Yadda ake sabunta BIOS, UEFI ko Microcode daga Linux

Ka sani yadda ake sabunta BIOS daga kwamfutarka? Tare da raunin yanayi kamar Specter, Meltdown, da duk ire-irensa da sauran ramuka na tsaro waɗanda aka gano a cikin kayan aikin, musamman a cikin CPUs, tabbas kun karanta sau da yawa cewa da yawa daga cikinsu an warware su ta hanyar sanin yadda ake sabunta BIOS ko UEFI na kwamfutarka ., Tunda ana buƙatar sabuntawa ko faci don microcode ɗin da CPU ke amfani da shi kuma don haka ya canza yadda Sashin sarrafa Sipi ɗin yake aiki don kada ya zama mai saurin fuskantar barazanar da aka faɗi.

Baya ga rauni, za a iya sabunta firmware saboda wasu dalilai da yawa, kamar matsalar matsalar kayan masarufi, kurakurai na yau da kullun a cikin software ta hanyar da ba za a iya fassarawa ba, sabuntawa don ƙara wasu ayyuka, da dai sauransu. Amma kamar yadda na ce, a cikin 'yan watannin nan mun ji wannan kalmar sau da yawa saboda matsalolin tsaro wadanda suke da matukar muhimmanci a wasu lokuta kuma hakan ya danganta ne da yadda masu amfani da fasahar zamani ke kula da wasu tsalle-tsalle, cache, FPU da hangen nesa, kodayake a wasu yanayin an gano su a wasu ɓangarorin tsarin kamar su chipsets ko wasu masu sarrafa tsaro waɗanda aka haɗa cikin waɗannan dandamali ...

Menene firmware?

Dukkanmu a bayyane muke game da menene kayan aikin (ɓangaren kwamfuta na zahiri da na taɓawa, watau, lantarki) da software (wannan ɓangaren da ba za a taɓa shi ba: shirye-shirye). Amma tsakanin kayan aiki da kayan aikin, ko kuma, tsakanin kayan aikin da ƙirar tsarin aiki akwai wani abu: firmware. Firmware yana nan a cikin dukkan na'urori da sassan kwamfutar, daga linzamin kwamfuta, da na gani, zuwa GPU da CPU da ke aiki tare da microcode.

Amma menene? To zaka iya cewa shine lambar, ma'ana, software kuma sabili da haka bangaren ma'ana amma wannan lokacin ba'a iya canzawa. Yana aiki a ƙananan matakin, kuma kai tsaye yana sarrafa ayyukan ayyukkan lantarki. Wannan firmware, tare da taimakon masu sarrafawa ko direbobi, tana ba da damar cewa lokacin da kwayar tsarin aiki ke umartar hardware don yin aiki, za ta aiwatar da ita. Wannan masana'antar ko lambar an yi rikodin ta masana'antar na'urar a cikin ƙwaƙwalwar ajiyar da galibi ke haskakawa, ko wani nau'in ROM kamar EEPROM.

Amma ɗayan firmware da ya fi jan hankalin mu a wannan labarin shine BIOS ko UEFI na tsarin, tunda yana da matukar mahimmanci firmware wanda ke da ayyuka daban-daban yayin farawa da aiki da kayan aiki. Misali, wannan lambar tana kula da kunna na'ura yayin farawa, gano rumbun kwamfutoci ko kafofin watsa labarai inda ake da tsarin aiki, aiwatar da wasu cak na tsoma baki tare da wasu firmware na kayan aiki da na kayan aiki, da kuma ba da kwaya a lokacin da tsarin fara farawa ...

Me yasa sabunta shi yake shafar CPU?

… Kuma menene wannan zai yi da CPU, ya isa sosai. Ya fitar da CPUs da sashin sarrafawa, Wannan rukunin sarrafawa yanki ne wanda ke da alhakin sarrafa sauran sassan microprocessor ko CPU, kamar ƙaddamar da umarnin da yin bayanan tare da operands zuwa rijista masu dacewa sannan kunna wasu rukunin aiki kamar ALU ko FPU kuma yana aiwatar da wani aiki akan bayanan dangane da nau'in koyarwar da ake aiwatarwa. Wadannan umarni biyun sun fito ne daga manhaja ko lambar software da ake aiki da ita a wancan lokacin, tunda kamar yadda ya kamata ka sani, shirye-shiryen sun kunshi jerin umarnin ne a jere.

