Ungayibuyekeza kanjani i-BIOS, i-UEFI noma i-Microcode kusuka ku-Linux

Uyazi kanjani ukuvuselela i-BIOS kusuka ku-PC yakho? Ngokukhubazeka okufana ne-Specter, Meltdown, nakho konke ukwahluka kwayo nezinye izimbobo zokuphepha ezitholakele kwi-hardware, ikakhulukazi kuma-CPUs, usuke wafunda kaningi ukuthi eziningi zazo zixazululwa ngokwazi ukuvuselela i-BIOS noma i-UEFI yekhompyutha yakho ., njengoba ukuvuselelwa noma isichibi kuyadingeka kumakhrokhodi esetshenziswa yi-CPU futhi ngaleyo ndlela iguqule indlela i-CPU Control Unit esebenza ngayo ukuze ingabi sengozini yezinsongo ezishiwoyo.

Ngaphezu kokukhubazeka, i-firmware ingabuyekezwa ngezinye izizathu eziningi, njengokungasebenzi kahle kwedivayisi yehadiwe, amaphutha aqhubekayo kusoftware ngendlela engachazeki, izibuyekezo zokwengeza ukusebenza okuthile, njll. Kepha njengoba ngishilo, ezinyangeni ezedlule silizwe kaningi kakhulu leli themu ngenxa yezinkinga zokuphepha ezibucayi kwezinye izimo futhi ezihlobene nendlela abasebenza ngayo ama-microprocessor banamuhla abamba ngayo ukweqa okuthile, i-cache, i-FPU nokwenziwa kokuqagela, noma kwezinye izimo zitholakele kwezinye izingxenye zohlelo ezifana nama-chipset noma ama-processor athile okuphepha ahlanganiswe kulezi zingxenyekazi ...

Yini i-firmware?

Sonke sicacile ngokusobala ukuthi iyiphi i-hardware (ingxenye ebonakalayo yekhompyutha, okungukuthi, i-electronics) kanye nesoftware (leyo ngxenye enengqondo engathintwa: izinhlelo). Kepha phakathi kwehardware nesoftware, noma kunalokho, phakathi kwehardware kanye ne-kernel yohlelo lokusebenza kukhona okunye: i-firmware. I-Firmware ikhona kuwo wonke amadivayisi nezingxenye zekhompyutha, kusuka kwigundane, i-optical drive, kuye kwi-GPU ne-CPU esebenza nge-microcode.

Kodwa kuyini? Ungakusho lokho ikhodi, okusho ukuthi, isoftware ngakho-ke into enengqondo kepha kulokhu ayinakuguqulwa. Isebenza ezingeni eliphansi, futhi ilawula ngqo ukusebenza kwamasekethe kagesi. Le firmware, ngosizo lwabalawuli noma abashayeli, ivumela ukuthi lapho uhlelo lokusebenza lwe-kernel luyala i-hardware ukuthi yenze umsebenzi, izoyenza. Lolu hlelo noma ikhodi iqoshwe ngumenzi wedivayisi kwimemori evame ukukhanya, noma uhlobo oluthile lwe-ROM njenge-EEPROM.

Kepha enye ye-firmware esiyithandayo kakhulu kule ndatshana yi- I-BIOS noma i-UEFI yohlelo, ngoba iyi-firmware ebaluleke kakhulu enemisebenzi eyahlukahlukene ngesikhathi sokuqala nokusebenza kwemishini. Isibonelo, le khodi inesibopho sokusebenzisa umshini ngesikhathi sokuqalisa, ukuthola amadrayivu anzima noma imidiya lapho kunohlelo lokusebenza olutholakalayo, ukwenza amasheke athile okuphazamisa enye i-firmware yezingxenye nezinto zokwenziwa, nokunikeza amandla ku-kernel lapho uhlelo luqala ukuqala ...

Kungani ukuvuselela kuthinta i-CPU?

… Futhi lokhu kuhlangene ngani ne-CPU, ngokwanele. Kuvela ukuthi ama-CPU anayo iyunithi yokulawula, Le yunithi yokulawula isekethe elibhekele ukulawula zonke ezinye izingxenye ze-microprocessor noma i-CPU, njengokukhipha imiyalo imiyalo nokwenza idatha ne-opharetha iye kumarejista afanele bese kusebenze enye iyunithi esebenzayo njenge-ALU noma i-FPU nokuthi yenza ukusebenza okuthile kudatha ngokuya ngohlobo lwemiyalo eyenziwayo. Le miyalo nayo ivela ohlelweni noma ikhodi yesoftware esetshenziswayo ngaleso sikhathi, ngoba njengoba kufanele wazi, izinhlelo zenziwa ngochungechunge lwemiyalo elandelanayo.

