Bump versions of boot media now capable of un-hibernating from non-DEV_BSIZE
sectored media.

Bump to common version (3.67) to indicate new MI capability.

Reminded by deraadt@

BOOTARG_UCODE for AMD
ok deraadt@

Do not attempt to write to read-only softraid

Bootloaders have no write support for softraid volumes, which manifests in,
e.g. /bsd.upgrade not being stripped of its 'x' permission bit to prevent
sysupgrade loops in case of upgrade failure.

Set a no-write flag handled by libsa to bail out early in write calls.
There should be no real behaviour change, writes just fail earlier now.

i386 BIOS. Crank minor.
Tested inside amd64 vmm.

branches: 1.76.8; 1.76.12;
Use daddr_t and not daddr32_t in boot media.

At a minimum, amd64/i386 should now boot from 4TB GPT formatted disks.

More daddr32_t terminations with extreme prejudice to follow.

Tested by various, in snaps for a few days.

ok deraadt@

crank version number

increment version numbers, due to recent RB_GOODSEED and fchmod +T changes

Teach i386 boot98) and friends about ffs2. fdboot(8) is the exception:
ffs2 support does not fit there. But the the kernel loaded by the
floppy ramdisk does support ffs2.

Use arc4 to bit-spread the 512-byte random buffer over the .openbsd.randomdata
section, which has grown a fair bit with the introduction of retguard.
Mortimer discovered the repeated 512-byte sequence as retguard keys, and
this resolves the issue. (Chacha does not fit on the media, so 1.5K early
drop RC4 is hopefully sufficient in our KARL link universe)
Version crank the bootblocks. sysupgrade -s will install new bootblocks.
ok djm mortimer

crank version, following fchmod change

In the bootblocks, after discovering and opening /bsd.upgrade, fchmod -x
so the file cannot be re-executed upon the next boot. This provides a
stronger one-shot-upgrade model than the upgrade script's rm /bsd.upgrade.
Now various forms of upgrade failure will reboot into /bsd, which is probably
more recoverable. Performing fchmod -x depends on (1) use of MI boot.c
(not alpha/macppc/sparc64/sgi/octeon) and (2) "can write blocks" functionality
in the IO layer. Most architectures have this support now.

Two diagnostics "fchmod a-x %s: failed" and "/bsd.upgrade is not u+x" will
remain in the tree while refinements happen for some of the laggard
architectures.

based upon a discussion florian
tested in snapshots for more than a week without any complaints

When loading intel microcode in the non-efi case, error if the file is
larger than 256KB not 128KB to cope with the 06-8e-09 microcode which is
currently 193KB.

Reported and tested by Paul de Weerd. Matches a diff from claudio@

crank versions

crank version; looks good deraadt

Return early in ucode loading if cpuid is not available. Should fix
booting on 486s without cpuid. Reported by Falk Richter and diagnosed
by guenther@

port the amd64 code for loading intel microcode on boot to i386
ok deraadt@ mlarkin@

Bump boot loader versions for softraid passphrase handling change.

Detect vmm(4) in the bootloader and automatically switch to the serial
console at 115200 baud.

ok deraadt

If you use sys/param.h, you don't need sys/types.h

Bump boot loader versions due to bcrypt pbkdf support.

crank bootloader version after .SUNW_ctf change

as discussed with jsing@ it's easier this way to ensure people have
bootblocks capable of loading the section

crank version numbers of those bootloaders that have been changed by
the com_init fix. ok beck deraadt

belatedly bump bootstrap version after mdrandom() changes; ok deraadt@

Remove support for building the boot blocks with DEBUGFLAGS=-D_TEST, which is
supposed to create a userland binary in order to test non-boot related
functionality. This feature has been bitrotting in a non-compiling state
for years, and causes a too-many-ifdefs disease now that there are intrusive
EFI changes.

No functional change.

Bring the boot changes on amd64 to i386. alloca is deleted.
Also fix the boot from BIOS and bump the version.

input and ok deraadt

Bump version numbers.

crank version after random instruction fix from jsing

crank the version

Crank bootblock versions after last commit

Add i386/amd64 boot(8) support for keydisk-based softraid crypto volumes.

So far, only passphrase-based crypto volumes were bootable. Full disk
encryption with keydisks required a non-crypto partition to load the kernel.

The bootloader now scans all BIOS-visible disks for RAID partitions and
automatically associates keydisk partitions with their crypto volume.
Attempting to boot from a volume without its keydisk currently results
in a passphrase prompt (this might be changed in the future).

There is no need to re-create existing volumes. Moving the root partition
onto the crypto disk and running installboot(8) is all that's needed.

help & ok jsing

Bump i386 boot(8) version.

Force 16 byte alignment in boot(8) srt0.S, since this is more likely to get
the required file offset (0x120) for the .text segment.

Bump boot versions due to recent changes.

Add support for serial consoles at non-standard addresses. This implements
a new "machine comaddr" command that makes it possible to configure the
io port used to access the serial port. This can be used to use serial ports
on a puc(4) device as serial console.

Make amd64/i386 boot(8) pass the DUID of the selected boot device to the
kernel so that it can use it to identify the root disk. This will be
needed in order to correctly boot from a softraid volume.

ok deraadt@ marco@ krw@

Fix extended partition searching so we don't get lost. The offset
of the next EBR is relative to the start of the extended partition
described in the first MBR, not relative to the EBR specifying the
offset in its extended partition entry.

Clean up installboot -v output. Use daddr64_t for all sector numbers.

Not a complete fix, but better than what we had. More tweaks to
come.

Inspired by a diff and cluebat from uscav on tech@ a few weeks
ago.

Feedback from matthew@, weingart@.

ok deraadt@

- properly remove NENTS now after fixing the fallout.

ok deraadt@

- partially revert previous NENTS removal for arches which got busted.

- drop NENTS(), which was yet another copy of nitems().
no binary change


ok deraadt@

crank version

Add ability to limit memory presented to kernel with
'machine memory =128M' style commands. Thanks to
phessler for finding a small man page niggle. Bumped
version strings to a nice round fraction, and make them
the same across the board. Easier to identify boot
binary versions that way.

ok thib@, tedu@, phessler@

Change ELF loader to use the LMA as the load address for the
various segments. Hopefully this will help remove various
hacks in the boot loader in the future. This should have no
effect on most architectures (as we tend to have LMA == VMA).

ok drahn@, soft ok's various others.

Forgot to commit the changes to this file with the rest of the ELF32+64
pieces. Since this is where the "boot both ELF32 and ELF64" behaviour
is turned on for i386, it is quite important.

Bump version numbers too.

Found by ckuethe@; thanks.

Pull out the ELF loadfile pieces from the standalone libraries, so that
both 32- and 64-bit versions can be created (previously only one or the
other could be built for a given boot loader).

Use this to allow the i386 and amd64 boot blocks to boot both ELF32 and
ELF64 kernels (i.e. amd64 boot blocks can now load i386 kernels, and
vice versa). Obviously the system must support LONG mode in order to
successfully run the amd64 kernel once it is loaded.

Advice and discussions from/with dale@ (going back three years). Much
testing nick@ and todd@; thanks.

Check for Control key held down when starting, and don't read boot.conf
if it is. This gives a way to recover from "switching to com0" when
there's no serial cable handy.

Bump version numbers.

A similar change will be made to amd64 boot soon.

ok toby@ deraadt@

Fix the keyboard problem seen on Intel Macs, where only the first
keypress is seen by boot.

It appears that on the Intel Mac, we have to issue the "check for
keystroke" BIOS call before the "get keystroke" call will get it
(unlike any other BIOS I have seen in over 20 years).

It would not have been possible to fix this problem without the
donation from Steven N. Fettig (steve (at) anywheretechnology.com);
many thanks.

Bump versions of boot, cdboot and pxeboot accordingly.

Testing kettenis@, otto@, and others; ok weingart@.

