +Error accessing high tables, 0x100000 bytes at 0x000000007fb5d000 +/dev/mem mmap failed: Operation not permitted +Failed getting access to coreboot high tables. +Error accessing DMI Table, 0x1000 bytes at 0x000000007fb27000 +/dev/mem mmap failed: Operation not permitted +``` The backlight is darker on the left side of the screen when lowering the brightness on my X200/T400/T500/R400 --------------------------------------------------------------------------------------------------------------- @@ -78,6 +91,30 @@ What systems are compatible with libreboot? [See here](docs/hardware/). +Will the Purism laptops be supported? +---------------------------------------------------------------------- + +Short answer: no. + +There are severe privacy, security and freedom issues with these laptops, due +to the Intel chipsets that they use. See: + +- [Intel Management Engine](#intelme) +- [More freedom issues on modern Intel hardware](#intel) + +Most notably, these laptops also use the Intel FSP binary blob, for the entire +hardware initialization. Coreboot does support a particular revision of one of +their laptops, but most are either unsupported or rely on binary blobs for most +of the hardware initialization. + +In particular, the Intel Management Engine is a severe threat to privacy and +security, not to mention freedom, since it is a remote backdoor that provides +Intel remote access to a computer where it is present. + +Intel themselves even admitted it, publicly. + +The Libreboot project recommends avoiding all hardware sold by Purism. + Why is the latest Intel hardware unsupported in libreboot? {#intel} ----------------------------------------------------------- @@ -444,7 +481,8 @@ What *can* I use, then? {#whatcaniuse} ------------------------- Libreboot has support for fam15h AMD hardware (~2012 gen) and some -older Intel platforms (~2006-2009 gen). We also have support for some +older Intel platforms like Napa, Montevina, Eagle Lake, Lakeport (2004-2006). +We also have support for some ARM chipsets (rk3288). On the Intel side, we're also interested in some of the chipsets that use Atom CPUs (rebranded from older chipsets, mostly using ich7-based southbridges). @@ -8,8 +8,7 @@ Download Libreboot from the Git repository like so: $ git clone https://notabug.org/libreboot/libreboot.git You can submit your patches via -[Notabug pull requests](#how-to-submit-your-patches-via-pull-requests) or -[via mailing list](#how-to-submit-your-patches-via-mailing-list). +[Notabug pull requests](#how-to-submit-your-patches-via-pull-requests). Information about how the Libreboot project is governed is documented in our [general management guidelines](management.md). @@ -92,26 +91,3 @@ have your own Git repository with the patches. Once you have issued a Pull Request, the Libreboot maintainers will be notified via email. If you do not receive a fast enough response from the project, then you could also notify the project via the #libreboot channel on Freenode. - -How to submit your patches (via mailing list) ---------------------------------------------- - -We also have a mailing list at -[development@libreboot.org](mailto:development@libreboot.org) - -Information about this mailing list, including how to subscribe, can be found -at <https://libreboot.org/lists/>. - -Archives of previous discussion on this mailing list can be found at -<https://libreboot.org/pipermail/development/>. - -The mailing list software in use is -[GNU Mailman](https://www.gnu.org/software/mailman/), so the way to use it is -the same as on other libre software projects. - -If you prefer, you can submit patches the old-fashioned (as some may say, -proper) way by sending them to our mailing list. Code review by our -[maintainers](management.md) is done on both Notabug and on the mailing list. - -Once approved, your patch will be merged in the master branch of the main Git -repository. diff --git a/www/index.md b/www/index.md index a091e45d..e9faa3f8 100644 --- a/www/index.md +++ b/www/index.md @@ -10,7 +10,6 @@ mascot"){#logo}](faq.md#who-did-the-logo) [Install](docs/install/) -- [Docs](docs/) -- [News](news/) -- -[Lists](lists/) -- [Chat](https://webchat.freenode.net/?channels=libreboot) -- [Bugs](https://notabug.org/libreboot/libreboot/issues) -- [Send patches](git.md) -- @@ -23,8 +22,8 @@ operating system. It is also available preinstalled from We provide user support via [\#libreboot IRC](https://webchat.freenode.net/?channels=libreboot) on Freenode. Development -discussion also occurs on IRC, and on our [mailing list](lists/). Instructions -for sending patches are [here](git.md). +discussion also occurs on IRC. Instructions for sending patches are +[here](git.md). Why use Libreboot? ------------------ diff --git a/www/management.md b/www/management.md index ddfba09b..b05a1826 100644 --- a/www/management.md +++ b/www/management.md @@ -27,14 +27,14 @@ List of members in the core management team In alphabetical order: -- Alyssa Rosenzweig is sysadmin and Public Relations manager. - IRC nick **alyssa**. -- Andrew Robbins is a core developer. IRC nick **and\_who** +- Andrew Robbins is a core developer. IRC nick **and\_who**, email + <mailto:andrew@libreboot.org> - Paul Kocialkowski is a core developer. IRC nick **paulk-X** - (**X** is variable, and changes over time) + (**X** is variable, and changes over time), email <mailto:paul@libreboot.org> - Leah Rowe is a core developer (and project founder). IRC nick - **\_4of7** -- Swift Geek is a core developer. IRC nick **swiftgeek** + **\_4of7**, email <mailto:leah@libreboot.org> +- Swift Geek is a core developer. IRC nick **swiftgeek**, email + <mailto:swiftgeek@libreboot.org> Generally, the people on this list have these responsibilities: diff --git a/www/news/MANIFEST b/www/news/MANIFEST index e5e34cf0..a774d19e 100644 --- a/www/news/MANIFEST +++ b/www/news/MANIFEST @@ -1,3 +1,5 @@ +news/alyssa-resignation.md +news/talos.md news/new-mailing-lists.md news/andrew-robbins-new-maintainer.md news/formalised-structure.md diff --git a/www/news/alyssa-resignation.md b/www/news/alyssa-resignation.md new file mode 100644 index 00000000..2333db0b --- /dev/null +++ b/www/news/alyssa-resignation.md @@ -0,0 +1,77 @@ +% Alyssa Rosenzweig has resigned from the Libreboot project +% Leah Rowe +% 1 September 2017 + +Alyssa Rosenzweig has notified the rest of the team (Andrew Robbins, Paul +Kocialkowski, Leah Rowe and Swift Geek) of her intention to step down from the +core management team, as per [our management guidelines](../management.md), +due to increased pressure from school studies which prevent her from having +time to contribute. + +In her email, she wishes the Libreboot project well and states that she intends +to continue contributing in the future. + +I, Leah Rowe, wish Alyssa all the best in life, and I'm sure that this will be +felt by the other maintainers in Libreboot, and I'm extremely grateful for the +numerous invaluable contributions that she made to the project. + +A note about the hosting infrastructure, and sysadmin tasks +----------------------------------------------------------- + +Alyssa was previously acting as the system administrator for the Libreboot +project, in charge of maintaining the project's infrastructure. Additionally, +she was acting as Public Relations manager for the project; in particular, she +was handling Libreboot's application to join the GNU project. + +I have since assumed these responsibilities, at least for the time being, and +I will be working alongside the other members of the team going forward. +Since Alyssa had stepped down, nobody was in place to maintain the hosting +infrastructure for the project. Our old hosting provider was giving us issues, +so we switched hosting provider; this means that I'm currently maintaining the +hosting infrastructure for the project, since nobody else was willing to. + +The only piece of infrastructure currently missing is the mailing list. We now +have a fully functional mail server, and I will finish studying and installing +GNU Mailman version 3 (the software that will be used for handling the mailing +list). There are currently no repositories available for it on the GNU+Linux +distribution that libreboot.org uses (Debian), so we will have to maintain it +ourselves. + +Swift Geek also works alongside me, for sysadmin tasks, and has been +particularly helpful in advising on good practises for the setup of the new +mail server. I myself haven't had time to work on it for a while, but it will +be up soon. The mailing list that Alyssa created was only online for a week, +before we had to switch hosting provider for the project, and nobody had +started using it yet, so downtime for the mailing list hasn't been a huge +issue; people use the Notabug instance, and IRC. + +I will issue another news post, once the new mailing list is online. For the +time being, the links to it have been removed on the website. + +The mail server itself is online, so the 4 of us on the team now have +libreboot.org email addresses; these are published on the +[governance page](../management.md). If anyone wishes to contact a member of +the project directly via email, we recommend that you use these email +addresses. + +Of interest: the new hosting infrastructure for libreboot.org is entirely +libre. The main router on that network is a Libreboot system, with the router software +running on top of GNU+Linux. The server for libreboot.org (web and mail server) +is also a Libreboot system with GNU+Linux; postfix and dovecot for the mail +server, and nginx for the web server. DNS is also planned (the DNS hosting is +currently outsourced). + +Of further interest: libreboot.org is now IPv6-ready. All services are +dual stack IPv4+IPv6. Stronger encryption is used in the TLS configuration for +nginx aswell, for HTTPS, and HSTS is enabled by default. + +The certificate authority used for TLS is Let's Encrypt. This is used for +HTTPS and for encrypted connections to the mail server. + +The new hosting infrastructure is also much more secure than the previous one, +not just because Libreboot powers it but because of special configurations made +on externally accessible services (such as SSH and email). + +I am currently looking for a new colocation provider, but the hardware used +for hosting should be stable from now on. I have found one, which I'm looking +into, but I'm also considering other options. diff --git a/www/news/talos.md b/www/news/talos.md new file mode 100644 index 00000000..724934b0 --- /dev/null +++ b/www/news/talos.md @@ -0,0 +1,41 @@ +% TALOS II Secure Workstation, from Raptor Engineering +% Leah Rowe +% 15 August 2017 + +Recently, [Raptor Engineering](https://www.raptorcs.com/TALOSII/) has launched +a new series of workstation and server computers. These are high-end systems, +using the libre IBM POWER9 architecture, and the boot firmware is entirely +Free Software like Libreboot. + +This is the *first* OEM producing *high-end* systems, from the factory assembly +line, with completely libre boot firmware. The boot firmware, operating system +and everything else is entirely Free Software. While not technically libreboot, +the boot firmware on TALOS II is Free Software, so it was decided that the +TALOS II would be promoted here on libreboot.org. + +If you are in the market for a high-end, secure workstation or server with +100% free boot firmware (like Libreboot) and operating system, produced by +an OEM *hardware manufacturer* that cares about freedom, look no further than +the TALOS II from Raptor Engineering! + +Their website for pre-orders is here: +<https://www.raptorcs.com/TALOSII/> + +An entry for the TALOS II has also been added to the +[suppliers page](../suppliers.md) on libreboot.org. + +Raptor Engineering is the same company that ported the ASUS KFSN4-DRE, +KPGE-D16 and KCMA-D8 motherboards to Libreboot. In addition, they added support +for Hybrid Graphics on the ThinkPad T400 which Libreboot supports, enabling +those laptops to be used in freedom (with the AMD GPU disabled, in favour of +the Intel GPU which Libreboot has free video initialization for). + +In response to the TALOS II launch I, Leah Rowe, have removed the Libreboot D16 +(TALOS II's main competitor) from minifree.org, and removed the Minifree D16 +entries from the [suppliers page](../suppliers.md) on libreboot.org. +I encourage Vikings and Technoethical, also present on that suppliers page, to +do the same and discontinue their D16 products. The TALOS II is very important +for the future of free, libre computing and indeed the free software community +as a whole; if TALOS II fails, we will be stuck for a very long time without +any viable high-end workstations that are libre. High-end hardware is necessary +for modern software development. diff --git a/www/suppliers.md b/www/suppliers.md index 89d6a050..2c61164f 100644 --- a/www/suppliers.md +++ b/www/suppliers.md @@ -24,14 +24,6 @@ Laptops: - [Libreboot T400 laptop](https://minifree.org/product/libreboot-t400/) (FSF RYF certified) -Desktops: - -- [Libreboot D16 desktop/workstation](https://minifree.org/product/libreboot-d16/) - -Servers: - -- [Libreboot D16 server](https://minifree.org/product/libreboot-d16-server/) - Services: - [Libreboot installation service](https://minifree.org/product/libreboot-installation-service/) @@ -43,6 +35,22 @@ Merchendise: - [Libreboot X200 docking station](https://minifree.org/product/docking-station-for-libreboot-x200/) - [Libreboot stickers](https://minifree.org/product/libreboot-stickers/) +Raptor Engineering +------------------ + +Raptor is the world's first libre OEM, producing systems with libre boot +firmware and operating system preinstalled, *from the factory*. + +Website for pre-orders: +<https://www.raptorcs.com/TALOSII/> + +NOTE: this isn't technically Libreboot, but the boot firmware is entirely free. + +This is the same company that ported the ASUS KFSN4-DRE, KGPE-D16 and KCMA-D8 +mainboards to Libreboot. Raptor has also helped improve other ports in Libreboot, +for instance they added support for *switchable graphics* on the ThinkPad T400 +which Libreboot supports. + Technoethical ------------- |