Njengoba ungacabanga, le yunithi yokulawula isebenza ngendlela eyenziwe ngumenzi noma umklami wayo. Kwezinye izimo ezithile iyunithi yokulawula ingaxhunywa, okungukuthi, imvamisa iyashesha kepha ayiguquguquki, ngoba yenziwa ngqo ngamasekethe athile. Ngakolunye uhlangothi, kukhona futhi okungahleleka, okungukuthi, amasekethe "avulekile" athe xaxa angasebenza ngandlela thile ngokusho i-microcode noma i-firmware. Ngakho-ke kulandela ukuthi uma siguqula i-firmware noma i-microcode singenza iyunithi yokulawula ngakho-ke i-CPU ingasebenza ngokuhlukile noma ilungise ezinye izimbungulu noma ukuba sengozini.

Angifuni ukwenza ubuchwepheshe kakhulu, ngifuna ukuthi le ndatshana ifinyelele kubantu abaningi ngangokunokwenzeka nokuthi konke engifuna ukukusho kuqondakala kalula ... Futhi emishinini eminingi kuvela ukuthi le khodi ivame ukuhlanganiswa I-BIOS noma i-UEFI , yize kwesinye isikhathi i-microcode ingabuyekezwa yi-kernel ngesikhathi ngasinye sebhuthi, isindisa isibuyekezo noma i-patch kwimemori eshintshashintshayo, okungukuthi, kwi-RAM, igwema isidingo sokuguqula i-BIOS / UEFI.

Ungayivuselela kanjani i-BIOS / UEFI kusuka eLinux?

Ukuvuselela i-BIOS / UEFI kusuka ku-Linux noma i-microcode, ake sihlukane zombili izinqubo.

Ngaphambi kokwenza isibuyekezo se-microcode kubaluleke kakhulu ukuthi unayo kubuyekezwe i-firmware ye-BIOS / UEFInjengoba kungenjalo kungenzeka kungasebenzi. Ngakho-ke hlola iwebhusayithi yomhlinzeki wakho we-firmwre njengePhoenix, i-Award, njll., Noma iwebhusayithi yokusekela ezobuchwepheshe yemodeli yakho yebhodi lomama, evame ukuba namaphakheji wokuvuselela lezi zinhlelo.

Ukuvuselela i-BIOS / UEFI kuyinto ebucayi njengoba ubona esigabeni sokugcina ngobungozi. Yingakho ngikweluleka ngokuthi ungakwenzi uma ungaqiniseki ukuthi wenzani futhi uma ufuna ukuvuselela noma uyaludinga, kepha awunalo ulwazi olwanele, hlala uthintana nochwepheshe. Ngaphezu kwalokho, ngincoma ukuthi ubheke amaphrojekthi afana ne-fwupd, i-BIOSDisck, i-Flashrom, njll, okungamathuluzi asebenzisekayo azosisiza kule nqubo.

Esinye sezinto engizithanda kakhulu ukuthi I-Flashrom, imayelana iphakethe elisinika ithuluzi evumela ukukhomba, ukufunda, ukubhala, ukuqinisekisa, nokusula ama-flash chips. Lokhu akusebenzi ukukhanyisa i-BIOS / UEFI / CoreBoot kuphela, futhi kusebenza ukuguqula ezinye izinkumbulo ze-flash zamakhadi enethiwekhi, ama-GPU, njll., Kwamanye amadivayisi ane-firmware eguquguqukayo. Iphinde isekele izinhlelo ezahlukahlukene zokusebenza nenqwaba yamagiya namamodeli wamadivayisi namabhodi.

• Faka iphakethe le-flashrom ekusabalaliseni kwakho usebenzisa imenenja yephakeji ovame ukuyisebenzisa, ngoba iyithuluzi eliphakathi kwenqolobane yokusabalalisa okubaluleke kakhulu.
• Usa impande noma iSudo, ngoba ukuze uyisebenzise udinga amalungelo ukuze ube yinto ethambile.
• Khomba i-firmware esisebenzisa ngokumane senze umyalo:

flashrom

• Ngincoma ukuthi wenze ifayela le- yenza isipele i-ROM yakho yamanje, uma kwenzeka uthola ukuthi isibuyekezo esisha asisebenzi futhi ufuna ukubuyela emuva. Okwakho:

flashrom -r copia_seguridad.bin

• Yebo Ngiyazi sineROM entsha esilande emthonjeni othembekile, singasebenzisa umyalo olandelayo ukukhanyisa, isibonelo uma isibuyekezo sethu esisha sibizwa ngokuthi uefi-sm.bin:

flashrom -wv uefi-sm.bin

Ngeminye imininingwane xhumana nencwajana no umuntu flashrom.