Kamar yadda zaku iya tunanin, wannan rukunin sarrafawa yana aiki a hanyar da mai ƙira ko mai ƙira ya ƙirƙira shi. A wasu takamaiman lamura ana iya amfani da wayoyi mai ɗauke da waya, ma'ana, yawanci suna da saurin gaske amma basu da sassauci sosai, tunda ana aiwatar dasu kai tsaye tare da takamaiman kewaya. A gefe guda, akwai kuma wadanda za'a iya shirya su, ma'ana, da ɗan da'irar "buɗe" wacce zata iya aiki ta wata hanyar ko wata bisa ga a microcode ko firmware. Saboda haka idan muka canza firmware ko microcode zamu iya sanya sashin sarrafawa kuma sabili da haka CPU na iya aiki daban ko gyara wasu kwari ko yanayin rauni.

Ba na son samun fasaha sosai, ina son wannan labarin ya isa ga mutane da yawa yadda zai yiwu kuma duk abin da nake so in faɗi yana da sauƙin fahimta ... Kuma a cikin injuna da yawa ya nuna cewa wannan lambar yawanci ana haɗa ta cikin BIOS ko UEFI , kodayake wani lokacin ana iya sabunta microcode ta kwaya yayin kowane taya, adana sabuntawa ko facin a cikin mawuyacin halin ƙwaƙwalwa, ma'ana, a cikin RAM, guje wa samun canza BIOS / UEFI.

Yaya ake sabunta BIOS / UEFI daga Linux?

Don sabunta BIOS / UEFI daga Linux ko microcode, bari mu ragargaje duka hanyoyin.

Kafin aiwatar da ɗaukaka lambar microcode yana da mahimmanci a gare ku sabunta BIOS / UEFI firmwarekamar yadda in ba haka ba yana iya aiki ba. Don haka bincika gidan yanar gizon mai ba da sabis ɗin ku kamar Phoenix, Award, da dai sauransu, ko gidan yanar gizon goyan bayan ƙirar mahaifiyarku, wanda yawanci yana da fakitoci don sabunta waɗannan tsarin.

Sabunta BIOS / UEFI wani abu ne mai laushi kamar yadda zaku iya gani a cikin ɓangaren ƙarshe akan haɗari. Abin da ya sa nake ba ku shawara kada ku yi idan ba ku tabbatar da abin da kuke yi ba kuma idan kanaso ka sabunta ko kuna buƙatarsa, amma baku da isasshen ilimi, koyaushe ku nemi ƙwararren masani. Bugu da kari, zan baku shawarar duba ayyukan kamar su fwupd, BIOSDisck, Flashrom, da sauransu, waɗanda kayan aiki ne masu amfani waɗanda zasu taimaka mana cikin aikin.

Daya daga cikin wadanda na fi so shi ne flashrom, yana kusan kunshin da ke ba mu kayan aiki hakan yana ba da damar ganowa, karantawa, rubutawa, tabbatarwa, da kuma goge filasha. Wannan ba kawai zai yi amfani da filashi na BIOS / UEFI / CoreBoot ba ne, har ila yau yana aiki ne don canza sauran tunanin filashi na katunan cibiyar sadarwa, GPUs, da sauransu, a cikin wasu na'urori tare da firmware mai sauyawa. Hakanan yana tallafawa tsarin aiki da dama da giya da samfura na na'urori da allon.

• Sanya kunshin flashrom a cikin rarrabawarku ta amfani da manajan kunshin da kuka saba amfani da shi, tunda kayan aiki ne wanda ke cikin mahimman wuraren rarrabawa.
• Usa saiwa ko sudo, tunda don amfani da shi kuna buƙatar gata don zama wani abu mai laushi.
• Gano firmware wanda muke amfani dashi ta hanyar aiwatar da umarnin kawai:

flashrom

• Ina ba ku shawarar ku yi Ajiyayyen ROM ɗinka na yanzu, idan har kun sami cewa sabon sabuntawa ba ya aiki kuma kuna son komawa. A gare shi:

flashrom -r copia_seguridad.bin

• Ee na sani muna da sabon ROM wanda muka zazzage shi daga tushe mai AMINCI, zamu iya amfani da wannan umarnin don walƙiya, misali idan sabon sabuntawarmu ana kiranta uefi-sm.bin:

flashrom -wv uefi-sm.bin

Don ƙarin bayani tuntuɓi jagorar tare da mutum flashrom.