Bump versions to note behaviour change of no longer trying
to boot from NetBSD partitions. Requested by tom@.

boot(8) ``machine memory'' support for > 4G.
Convert parser to strtoll(3) and use 64bit printf.
With help from mickey@
i386 and amd64 tests by me, alpha test by mickey@
OK mickey@, miod@, deraadt@

The return value from getEBDAaddr() (info) is not used in bios_E820(),
so nuke it. amd64 no longer needs biosprobe.c listed in SRCS. Trims
100 bytes from the boot blocks.

Bump versions on boot, cdboot and pxeboot, as I'm getting cautious in
my old age.

ok weingart@

Convert the size of a memory chunk from bytes to megabytes before
casting to a 32-bit value, not after. Corrects the display of large
memory chunks in the probing: line (mem[615K 3518M 0M a20=on] becomes
mem[615K 3518M 12288M a20=on]).

Bump version on boot, cdboot and pxeboot accordingly.

"looks ok to me" weingart@

Ensure we save the %ebx register returned from the BIOS call, not just
%bx. Fixes problem introduced in gidt.S r1.29, which could lead to an
incomplete memory map, and "too little memory available; running in
degraded mode", as found by Roy Morris rmorris (at) internetsecure (dot)
com. (Thanks for the report, and for testing the fix.)

Bump version on boot, cdboot and pxeboot accordingly.

ok weingart@

[OpenBSD]

Make boot code use real mode with 64K segments instead of 1M
segments. Improves stability with some disk controller cards.
Also explicitly state operand size on some moves.

Bump version on boot, cdboot and pxeboot accordingly.

"just get them in" beck@ ok weingart@

Enter pxeboot, derived from the NetBSD implementation. Initially
intended to support network installs using bsd.rd over TFTP.

Thanks to the many who tested, including Diana Eichert.

ok deraadt@

- delay reading the disklabel for floppies until after we're sure it's
the boot device. this fixes a delay (sometimes very long) if the bios
correctly reports a floppy but it's unplugged.
- bump version.

original idea from mdw@, tested by nick@, toby@ ok.

- some bios return a valid geometry for inexistent hd's so before
getting the geometry check the number of attached drives from
the bios area at 40:75.
- bump version.

from toby@. we want people to test this, specially those with ghost
drives showing up.

- move checks earlier to catch inexistent devices before testing for edd.
- bump version.
toby@ ok.

handle case where bios EDD support only supports a subset; from fgsch,
ok toby, and now tested for lots of machines

three four kills

fix tree after mickey breakage

First lba support in /boot. Not complete lba boot support, but it's the
first step on the way there. Ok deraadt@, espie@, todd@, and others.

i386 ELF bootloader. developed with weingart@

Bump version to help distinquish new memory probe and fixes.

branches: 1.18.4;
bump the version for new kbd probe; 10x for a reminder from fgsch@

increase version since we've removed -b; per fgsch@'s suggestion

add pciprobe back into /boot.
it appears there are machines only equipped w/ real-mode pci bios.
int time, we will benefit from this the other way around, --
we'll elliminate pci bios _calls_ in kernel instead.

Increment version; deraadt@ ok.

aout_ldsym, increase boot minor version

branches: 1.13.8;
new exec framework

i386 bootblocks that work for 2.3. A tale too long to tell

Changes/updates to /boot stuff. More to come.
Fixes many divide by zero and pointer bugs.

we have new features, bump boot version

Use BIOS to probe for memory map.
Probe for BIOS supported disks.
Use BIOS to get geometry for supported disks.

All in preparation to passing the whole thing
to the kernel.

bump the version number

completely disable network support

s/kbd/pc/ for consistency with kernel. Do even better __asms for BIOS calls.
Adapt to new console probing and setting API. Do not try to probe pc0 via
the NVRAM. Fix some other buglets.

new cons

proper includes
add const for consw declarations

commit all my mods to the last imported libsa stuff....
including:
- disklabel support;
- better boot cmd line
- smaller size (using some compilation switches ;)
- no more relocations in /boot, it's loaded in the place;
- better disk performance (maybe were already in there)
- installboot -n does not require write perms for device
- more debugs
- missing parts in libsa (such as cd9660 and so)
- i don't like 2 files for exec_i386 (sorry, toby, let's discuss maybe?)
tricks and tails:
- joined .text and .data (saves you a page)
- prot mode switching still in biosboot (it's freezed for awhile)
- biosdisk internals changed
- biosdev is not passed propery to the kernel (i'll fix it soon)
- sure i missed smth here to note (use the source, Luke!)

Initial /boot stuff (from Mickey)

branches: 1.1.2;
file conf.c was initially added on branch new.

BOOTARG_UCODE for AMD
ok deraadt@

Do not attempt to write to read-only softraid

Bootloaders have no write support for softraid volumes, which manifests in,
e.g. /bsd.upgrade not being stripped of its 'x' permission bit to prevent
sysupgrade loops in case of upgrade failure.

Set a no-write flag handled by libsa to bail out early in write calls.
There should be no real behaviour change, writes just fail earlier now.

i386 BIOS. Crank minor.
Tested inside amd64 vmm.

Use daddr_t and not daddr32_t in boot media.

At a minimum, amd64/i386 should now boot from 4TB GPT formatted disks.

More daddr32_t terminations with extreme prejudice to follow.

Tested by various, in snaps for a few days.

ok deraadt@

crank version number

increment version numbers, due to recent RB_GOODSEED and fchmod +T changes

Teach i386 boot98) and friends about ffs2. fdboot(8) is the exception:
ffs2 support does not fit there. But the the kernel loaded by the
floppy ramdisk does support ffs2.

Use arc4 to bit-spread the 512-byte random buffer over the .openbsd.randomdata
section, which has grown a fair bit with the introduction of retguard.
Mortimer discovered the repeated 512-byte sequence as retguard keys, and
this resolves the issue. (Chacha does not fit on the media, so 1.5K early
drop RC4 is hopefully sufficient in our KARL link universe)
Version crank the bootblocks. sysupgrade -s will install new bootblocks.
ok djm mortimer

crank version, following fchmod change

In the bootblocks, after discovering and opening /bsd.upgrade, fchmod -x
so the file cannot be re-executed upon the next boot. This provides a
stronger one-shot-upgrade model than the upgrade script's rm /bsd.upgrade.
Now various forms of upgrade failure will reboot into /bsd, which is probably
more recoverable. Performing fchmod -x depends on (1) use of MI boot.c
(not alpha/macppc/sparc64/sgi/octeon) and (2) "can write blocks" functionality
in the IO layer. Most architectures have this support now.

Two diagnostics "fchmod a-x %s: failed" and "/bsd.upgrade is not u+x" will
remain in the tree while refinements happen for some of the laggard
architectures.

based upon a discussion florian
tested in snapshots for more than a week without any complaints

When loading intel microcode in the non-efi case, error if the file is
larger than 256KB not 128KB to cope with the 06-8e-09 microcode which is
currently 193KB.

Reported and tested by Paul de Weerd. Matches a diff from claudio@

crank versions

crank version; looks good deraadt

Return early in ucode loading if cpuid is not available. Should fix
booting on 486s without cpuid. Reported by Falk Richter and diagnosed
by guenther@

port the amd64 code for loading intel microcode on boot to i386
ok deraadt@ mlarkin@

Bump boot loader versions for softraid passphrase handling change.

Detect vmm(4) in the bootloader and automatically switch to the serial
console at 115200 baud.

ok deraadt

If you use sys/param.h, you don't need sys/types.h

Bump boot loader versions due to bcrypt pbkdf support.

crank bootloader version after .SUNW_ctf change

as discussed with jsing@ it's easier this way to ensure people have
bootblocks capable of loading the section

crank version numbers of those bootloaders that have been changed by
the com_init fix. ok beck deraadt

belatedly bump bootstrap version after mdrandom() changes; ok deraadt@

Remove support for building the boot blocks with DEBUGFLAGS=-D_TEST, which is
supposed to create a userland binary in order to test non-boot related
functionality. This feature has been bitrotting in a non-compiling state
for years, and causes a too-many-ifdefs disease now that there are intrusive
EFI changes.