Buyekeza i-microcode:

Ukuvuselela i-microcode ye-CPU yethu, ngaphandle kokuthinta i-BIOS / UEFI, okungukuthi, ngokuguqulwa okulula ku-Linux kernel, ungakhetha ukufaka amaphakheji adingekayo we-CPU yakho. Isibonelo, uma une-AMD CPU yesimanje, into ejwayelekile ukuthi faka iphakheji kubizwa i-amd64-microcode, kanye ne-Intel iphakethe Intel-microcode (uma usebenzisa i-openSUSE, SUSE, RHEL, CentOS, njll., iphakethe libizwa microcode_ctl, naku-Arch Intel-ucode noma i-amd-ucode ...) ongayithola kumawebhusayithi athembekile ... (ukuthi uma kungumshini we-x86, uma uyi-ARM noma uhlukile, iya kuwebhusayithi yomenzi). Insisto a pesar de parecer un pesado, no descargues este tipo de paquetes desde fuentes desconocidas, es muy importante. Bien, ahora que ya lo tenemos descargado e instalado, puede que el procedimiento sea diferente en cada distribución y que implique activar algunos paquetes o actualizaciones restringidos como los propietarios…

Ngalawo mapakeji afakiwe nezilungiselelo zesistimu ezibonisa izibuyekezo ezilungiselelwe kahle, lizibuyekezo zakho zokuphepha okufaka isistimu yokusebenza kuzobe sekuvele kufaka lolu hlobo lwamachashazi e-microcode uma kutholakala ubungozi obuthize, njengeSpecter, Meltdown, njll.

Uma ufuna, ungathola imininingwane ye-microcode kusuka ku-distro yakho usebenzisa:

dmesg | grep microcode

Futhi ngalokho sizokuthola imininingwane ye-microcodeEqinisweni, uma senze lo myalo ngaphambi kokufaka amaphakheji ebengishilo ngaphambili (ngemuva kokufaka kuyadingeka ukuqala kabusha) nangemva kwalokho, sizobona ukuthi kusikhombisa izinguquko uma ngabe kukhona isibuyekezo esikhona esifakiwe.

Kwesinye isikhathi i-AMD, i-Intel, nabanye abakhiqizi be-CPU noma abaklami banikezela ngamabhola ama-tarball ngamabhuloki kanambambili ukuvuselela i-microcode noma i-firmware. Uma ngabe ulande eyodwa yalamaphakeji endaweni ethembekile, landela imiyalo enikezwe ngumsabalalisi noma thintana namafayela we-README.

Izingozi namathiphu ngaphambi kokubuyekeza i-BIOS

Isibuyekezo se-firmware noma se-microcode ye-CPU isho ukuthi ezimeni eziningi ukubuyekeza amakhodi avaliwe anikezwe abahlinzeki be-CPU esinabo, abashayeli be-kernel abavaliwe (ama-blobs kanambambili), njll. Ngifuna ukukucacisa lokhu, ngoba okuqukethwe nendlela yayo yokusebenza akwaziwa futhi kubonakala kunengqondo ukuthi kufanele wazi. Empeleni, uma ungasebenzisi i-hardware yamahhala, awunakuzikhethela ngaphandle kokuthembela kumkhiqizi noma umklami we-CPU yakho noma i-motherboard, kepha yebo, ungalokothi ulande i-microcode noma i-firmware kumawebhusayithi angekho emthethweni, ngoba kuyinto ebucayi kakhulu.

Empeleni hhayi kuphela intekenteke ngenxa yezizathu zokuphepha, ngoba ungenza nokuthi imishini ingasebenziseki ngokuphelele. Noma ngabe ulande i-firmware kusuka kuwebhusayithi enedumela elihle, kukhona okungahambanga kahle ngesikhathi senqubo, njengokuphela kukagesi nokushiya ukufakwa kwesibuyekezo ne-firmware yonakele ngokuphelele, okusho ukuthi kungenzeka ukuthi usuvele ucabanga ukusebenzisa imali ukuthenga i-motherboard entsha.

Yilokhu okwaziwa yileli gama isitini ku-hardware slang, okungukuthi, shiya i-hardware yakho njengesitini, ngaphandle kwanoma yiluphi uhlobo lokusetshenziswa. Ngalokhu ngifuna ukukutshela ukuthi uqaphele futhi asinacala kulokhu okungenzeka uma unquma ukuvuselela noma iyiphi i-firmware noma ukhanyise i-BIOS / EFI. Kepha qaphela, lokhu akusho ukuthi ubungozi ngaso sonke isikhathi, njengoba ngike ngakutshela ngaphambili, akudingekile ngaso sonke isikhathi ukuthi "uthinte" i-BIOS / EFI, kukhona nezibuyekezo ezisezingeni le-OS kuphela futhi ezingasho lezo zingcuphe .. .

Ngiyethemba ukuthi lesi sifundo besilusizo, noma yimiphi imibuzo noma iziphakamiso, ungakhohlwa ukushiya i- imibono...