Sabunta microcode:

Don sabunta microcode na CPU ɗinmu, ba tare da taɓa BIOS / UEFI ba, ma'ana, tare da sauƙaƙa sauƙin cikin kernel na Linux, zaku iya zaɓar shigar da buƙatun buƙata don CPU ɗinku. Misali, idan kana da AMD CPU ta zamani, abin al'ada shine shigar da kunshin da ake kira amd64-microcode, kuma don Intel kunshin Intel-microcode (idan kayi amfani da openSUSE, SUSE, RHEL, CentOS, da sauransu, ana kiran kunshin microcode_ctl, da kuma Arch intel-ucode ko amd-ucode ...) wanda zaku iya samu akan gidajen yanar sadarwar da kuka aminta dasu ... (cewa idan na'urar x86 ce, ​​idan ta ARM ce ko kuma ta daban, tafi shafin yanar gizon masana'anta). Insisto a pesar de parecer un pesado, no descargues este tipo de paquetes desde fuentes desconocidas, es muy importante. Bien, ahora que ya lo tenemos descargado e instalado, puede que el procedimiento sea diferente en cada distribución y que implique activar algunos paquetes o actualizaciones restringidos como los propietarios…

Tare da waɗancan fakitin da aka girka kuma saitunan tsarin tsarin ingantaccen tsari an tsara su sosai, lmallaki bayanan tsaro wanda ya girka tsarin aiki zai riga ya hada da wannan nau'ikan facin microcode idan an gano wasu larura masu tsanani, kamar su Specter, Meltdown, da sauransu.

Idan kanaso, zaka iya samun bayanan microcode daga damunka ta amfani da:

dmesg | grep microcode

Kuma da wannan zamu samu cikakkun bayanai na microcodeA zahiri, idan mun aiwatar da wannan umarnin kafin girka abubuwanda na ambata a baya (bayan girka ya zama dole a sake kunnawa) kuma daga baya, zamu ga cewa yana nuna mana canje-canje idan akwai sabuntawa da aka girka.

Wani lokaci AMD, Intel, da sauran masana'antun CPU ko masu zane suna ba da kwallun kwalba tare da goge biary don sabunta microcode ko firmware. Idan kun sauke ɗayan waɗannan fakitin daga wuri mai dogaro, bi umarnin da mai rarraba ya bayar ko tuntuɓi fayilolin README.

Haɗari da nasihu kafin sabunta BIOS

Sabunta firmware ko microcode na CPU yana nufin a mafi yawan lokuta sabunta lambobin da masu samar da CPU ke bayarwa waɗanda muke da su, rufe direbobin kernel (biary blobs), da dai sauransu. Ina so in fayyace wannan, tunda ba a san abin da ke ciki da hanyar aiki ba kuma da alama ya kamata ku sani. A ka'ida, idan baku yi amfani da kayan aikin kyauta ba, ba ku da wani zaɓi face ku amince da mai ƙera ko zanen CPU ɗinku ko katunan mahaifa, amma a, kar a taɓa saukar da microcode ko firmware daga shafukan yanar gizo marasa izini, tunda wani abu ne mai matukar kyau.

A gaskiya ba wai kawai ba yana da m saboda dalilan tsaro, tunda kuma zaka iya sanya kayan aikin kwata-kwata basa iya amfani dasu. Ko da kun sauko da firmware daga gidan yanar gizon da aka amince da su, wani abu na iya yin kuskure yayin aikin, kamar katsewar wutar lantarki kuma hakan yana barin shigarwar sabuntawa da firmware kwata-kwata, wanda ke nufin cewa mai yiwuwa kuna tunanin yin kashe kuɗi don saya sabon katako.

Wannan shine abin da aka sani da kalmar bulo a cikin irin harshe na dabam, ma'ana, bar kayan aikinka kamar bulo, ba tare da kowane irin amfani ba. Da wannan nake so in fada muku kuyi taka-tsantsan kuma ba mu da alhakin abin da zai iya faruwa idan kuka yanke shawarar sabunta duk wata firmware ko kunna BIOS / EFI. Amma ku kiyaye, wannan koyaushe baya nuna haɗari, kamar yadda na faɗa muku a baya, ba lallai bane koyaushe a "taɓa" BIOS / EFI, akwai kuma sabuntawa waɗanda kawai suke a matakin OS kuma ba sa nuni da waɗancan haɗarin .. .

Ina fatan wannan koyarwar ta kasance mai amfani, duk wata tambaya ko shawarwari, kar ku manta da barin naku comentarios...