No functional change.

Bring the boot changes on amd64 to i386. alloca is deleted.
Also fix the boot from BIOS and bump the version.

input and ok deraadt

Bump version numbers.

crank version after random instruction fix from jsing

crank the version

Crank bootblock versions after last commit

Add i386/amd64 boot(8) support for keydisk-based softraid crypto volumes.

So far, only passphrase-based crypto volumes were bootable. Full disk
encryption with keydisks required a non-crypto partition to load the kernel.

The bootloader now scans all BIOS-visible disks for RAID partitions and
automatically associates keydisk partitions with their crypto volume.
Attempting to boot from a volume without its keydisk currently results
in a passphrase prompt (this might be changed in the future).

There is no need to re-create existing volumes. Moving the root partition
onto the crypto disk and running installboot(8) is all that's needed.

help & ok jsing

Bump i386 boot(8) version.

Force 16 byte alignment in boot(8) srt0.S, since this is more likely to get
the required file offset (0x120) for the .text segment.

Bump boot versions due to recent changes.

Add support for serial consoles at non-standard addresses. This implements
a new "machine comaddr" command that makes it possible to configure the
io port used to access the serial port. This can be used to use serial ports
on a puc(4) device as serial console.

Make amd64/i386 boot(8) pass the DUID of the selected boot device to the
kernel so that it can use it to identify the root disk. This will be
needed in order to correctly boot from a softraid volume.

ok deraadt@ marco@ krw@

Fix extended partition searching so we don't get lost. The offset
of the next EBR is relative to the start of the extended partition
described in the first MBR, not relative to the EBR specifying the
offset in its extended partition entry.

Clean up installboot -v output. Use daddr64_t for all sector numbers.

Not a complete fix, but better than what we had. More tweaks to
come.

Inspired by a diff and cluebat from uscav on tech@ a few weeks
ago.

Feedback from matthew@, weingart@.

ok deraadt@

- properly remove NENTS now after fixing the fallout.

ok deraadt@

- partially revert previous NENTS removal for arches which got busted.

- drop NENTS(), which was yet another copy of nitems().
no binary change


ok deraadt@

crank version

Add ability to limit memory presented to kernel with
'machine memory =128M' style commands. Thanks to
phessler for finding a small man page niggle. Bumped
version strings to a nice round fraction, and make them
the same across the board. Easier to identify boot
binary versions that way.

ok thib@, tedu@, phessler@

Change ELF loader to use the LMA as the load address for the
various segments. Hopefully this will help remove various
hacks in the boot loader in the future. This should have no
effect on most architectures (as we tend to have LMA == VMA).

ok drahn@, soft ok's various others.

Forgot to commit the changes to this file with the rest of the ELF32+64
pieces. Since this is where the "boot both ELF32 and ELF64" behaviour
is turned on for i386, it is quite important.

Bump version numbers too.

Found by ckuethe@; thanks.

Pull out the ELF loadfile pieces from the standalone libraries, so that
both 32- and 64-bit versions can be created (previously only one or the
other could be built for a given boot loader).

Use this to allow the i386 and amd64 boot blocks to boot both ELF32 and
ELF64 kernels (i.e. amd64 boot blocks can now load i386 kernels, and
vice versa). Obviously the system must support LONG mode in order to
successfully run the amd64 kernel once it is loaded.

Advice and discussions from/with dale@ (going back three years). Much
testing nick@ and todd@; thanks.

Check for Control key held down when starting, and don't read boot.conf
if it is. This gives a way to recover from "switching to com0" when
there's no serial cable handy.

Bump version numbers.

A similar change will be made to amd64 boot soon.

ok toby@ deraadt@

Fix the keyboard problem seen on Intel Macs, where only the first
keypress is seen by boot.

It appears that on the Intel Mac, we have to issue the "check for
keystroke" BIOS call before the "get keystroke" call will get it
(unlike any other BIOS I have seen in over 20 years).

It would not have been possible to fix this problem without the
donation from Steven N. Fettig (steve (at) anywheretechnology.com);
many thanks.

Bump versions of boot, cdboot and pxeboot accordingly.

Testing kettenis@, otto@, and others; ok weingart@.

Bump versions to note behaviour change of no longer trying
to boot from NetBSD partitions. Requested by tom@.

boot(8) ``machine memory'' support for > 4G.
Convert parser to strtoll(3) and use 64bit printf.
With help from mickey@
i386 and amd64 tests by me, alpha test by mickey@
OK mickey@, miod@, deraadt@

The return value from getEBDAaddr() (info) is not used in bios_E820(),
so nuke it. amd64 no longer needs biosprobe.c listed in SRCS. Trims
100 bytes from the boot blocks.

Bump versions on boot, cdboot and pxeboot, as I'm getting cautious in
my old age.

ok weingart@

Convert the size of a memory chunk from bytes to megabytes before
casting to a 32-bit value, not after. Corrects the display of large
memory chunks in the probing: line (mem[615K 3518M 0M a20=on] becomes
mem[615K 3518M 12288M a20=on]).

Bump version on boot, cdboot and pxeboot accordingly.

"looks ok to me" weingart@

Ensure we save the %ebx register returned from the BIOS call, not just
%bx. Fixes problem introduced in gidt.S r1.29, which could lead to an
incomplete memory map, and "too little memory available; running in
degraded mode", as found by Roy Morris rmorris (at) internetsecure (dot)
com. (Thanks for the report, and for testing the fix.)

Bump version on boot, cdboot and pxeboot accordingly.

ok weingart@

[OpenBSD]

Make boot code use real mode with 64K segments instead of 1M
segments. Improves stability with some disk controller cards.
Also explicitly state operand size on some moves.

Bump version on boot, cdboot and pxeboot accordingly.

"just get them in" beck@ ok weingart@

Enter pxeboot, derived from the NetBSD implementation. Initially
intended to support network installs using bsd.rd over TFTP.

Thanks to the many who tested, including Diana Eichert.

ok deraadt@

- delay reading the disklabel for floppies until after we're sure it's
the boot device. this fixes a delay (sometimes very long) if the bios
correctly reports a floppy but it's unplugged.
- bump version.

original idea from mdw@, tested by nick@, toby@ ok.

- some bios return a valid geometry for inexistent hd's so before
getting the geometry check the number of attached drives from
the bios area at 40:75.
- bump version.

from toby@. we want people to test this, specially those with ghost
drives showing up.

- move checks earlier to catch inexistent devices before testing for edd.
- bump version.
toby@ ok.

handle case where bios EDD support only supports a subset; from fgsch,
ok toby, and now tested for lots of machines

three four kills

fix tree after mickey breakage

First lba support in /boot. Not complete lba boot support, but it's the
first step on the way there. Ok deraadt@, espie@, todd@, and others.

i386 ELF bootloader. developed with weingart@

Bump version to help distinquish new memory probe and fixes.

branches: 1.18.4;
bump the version for new kbd probe; 10x for a reminder from fgsch@

increase version since we've removed -b; per fgsch@'s suggestion

add pciprobe back into /boot.
it appears there are machines only equipped w/ real-mode pci bios.
int time, we will benefit from this the other way around, --
we'll elliminate pci bios _calls_ in kernel instead.

Increment version; deraadt@ ok.

aout_ldsym, increase boot minor version

branches: 1.13.8;
new exec framework

i386 bootblocks that work for 2.3. A tale too long to tell

Changes/updates to /boot stuff. More to come.
Fixes many divide by zero and pointer bugs.

we have new features, bump boot version

Use BIOS to probe for memory map.
Probe for BIOS supported disks.
Use BIOS to get geometry for supported disks.

