Kwiintsuku ezimbalwa ezidlulileyo Abaphuhlisi be-9 bakhululwe Ngokuthumela blog yakho, Iindaba zokufakwa kwekhowudi yeCoreBoot kwibhodi yomama yesupermicro X11SSH-TF.
Utshintsho sele lubandakanyiwe kwisiseko sekhowudi engundoqo yeCoreBoot kwaye iya kubandakanywa kukhululo olukhulu olulandelayo. ISupermicro X11SSH-TF yibhodi yomama yokuqala esekwe kwisiseko se-Intel Xeon processor esiza kusetyenziswa neCoreBoot.
Isizathu sezibuko leCoreBoot kwibhodi, ngamagama abaphuhlisi:
Uphuhliso lwefirmware yomthombo ovaliweyo ibingumgangatho wefektri kushishino lwe-elektroniki ukusukela oko yaqalwa.
Ayitshintshanga nangona umthombo ovulekileyo ususwe kwezinye iindawo. Ngoku, ngokutshintsha iimeko zokusetyenziswa kunye neemfuno ezingqongqo zokhuseleko, kubaluleke ngakumbi kunangaphambili ukuthatha umthombo ovulekileyo wophuculo lwefirmware kwinqanaba elilandelayo.
Kwibhodi yomama sinokukhankanya ezinye zeempawu zayo ezi:
- I-LGA1151, iyahambelana ne-Intel Xeon E3-1200 v5 processor; Ixhasa iprosesa yesithandathu ye-Intel Core i3 / Pentium / Celeron processors Ixhasa ukuya kuthi ga kwi-6W TDP
- IChipset: Intel C236
- Imemori: 4x DDR4-2133 / 1866/1600 288-pin DIMM slots, ECC, unbuffered, 64GB ubuninzi
- Imimandla: I-1x PCI-Express 3.0 x8 slot, i-1x PCI-Express 3.0 x4 slot (ibaleka kwiX2)
- I-SATA: 8x SATA3 port, inkxaso RAID 0, 1, 5, 10
- Ifom yefom: MicroATX, 9.6 x 9.6 intshi / 24.4 x 24.4 cm
Malunga neCoreBoot
Kulungiselelwe abo bangazaziyo iCoreBoot, kuya kufuneka uyazi loo nto lo ngowona mthombo uvulekileyo kwinkqubo yesiqhelo ye-I / O yesiqhelo (BIOS) eyayisele ikwi-PCs ze-MS-DOS 80s kwaye iyitshintsha nge-UEFI (Unified Extensible).
I-CoreBoot ikwayi-analog yasimahla yokuthengisa i-firmware kwaye iyafumaneka ukuqinisekisa ngokupheleleyo kunye nokuphicothwa. I-CoreBoot isetyenziswa njenge-firmware esisiseko sokuqaliswa kwezixhobo kunye nolungelelwaniso lwesiqalo.
Kubandakanywa ukuqaliswa kwe-chip chip, i-PCIe, i-SATA, i-USB, i-RS232. Kwangelo xesha, i-FSP 2.0 (Intel Firmware Support Package) ye-binary element kunye ne-firmware ye-Intel ME esezantsi kwenkqubo, ekufuneka iqalise kwaye isungule i-CPU kunye ne-chipset, zidityanisiwe kwi-CoreBoot.
Kuyinyani ukuba iCoreBoot ayikaziwa kakhulu okwangoku, kodwa kubalulekile ukuba uqaphele ukuba le projekthi itsala umdla wabaninzi kunye ne-NSA, ukusukela ukuphela kukaJuni kulo nyaka.
Le arhente yezokhuseleko yabela abanye abaphuhlisi ukuba baxhase iprojekthi (nangona le ntshukumo ingabonwanga kakuhle ngabaninzi).
Nangona siyishiya ecaleni le ndawo, ngale nto sinokulinganisa kancinci malunga nokubaluleka kweprojekthi eqala ukuyifumana.
Malunga nokufaka i-CoreBoot kwi-X11SSH-TF
Umsebenzi zenzeka ngokudibeneyo VPN umboneleli Mullvad njengenxalenye yenkqubo yokwenziwa kwezinto elubala, ngeenjongo zokuphucula ukhuseleko lwezixhobo zomncedisi kunye nokususa izinto ezinobunini obungenakulawulwa.
Ukuqala inkqubo yokusebenza abaphuhlisi bacebise ukusebenzisa i-SeaBios okanye i-linuxboot (Isicelo esisekwe kwi-UEFI iTianocore ayixhaswanga ngenxa yokungahambelani nenkqubo yemizobo ye-Aspeed NGI, isebenza kuphela kwimowudi yokubhaliweyo).
Kanye nokongeza inkxaso yebhodi kwiCoreBoot, Abathathi-nxaxheba beprojekthi nabo iphumeze inkxaso ye-TPM (Imodyuli yeQonga elithembekileyo) 1.2 / 2.0 esekwe kwi-Intel ME kwaye balungiselela umqhubi we-ASPEED 2400 SuperI / O isilawuli, esenza imisebenzi ye-BMC (Isilawuli soLawulo lweBasboard).
Ukulawula kude ibhodi, Unxibelelwano lwe-IPMI olunikezwe ngumlawuli we-BMC AST2400, kodwa ukusebenzisa i-IPMI, i-firmware yoqobo kufuneka ifakwe kumlawuli we-BMC.
Ukongeza ukusebenza kokungqinisisa okuqinisekisiweyo kuphunyeziwe kwaye isuperiotool eluncedo yongeze inkxaso ye-AST2400 kunye ne-Inteltool ye-Intel Xeon E3-1200 inkxaso.
Gqibela Bakwakhankanya ukuba i-Intel SGX (i-Software Guard Extensions) ayixhaswa okwangoku ngenxa yemicimbi yozinzo.
Ngaphandle kwamathandabuzo eli linyathelo le ukuphunyezwa kweCoreBoot Ndiqhubekile nokwenza indlela yam, njengoko uninzi lwabaphuhlisi luza kubamba ingqalelo kwaye luya kulandela ekhondweni labaphuhlisi be9elements.