All in preparation to passing the whole thing
to the kernel.

bump the version number

completely disable network support

s/kbd/pc/ for consistency with kernel. Do even better __asms for BIOS calls.
Adapt to new console probing and setting API. Do not try to probe pc0 via
the NVRAM. Fix some other buglets.

new cons

proper includes
add const for consw declarations

commit all my mods to the last imported libsa stuff....
including:
- disklabel support;
- better boot cmd line
- smaller size (using some compilation switches ;)
- no more relocations in /boot, it's loaded in the place;
- better disk performance (maybe were already in there)
- installboot -n does not require write perms for device
- more debugs
- missing parts in libsa (such as cd9660 and so)
- i don't like 2 files for exec_i386 (sorry, toby, let's discuss maybe?)
tricks and tails:
- joined .text and .data (saves you a page)
- prot mode switching still in biosboot (it's freezed for awhile)
- biosdisk internals changed
- biosdev is not passed propery to the kernel (i'll fix it soon)
- sure i missed smth here to note (use the source, Luke!)

Initial /boot stuff (from Mickey)

branches: 1.1.2;
file conf.c was initially added on branch new.

Do not attempt to write to read-only softraid

Bootloaders have no write support for softraid volumes, which manifests in,
e.g. /bsd.upgrade not being stripped of its 'x' permission bit to prevent
sysupgrade loops in case of upgrade failure.

Set a no-write flag handled by libsa to bail out early in write calls.
There should be no real behaviour change, writes just fail earlier now.

i386 BIOS. Crank minor.
Tested inside amd64 vmm.

Use daddr_t and not daddr32_t in boot media.

At a minimum, amd64/i386 should now boot from 4TB GPT formatted disks.

More daddr32_t terminations with extreme prejudice to follow.

Tested by various, in snaps for a few days.

ok deraadt@

crank version number

increment version numbers, due to recent RB_GOODSEED and fchmod +T changes

Teach i386 boot98) and friends about ffs2. fdboot(8) is the exception:
ffs2 support does not fit there. But the the kernel loaded by the
floppy ramdisk does support ffs2.

Use arc4 to bit-spread the 512-byte random buffer over the .openbsd.randomdata
section, which has grown a fair bit with the introduction of retguard.
Mortimer discovered the repeated 512-byte sequence as retguard keys, and
this resolves the issue. (Chacha does not fit on the media, so 1.5K early
drop RC4 is hopefully sufficient in our KARL link universe)
Version crank the bootblocks. sysupgrade -s will install new bootblocks.
ok djm mortimer

crank version, following fchmod change

In the bootblocks, after discovering and opening /bsd.upgrade, fchmod -x
so the file cannot be re-executed upon the next boot. This provides a
stronger one-shot-upgrade model than the upgrade script's rm /bsd.upgrade.
Now various forms of upgrade failure will reboot into /bsd, which is probably
more recoverable. Performing fchmod -x depends on (1) use of MI boot.c
(not alpha/macppc/sparc64/sgi/octeon) and (2) "can write blocks" functionality
in the IO layer. Most architectures have this support now.

Two diagnostics "fchmod a-x %s: failed" and "/bsd.upgrade is not u+x" will
remain in the tree while refinements happen for some of the laggard
architectures.

based upon a discussion florian
tested in snapshots for more than a week without any complaints

When loading intel microcode in the non-efi case, error if the file is
larger than 256KB not 128KB to cope with the 06-8e-09 microcode which is
currently 193KB.

Reported and tested by Paul de Weerd. Matches a diff from claudio@

crank versions

crank version; looks good deraadt

Return early in ucode loading if cpuid is not available. Should fix
booting on 486s without cpuid. Reported by Falk Richter and diagnosed
by guenther@

port the amd64 code for loading intel microcode on boot to i386
ok deraadt@ mlarkin@

Bump boot loader versions for softraid passphrase handling change.

Detect vmm(4) in the bootloader and automatically switch to the serial
console at 115200 baud.

ok deraadt

If you use sys/param.h, you don't need sys/types.h

Bump boot loader versions due to bcrypt pbkdf support.

crank bootloader version after .SUNW_ctf change

as discussed with jsing@ it's easier this way to ensure people have
bootblocks capable of loading the section

crank version numbers of those bootloaders that have been changed by
the com_init fix. ok beck deraadt

belatedly bump bootstrap version after mdrandom() changes; ok deraadt@

Remove support for building the boot blocks with DEBUGFLAGS=-D_TEST, which is
supposed to create a userland binary in order to test non-boot related
functionality. This feature has been bitrotting in a non-compiling state
for years, and causes a too-many-ifdefs disease now that there are intrusive
EFI changes.

No functional change.

Bring the boot changes on amd64 to i386. alloca is deleted.
Also fix the boot from BIOS and bump the version.

input and ok deraadt

Bump version numbers.

crank version after random instruction fix from jsing

crank the version

Crank bootblock versions after last commit

Add i386/amd64 boot(8) support for keydisk-based softraid crypto volumes.

So far, only passphrase-based crypto volumes were bootable. Full disk
encryption with keydisks required a non-crypto partition to load the kernel.

The bootloader now scans all BIOS-visible disks for RAID partitions and
automatically associates keydisk partitions with their crypto volume.
Attempting to boot from a volume without its keydisk currently results
in a passphrase prompt (this might be changed in the future).

There is no need to re-create existing volumes. Moving the root partition
onto the crypto disk and running installboot(8) is all that's needed.

help & ok jsing

Bump i386 boot(8) version.

Force 16 byte alignment in boot(8) srt0.S, since this is more likely to get
the required file offset (0x120) for the .text segment.

Bump boot versions due to recent changes.

Add support for serial consoles at non-standard addresses. This implements
a new "machine comaddr" command that makes it possible to configure the
io port used to access the serial port. This can be used to use serial ports
on a puc(4) device as serial console.

Make amd64/i386 boot(8) pass the DUID of the selected boot device to the
kernel so that it can use it to identify the root disk. This will be
needed in order to correctly boot from a softraid volume.

ok deraadt@ marco@ krw@

Fix extended partition searching so we don't get lost. The offset
of the next EBR is relative to the start of the extended partition
described in the first MBR, not relative to the EBR specifying the
offset in its extended partition entry.

Clean up installboot -v output. Use daddr64_t for all sector numbers.

Not a complete fix, but better than what we had. More tweaks to
come.

Inspired by a diff and cluebat from uscav on tech@ a few weeks
ago.

Feedback from matthew@, weingart@.

ok deraadt@

- properly remove NENTS now after fixing the fallout.

ok deraadt@

- partially revert previous NENTS removal for arches which got busted.

- drop NENTS(), which was yet another copy of nitems().
no binary change


ok deraadt@

crank version

Add ability to limit memory presented to kernel with
'machine memory =128M' style commands. Thanks to
phessler for finding a small man page niggle. Bumped
version strings to a nice round fraction, and make them
the same across the board. Easier to identify boot
binary versions that way.

ok thib@, tedu@, phessler@

Change ELF loader to use the LMA as the load address for the
various segments. Hopefully this will help remove various
hacks in the boot loader in the future. This should have no
effect on most architectures (as we tend to have LMA == VMA).

ok drahn@, soft ok's various others.

Forgot to commit the changes to this file with the rest of the ELF32+64
pieces. Since this is where the "boot both ELF32 and ELF64" behaviour
is turned on for i386, it is quite important.

Bump version numbers too.

Found by ckuethe@; thanks.

Pull out the ELF loadfile pieces from the standalone libraries, so that
both 32- and 64-bit versions can be created (previously only one or the
other could be built for a given boot loader).

Use this to allow the i386 and amd64 boot blocks to boot both ELF32 and
ELF64 kernels (i.e. amd64 boot blocks can now load i386 kernels, and
vice versa). Obviously the system must support LONG mode in order to
successfully run the amd64 kernel once it is loaded.

Advice and discussions from/with dale@ (going back three years). Much
testing nick@ and todd@; thanks.

Check for Control key held down when starting, and don't read boot.conf
if it is. This gives a way to recover from "switching to com0" when
there's no serial cable handy.

Bump version numbers.

A similar change will be made to amd64 boot soon.

ok toby@ deraadt@

Fix the keyboard problem seen on Intel Macs, where only the first
keypress is seen by boot.

It appears that on the Intel Mac, we have to issue the "check for
keystroke" BIOS call before the "get keystroke" call will get it
(unlike any other BIOS I have seen in over 20 years).

It would not have been possible to fix this problem without the
donation from Steven N. Fettig (steve (at) anywheretechnology.com);
many thanks.

Bump versions of boot, cdboot and pxeboot accordingly.

Testing kettenis@, otto@, and others; ok weingart@.

Bump versions to note behaviour change of no longer trying
to boot from NetBSD partitions. Requested by tom@.

boot(8) ``machine memory'' support for > 4G.
Convert parser to strtoll(3) and use 64bit printf.
With help from mickey@
i386 and amd64 tests by me, alpha test by mickey@
OK mickey@, miod@, deraadt@

The return value from getEBDAaddr() (info) is not used in bios_E820(),
so nuke it. amd64 no longer needs biosprobe.c listed in SRCS. Trims
100 bytes from the boot blocks.

Bump versions on boot, cdboot and pxeboot, as I'm getting cautious in
my old age.

ok weingart@

Convert the size of a memory chunk from bytes to megabytes before
casting to a 32-bit value, not after. Corrects the display of large
memory chunks in the probing: line (mem[615K 3518M 0M a20=on] becomes
mem[615K 3518M 12288M a20=on]).

Bump version on boot, cdboot and pxeboot accordingly.

"looks ok to me" weingart@

Ensure we save the %ebx register returned from the BIOS call, not just
%bx. Fixes problem introduced in gidt.S r1.29, which could lead to an
incomplete memory map, and "too little memory available; running in
degraded mode", as found by Roy Morris rmorris (at) internetsecure (dot)
com. (Thanks for the report, and for testing the fix.)

Bump version on boot, cdboot and pxeboot accordingly.

ok weingart@

[OpenBSD]

Make boot code use real mode with 64K segments instead of 1M
segments. Improves stability with some disk controller cards.
Also explicitly state operand size on some moves.

Bump version on boot, cdboot and pxeboot accordingly.

"just get them in" beck@ ok weingart@

Enter pxeboot, derived from the NetBSD implementation. Initially
intended to support network installs using bsd.rd over TFTP.

Thanks to the many who tested, including Diana Eichert.

ok deraadt@

- delay reading the disklabel for floppies until after we're sure it's
the boot device. this fixes a delay (sometimes very long) if the bios
correctly reports a floppy but it's unplugged.
- bump version.

original idea from mdw@, tested by nick@, toby@ ok.

- some bios return a valid geometry for inexistent hd's so before
getting the geometry check the number of attached drives from
the bios area at 40:75.
- bump version.

from toby@. we want people to test this, specially those with ghost
drives showing up.

- move checks earlier to catch inexistent devices before testing for edd.
- bump version.
toby@ ok.

handle case where bios EDD support only supports a subset; from fgsch,
ok toby, and now tested for lots of machines

three four kills

fix tree after mickey breakage

First lba support in /boot. Not complete lba boot support, but it's the
first step on the way there. Ok deraadt@, espie@, todd@, and others.

i386 ELF bootloader. developed with weingart@

Bump version to help distinquish new memory probe and fixes.

branches: 1.18.4;
bump the version for new kbd probe; 10x for a reminder from fgsch@

increase version since we've removed -b; per fgsch@'s suggestion

add pciprobe back into /boot.
it appears there are machines only equipped w/ real-mode pci bios.
int time, we will benefit from this the other way around, --
we'll elliminate pci bios _calls_ in kernel instead.

Increment version; deraadt@ ok.

aout_ldsym, increase boot minor version

branches: 1.13.8;
new exec framework

i386 bootblocks that work for 2.3. A tale too long to tell

Changes/updates to /boot stuff. More to come.
Fixes many divide by zero and pointer bugs.

we have new features, bump boot version

Use BIOS to probe for memory map.
Probe for BIOS supported disks.
Use BIOS to get geometry for supported disks.

All in preparation to passing the whole thing
to the kernel.

bump the version number

completely disable network support

s/kbd/pc/ for consistency with kernel. Do even better __asms for BIOS calls.
Adapt to new console probing and setting API. Do not try to probe pc0 via
the NVRAM. Fix some other buglets.

new cons

proper includes
add const for consw declarations

commit all my mods to the last imported libsa stuff....
including:
- disklabel support;
- better boot cmd line
- smaller size (using some compilation switches ;)
- no more relocations in /boot, it's loaded in the place;
- better disk performance (maybe were already in there)
- installboot -n does not require write perms for device
- more debugs
- missing parts in libsa (such as cd9660 and so)
- i don't like 2 files for exec_i386 (sorry, toby, let's discuss maybe?)
tricks and tails:
- joined .text and .data (saves you a page)
- prot mode switching still in biosboot (it's freezed for awhile)
- biosdisk internals changed
- biosdev is not passed propery to the kernel (i'll fix it soon)
- sure i missed smth here to note (use the source, Luke!)

Initial /boot stuff (from Mickey)

branches: 1.1.2;
file conf.c was initially added on branch new.

Use daddr_t and not daddr32_t in boot media.

At a minimum, amd64/i386 should now boot from 4TB GPT formatted disks.

More daddr32_t terminations with extreme prejudice to follow.

Tested by various, in snaps for a few days.

ok deraadt@

crank version number

increment version numbers, due to recent RB_GOODSEED and fchmod +T changes

Teach i386 boot98) and friends about ffs2. fdboot(8) is the exception:
ffs2 support does not fit there. But the the kernel loaded by the
floppy ramdisk does support ffs2.

Use arc4 to bit-spread the 512-byte random buffer over the .openbsd.randomdata
section, which has grown a fair bit with the introduction of retguard.
Mortimer discovered the repeated 512-byte sequence as retguard keys, and
this resolves the issue. (Chacha does not fit on the media, so 1.5K early
drop RC4 is hopefully sufficient in our KARL link universe)
Version crank the bootblocks. sysupgrade -s will install new bootblocks.
ok djm mortimer

crank version, following fchmod change

In the bootblocks, after discovering and opening /bsd.upgrade, fchmod -x
so the file cannot be re-executed upon the next boot. This provides a
stronger one-shot-upgrade model than the upgrade script's rm /bsd.upgrade.
Now various forms of upgrade failure will reboot into /bsd, which is probably
more recoverable. Performing fchmod -x depends on (1) use of MI boot.c
(not alpha/macppc/sparc64/sgi/octeon) and (2) "can write blocks" functionality
in the IO layer. Most architectures have this support now.

Two diagnostics "fchmod a-x %s: failed" and "/bsd.upgrade is not u+x" will
remain in the tree while refinements happen for some of the laggard
architectures.

based upon a discussion florian
tested in snapshots for more than a week without any complaints

When loading intel microcode in the non-efi case, error if the file is
larger than 256KB not 128KB to cope with the 06-8e-09 microcode which is
currently 193KB.

Reported and tested by Paul de Weerd. Matches a diff from claudio@

crank versions

crank version; looks good deraadt

Return early in ucode loading if cpuid is not available. Should fix
booting on 486s without cpuid. Reported by Falk Richter and diagnosed
by guenther@

port the amd64 code for loading intel microcode on boot to i386
ok deraadt@ mlarkin@

Bump boot loader versions for softraid passphrase handling change.

Detect vmm(4) in the bootloader and automatically switch to the serial
console at 115200 baud.

ok deraadt

If you use sys/param.h, you don't need sys/types.h

Bump boot loader versions due to bcrypt pbkdf support.

crank bootloader version after .SUNW_ctf change

as discussed with jsing@ it's easier this way to ensure people have
bootblocks capable of loading the section

crank version numbers of those bootloaders that have been changed by
the com_init fix. ok beck deraadt

belatedly bump bootstrap version after mdrandom() changes; ok deraadt@

Remove support for building the boot blocks with DEBUGFLAGS=-D_TEST, which is
supposed to create a userland binary in order to test non-boot related
functionality. This feature has been bitrotting in a non-compiling state
for years, and causes a too-many-ifdefs disease now that there are intrusive
EFI changes.

No functional change.

Bring the boot changes on amd64 to i386. alloca is deleted.
Also fix the boot from BIOS and bump the version.

input and ok deraadt

Bump version numbers.

crank version after random instruction fix from jsing

crank the version

Crank bootblock versions after last commit

Add i386/amd64 boot(8) support for keydisk-based softraid crypto volumes.

So far, only passphrase-based crypto volumes were bootable. Full disk
encryption with keydisks required a non-crypto partition to load the kernel.

The bootloader now scans all BIOS-visible disks for RAID partitions and
automatically associates keydisk partitions with their crypto volume.
Attempting to boot from a volume without its keydisk currently results
in a passphrase prompt (this might be changed in the future).

There is no need to re-create existing volumes. Moving the root partition
onto the crypto disk and running installboot(8) is all that's needed.

help & ok jsing

Bump i386 boot(8) version.

Force 16 byte alignment in boot(8) srt0.S, since this is more likely to get
the required file offset (0x120) for the .text segment.

Bump boot versions due to recent changes.

Add support for serial consoles at non-standard addresses. This implements
a new "machine comaddr" command that makes it possible to configure the
io port used to access the serial port. This can be used to use serial ports
on a puc(4) device as serial console.

Make amd64/i386 boot(8) pass the DUID of the selected boot device to the
kernel so that it can use it to identify the root disk. This will be
needed in order to correctly boot from a softraid volume.

ok deraadt@ marco@ krw@

Fix extended partition searching so we don't get lost. The offset
of the next EBR is relative to the start of the extended partition
described in the first MBR, not relative to the EBR specifying the
offset in its extended partition entry.

Clean up installboot -v output. Use daddr64_t for all sector numbers.

Not a complete fix, but better than what we had. More tweaks to
come.

Inspired by a diff and cluebat from uscav on tech@ a few weeks
ago.

Feedback from matthew@, weingart@.

ok deraadt@

- properly remove NENTS now after fixing the fallout.

ok deraadt@

- partially revert previous NENTS removal for arches which got busted.

- drop NENTS(), which was yet another copy of nitems().
no binary change


ok deraadt@

crank version

Add ability to limit memory presented to kernel with
'machine memory =128M' style commands. Thanks to
phessler for finding a small man page niggle. Bumped
version strings to a nice round fraction, and make them
the same across the board. Easier to identify boot
binary versions that way.

ok thib@, tedu@, phessler@

Change ELF loader to use the LMA as the load address for the
various segments. Hopefully this will help remove various
hacks in the boot loader in the future. This should have no
effect on most architectures (as we tend to have LMA == VMA).

ok drahn@, soft ok's various others.

Forgot to commit the changes to this file with the rest of the ELF32+64
pieces. Since this is where the "boot both ELF32 and ELF64" behaviour
is turned on for i386, it is quite important.

Bump version numbers too.

Found by ckuethe@; thanks.

Pull out the ELF loadfile pieces from the standalone libraries, so that
both 32- and 64-bit versions can be created (previously only one or the
other could be built for a given boot loader).

Use this to allow the i386 and amd64 boot blocks to boot both ELF32 and
ELF64 kernels (i.e. amd64 boot blocks can now load i386 kernels, and
vice versa). Obviously the system must support LONG mode in order to
successfully run the amd64 kernel once it is loaded.

Advice and discussions from/with dale@ (going back three years). Much
testing nick@ and todd@; thanks.

Check for Control key held down when starting, and don't read boot.conf
if it is. This gives a way to recover from "switching to com0" when
there's no serial cable handy.

Bump version numbers.

A similar change will be made to amd64 boot soon.

ok toby@ deraadt@

Fix the keyboard problem seen on Intel Macs, where only the first
keypress is seen by boot.

It appears that on the Intel Mac, we have to issue the "check for
keystroke" BIOS call before the "get keystroke" call will get it
(unlike any other BIOS I have seen in over 20 years).

It would not have been possible to fix this problem without the
donation from Steven N. Fettig (steve (at) anywheretechnology.com);
many thanks.

Bump versions of boot, cdboot and pxeboot accordingly.

Testing kettenis@, otto@, and others; ok weingart@.

Bump versions to note behaviour change of no longer trying
to boot from NetBSD partitions. Requested by tom@.

boot(8) ``machine memory'' support for > 4G.
Convert parser to strtoll(3) and use 64bit printf.
With help from mickey@
i386 and amd64 tests by me, alpha test by mickey@
OK mickey@, miod@, deraadt@

The return value from getEBDAaddr() (info) is not used in bios_E820(),
so nuke it. amd64 no longer needs biosprobe.c listed in SRCS. Trims
100 bytes from the boot blocks.

Bump versions on boot, cdboot and pxeboot, as I'm getting cautious in
my old age.

ok weingart@

Convert the size of a memory chunk from bytes to megabytes before
casting to a 32-bit value, not after. Corrects the display of large
memory chunks in the probing: line (mem[615K 3518M 0M a20=on] becomes
mem[615K 3518M 12288M a20=on]).

Bump version on boot, cdboot and pxeboot accordingly.

"looks ok to me" weingart@

Ensure we save the %ebx register returned from the BIOS call, not just
%bx. Fixes problem introduced in gidt.S r1.29, which could lead to an
incomplete memory map, and "too little memory available; running in
degraded mode", as found by Roy Morris rmorris (at) internetsecure (dot)
com. (Thanks for the report, and for testing the fix.)

Bump version on boot, cdboot and pxeboot accordingly.

ok weingart@

[OpenBSD]

Make boot code use real mode with 64K segments instead of 1M
segments. Improves stability with some disk controller cards.
Also explicitly state operand size on some moves.

Bump version on boot, cdboot and pxeboot accordingly.

"just get them in" beck@ ok weingart@

Enter pxeboot, derived from the NetBSD implementation. Initially
intended to support network installs using bsd.rd over TFTP.

Thanks to the many who tested, including Diana Eichert.

ok deraadt@

- delay reading the disklabel for floppies until after we're sure it's
the boot device. this fixes a delay (sometimes very long) if the bios
correctly reports a floppy but it's unplugged.
- bump version.

original idea from mdw@, tested by nick@, toby@ ok.

- some bios return a valid geometry for inexistent hd's so before
getting the geometry check the number of attached drives from
the bios area at 40:75.
- bump version.

from toby@. we want people to test this, specially those with ghost
drives showing up.

- move checks earlier to catch inexistent devices before testing for edd.
- bump version.
toby@ ok.

handle case where bios EDD support only supports a subset; from fgsch,
ok toby, and now tested for lots of machines

three four kills

fix tree after mickey breakage

First lba support in /boot. Not complete lba boot support, but it's the
first step on the way there. Ok deraadt@, espie@, todd@, and others.

i386 ELF bootloader. developed with weingart@

Bump version to help distinquish new memory probe and fixes.

branches: 1.18.4;
bump the version for new kbd probe; 10x for a reminder from fgsch@

increase version since we've removed -b; per fgsch@'s suggestion

add pciprobe back into /boot.
it appears there are machines only equipped w/ real-mode pci bios.
int time, we will benefit from this the other way around, --
we'll elliminate pci bios _calls_ in kernel instead.

Increment version; deraadt@ ok.

aout_ldsym, increase boot minor version

branches: 1.13.8;
new exec framework

i386 bootblocks that work for 2.3. A tale too long to tell

Changes/updates to /boot stuff. More to come.
Fixes many divide by zero and pointer bugs.

we have new features, bump boot version

Use BIOS to probe for memory map.
Probe for BIOS supported disks.
Use BIOS to get geometry for supported disks.

All in preparation to passing the whole thing
to the kernel.

bump the version number

completely disable network support

s/kbd/pc/ for consistency with kernel. Do even better __asms for BIOS calls.
Adapt to new console probing and setting API. Do not try to probe pc0 via
the NVRAM. Fix some other buglets.

new cons

proper includes
add const for consw declarations

commit all my mods to the last imported libsa stuff....
including:
- disklabel support;
- better boot cmd line
- smaller size (using some compilation switches ;)
- no more relocations in /boot, it's loaded in the place;
- better disk performance (maybe were already in there)
- installboot -n does not require write perms for device
- more debugs
- missing parts in libsa (such as cd9660 and so)
- i don't like 2 files for exec_i386 (sorry, toby, let's discuss maybe?)
tricks and tails:
- joined .text and .data (saves you a page)
- prot mode switching still in biosboot (it's freezed for awhile)
- biosdisk internals changed
- biosdev is not passed propery to the kernel (i'll fix it soon)
- sure i missed smth here to note (use the source, Luke!)

Initial /boot stuff (from Mickey)

branches: 1.1.2;
file conf.c was initially added on branch new.

crank version number

increment version numbers, due to recent RB_GOODSEED and fchmod +T changes

Teach i386 boot98) and friends about ffs2. fdboot(8) is the exception:
ffs2 support does not fit there. But the the kernel loaded by the
floppy ramdisk does support ffs2.

Use arc4 to bit-spread the 512-byte random buffer over the .openbsd.randomdata
section, which has grown a fair bit with the introduction of retguard.
Mortimer discovered the repeated 512-byte sequence as retguard keys, and
this resolves the issue. (Chacha does not fit on the media, so 1.5K early
drop RC4 is hopefully sufficient in our KARL link universe)
Version crank the bootblocks. sysupgrade -s will install new bootblocks.
ok djm mortimer

crank version, following fchmod change

In the bootblocks, after discovering and opening /bsd.upgrade, fchmod -x
so the file cannot be re-executed upon the next boot. This provides a
stronger one-shot-upgrade model than the upgrade script's rm /bsd.upgrade.
Now various forms of upgrade failure will reboot into /bsd, which is probably
more recoverable. Performing fchmod -x depends on (1) use of MI boot.c
(not alpha/macppc/sparc64/sgi/octeon) and (2) "can write blocks" functionality
in the IO layer. Most architectures have this support now.

Two diagnostics "fchmod a-x %s: failed" and "/bsd.upgrade is not u+x" will
remain in the tree while refinements happen for some of the laggard
architectures.

based upon a discussion florian
tested in snapshots for more than a week without any complaints

When loading intel microcode in the non-efi case, error if the file is
larger than 256KB not 128KB to cope with the 06-8e-09 microcode which is
currently 193KB.

Reported and tested by Paul de Weerd. Matches a diff from claudio@

crank versions

crank version; looks good deraadt

Return early in ucode loading if cpuid is not available. Should fix
booting on 486s without cpuid. Reported by Falk Richter and diagnosed
by guenther@

port the amd64 code for loading intel microcode on boot to i386
ok deraadt@ mlarkin@

Bump boot loader versions for softraid passphrase handling change.

Detect vmm(4) in the bootloader and automatically switch to the serial
console at 115200 baud.

ok deraadt

If you use sys/param.h, you don't need sys/types.h

Bump boot loader versions due to bcrypt pbkdf support.

crank bootloader version after .SUNW_ctf change

as discussed with jsing@ it's easier this way to ensure people have
bootblocks capable of loading the section

crank version numbers of those bootloaders that have been changed by
the com_init fix. ok beck deraadt

belatedly bump bootstrap version after mdrandom() changes; ok deraadt@

Remove support for building the boot blocks with DEBUGFLAGS=-D_TEST, which is
supposed to create a userland binary in order to test non-boot related
functionality. This feature has been bitrotting in a non-compiling state
for years, and causes a too-many-ifdefs disease now that there are intrusive
EFI changes.

No functional change.

Bring the boot changes on amd64 to i386. alloca is deleted.
Also fix the boot from BIOS and bump the version.

input and ok deraadt

Bump version numbers.

crank version after random instruction fix from jsing

crank the version

Crank bootblock versions after last commit

Add i386/amd64 boot(8) support for keydisk-based softraid crypto volumes.

So far, only passphrase-based crypto volumes were bootable. Full disk
encryption with keydisks required a non-crypto partition to load the kernel.

The bootloader now scans all BIOS-visible disks for RAID partitions and
automatically associates keydisk partitions with their crypto volume.
Attempting to boot from a volume without its keydisk currently results
in a passphrase prompt (this might be changed in the future).

There is no need to re-create existing volumes. Moving the root partition
onto the crypto disk and running installboot(8) is all that's needed.

help & ok jsing

Bump i386 boot(8) version.

Force 16 byte alignment in boot(8) srt0.S, since this is more likely to get
the required file offset (0x120) for the .text segment.

Bump boot versions due to recent changes.

Add support for serial consoles at non-standard addresses. This implements
a new "machine comaddr" command that makes it possible to configure the
io port used to access the serial port. This can be used to use serial ports
on a puc(4) device as serial console.

Make amd64/i386 boot(8) pass the DUID of the selected boot device to the
kernel so that it can use it to identify the root disk. This will be
needed in order to correctly boot from a softraid volume.

ok deraadt@ marco@ krw@

Fix extended partition searching so we don't get lost. The offset
of the next EBR is relative to the start of the extended partition
described in the first MBR, not relative to the EBR specifying the
offset in its extended partition entry.

Clean up installboot -v output. Use daddr64_t for all sector numbers.

Not a complete fix, but better than what we had. More tweaks to
come.

Inspired by a diff and cluebat from uscav on tech@ a few weeks
ago.

Feedback from matthew@, weingart@.

ok deraadt@

- properly remove NENTS now after fixing the fallout.

ok deraadt@

- partially revert previous NENTS removal for arches which got busted.

- drop NENTS(), which was yet another copy of nitems().
no binary change


ok deraadt@

crank version

Add ability to limit memory presented to kernel with
'machine memory =128M' style commands. Thanks to
phessler for finding a small man page niggle. Bumped
version strings to a nice round fraction, and make them
the same across the board. Easier to identify boot
binary versions that way.

ok thib@, tedu@, phessler@

Change ELF loader to use the LMA as the load address for the
various segments. Hopefully this will help remove various
hacks in the boot loader in the future. This should have no
effect on most architectures (as we tend to have LMA == VMA).

ok drahn@, soft ok's various others.

Forgot to commit the changes to this file with the rest of the ELF32+64
pieces. Since this is where the "boot both ELF32 and ELF64" behaviour
is turned on for i386, it is quite important.

Bump version numbers too.

Found by ckuethe@; thanks.

Pull out the ELF loadfile pieces from the standalone libraries, so that
both 32- and 64-bit versions can be created (previously only one or the
other could be built for a given boot loader).

Use this to allow the i386 and amd64 boot blocks to boot both ELF32 and
ELF64 kernels (i.e. amd64 boot blocks can now load i386 kernels, and
vice versa). Obviously the system must support LONG mode in order to
successfully run the amd64 kernel once it is loaded.

Advice and discussions from/with dale@ (going back three years). Much
testing nick@ and todd@; thanks.

Check for Control key held down when starting, and don't read boot.conf
if it is. This gives a way to recover from "switching to com0" when
there's no serial cable handy.

Bump version numbers.

A similar change will be made to amd64 boot soon.

ok toby@ deraadt@

Fix the keyboard problem seen on Intel Macs, where only the first
keypress is seen by boot.

It appears that on the Intel Mac, we have to issue the "check for
keystroke" BIOS call before the "get keystroke" call will get it
(unlike any other BIOS I have seen in over 20 years).

It would not have been possible to fix this problem without the
donation from Steven N. Fettig (steve (at) anywheretechnology.com);
many thanks.

Bump versions of boot, cdboot and pxeboot accordingly.

Testing kettenis@, otto@, and others; ok weingart@.

Bump versions to note behaviour change of no longer trying
to boot from NetBSD partitions. Requested by tom@.

boot(8) ``machine memory'' support for > 4G.
Convert parser to strtoll(3) and use 64bit printf.
With help from mickey@
i386 and amd64 tests by me, alpha test by mickey@
OK mickey@, miod@, deraadt@

The return value from getEBDAaddr() (info) is not used in bios_E820(),
so nuke it. amd64 no longer needs biosprobe.c listed in SRCS. Trims
100 bytes from the boot blocks.

Bump versions on boot, cdboot and pxeboot, as I'm getting cautious in
my old age.

ok weingart@

Convert the size of a memory chunk from bytes to megabytes before
casting to a 32-bit value, not after. Corrects the display of large
memory chunks in the probing: line (mem[615K 3518M 0M a20=on] becomes
mem[615K 3518M 12288M a20=on]).

Bump version on boot, cdboot and pxeboot accordingly.

"looks ok to me" weingart@

Ensure we save the %ebx register returned from the BIOS call, not just
%bx. Fixes problem introduced in gidt.S r1.29, which could lead to an
incomplete memory map, and "too little memory available; running in
degraded mode", as found by Roy Morris rmorris (at) internetsecure (dot)
com. (Thanks for the report, and for testing the fix.)

Bump version on boot, cdboot and pxeboot accordingly.

ok weingart@

[OpenBSD]

Make boot code use real mode with 64K segments instead of 1M
segments. Improves stability with some disk controller cards.
Also explicitly state operand size on some moves.

Bump version on boot, cdboot and pxeboot accordingly.

"just get them in" beck@ ok weingart@

Enter pxeboot, derived from the NetBSD implementation. Initially
intended to support network installs using bsd.rd over TFTP.

Thanks to the many who tested, including Diana Eichert.

ok deraadt@

- delay reading the disklabel for floppies until after we're sure it's
the boot device. this fixes a delay (sometimes very long) if the bios
correctly reports a floppy but it's unplugged.
- bump version.

original idea from mdw@, tested by nick@, toby@ ok.

- some bios return a valid geometry for inexistent hd's so before
getting the geometry check the number of attached drives from
the bios area at 40:75.
- bump version.

from toby@. we want people to test this, specially those with ghost
drives showing up.

- move checks earlier to catch inexistent devices before testing for edd.
- bump version.
toby@ ok.

handle case where bios EDD support only supports a subset; from fgsch,
ok toby, and now tested for lots of machines

three four kills

fix tree after mickey breakage

First lba support in /boot. Not complete lba boot support, but it's the
first step on the way there. Ok deraadt@, espie@, todd@, and others.

i386 ELF bootloader. developed with weingart@

Bump version to help distinquish new memory probe and fixes.

branches: 1.18.4;
bump the version for new kbd probe; 10x for a reminder from fgsch@

increase version since we've removed -b; per fgsch@'s suggestion

add pciprobe back into /boot.
it appears there are machines only equipped w/ real-mode pci bios.
int time, we will benefit from this the other way around, --
we'll elliminate pci bios _calls_ in kernel instead.

Increment version; deraadt@ ok.

aout_ldsym, increase boot minor version

branches: 1.13.8;
new exec framework

i386 bootblocks that work for 2.3. A tale too long to tell

Changes/updates to /boot stuff. More to come.
Fixes many divide by zero and pointer bugs.

we have new features, bump boot version

Use BIOS to probe for memory map.
Probe for BIOS supported disks.
Use BIOS to get geometry for supported disks.

All in preparation to passing the whole thing
to the kernel.

bump the version number

completely disable network support

s/kbd/pc/ for consistency with kernel. Do even better __asms for BIOS calls.
Adapt to new console probing and setting API. Do not try to probe pc0 via
the NVRAM. Fix some other buglets.

new cons

proper includes
add const for consw declarations

commit all my mods to the last imported libsa stuff....
including:
- disklabel support;
- better boot cmd line
- smaller size (using some compilation switches ;)
- no more relocations in /boot, it's loaded in the place;
- better disk performance (maybe were already in there)
- installboot -n does not require write perms for device
- more debugs
- missing parts in libsa (such as cd9660 and so)
- i don't like 2 files for exec_i386 (sorry, toby, let's discuss maybe?)
tricks and tails:
- joined .text and .data (saves you a page)
- prot mode switching still in biosboot (it's freezed for awhile)
- biosdisk internals changed
- biosdev is not passed propery to the kernel (i'll fix it soon)
- sure i missed smth here to note (use the source, Luke!)

Initial /boot stuff (from Mickey)

branches: 1.1.2;
file conf.c was initially added on branch new.

increment version numbers, due to recent RB_GOODSEED and fchmod +T changes

Teach i386 boot98) and friends about ffs2. fdboot(8) is the exception:
ffs2 support does not fit there. But the the kernel loaded by the
floppy ramdisk does support ffs2.

Use arc4 to bit-spread the 512-byte random buffer over the .openbsd.randomdata
section, which has grown a fair bit with the introduction of retguard.
Mortimer discovered the repeated 512-byte sequence as retguard keys, and
this resolves the issue. (Chacha does not fit on the media, so 1.5K early
drop RC4 is hopefully sufficient in our KARL link universe)
Version crank the bootblocks. sysupgrade -s will install new bootblocks.
ok djm mortimer

crank version, following fchmod change

In the bootblocks, after discovering and opening /bsd.upgrade, fchmod -x
so the file cannot be re-executed upon the next boot. This provides a
stronger one-shot-upgrade model than the upgrade script's rm /bsd.upgrade.
Now various forms of upgrade failure will reboot into /bsd, which is probably
more recoverable. Performing fchmod -x depends on (1) use of MI boot.c
(not alpha/macppc/sparc64/sgi/octeon) and (2) "can write blocks" functionality
in the IO layer. Most architectures have this support now.

Two diagnostics "fchmod a-x %s: failed" and "/bsd.upgrade is not u+x" will
remain in the tree while refinements happen for some of the laggard
architectures.

based upon a discussion florian
tested in snapshots for more than a week without any complaints

When loading intel microcode in the non-efi case, error if the file is
larger than 256KB not 128KB to cope with the 06-8e-09 microcode which is
currently 193KB.

Reported and tested by Paul de Weerd. Matches a diff from claudio@

crank versions

crank version; looks good deraadt

Return early in ucode loading if cpuid is not available. Should fix
booting on 486s without cpuid. Reported by Falk Richter and diagnosed
by guenther@

port the amd64 code for loading intel microcode on boot to i386
ok deraadt@ mlarkin@

Bump boot loader versions for softraid passphrase handling change.

Detect vmm(4) in the bootloader and automatically switch to the serial
console at 115200 baud.

ok deraadt

If you use sys/param.h, you don't need sys/types.h

Bump boot loader versions due to bcrypt pbkdf support.

crank bootloader version after .SUNW_ctf change

as discussed with jsing@ it's easier this way to ensure people have
bootblocks capable of loading the section

crank version numbers of those bootloaders that have been changed by
the com_init fix. ok beck deraadt

belatedly bump bootstrap version after mdrandom() changes; ok deraadt@

Remove support for building the boot blocks with DEBUGFLAGS=-D_TEST, which is
supposed to create a userland binary in order to test non-boot related
functionality. This feature has been bitrotting in a non-compiling state
for years, and causes a too-many-ifdefs disease now that there are intrusive
EFI changes.

No functional change.

Bring the boot changes on amd64 to i386. alloca is deleted.
Also fix the boot from BIOS and bump the version.

input and ok deraadt

Bump version numbers.

crank version after random instruction fix from jsing