Leah Rowe 1f205662a9 util/nvmutil: re-enable urandom reads
i had to loosen the pledges for the new i/o
framework, which needs more permissions

as a result, i can now open urandom in
this function statically, rather than
in nvmutil's control logic

and because of that, it's less buggy now

arc4random is disabled on linux by default,
because it's not universally available
on all libc, and only since about 2022
in some glibc versions

better for portability to let linux users
justt use urandom

the new logic is different. now it falls
back to rand per-byte, but in practise
it almost never will.

Signed-off-by: Leah Rowe <leah@libreboot.org>
2026-03-15 20:53:06 +00:00
2026-02-26 00:58:06 +00:00
2021-05-18 13:56:12 +01:00
2025-11-14 18:22:51 +00:00

Libreboot

Documentation: libreboot.org
Support: #libreboot on Libera IRC

Libreboot provides libre boot firmware on supported motherboards. It replaces proprietary vendor BIOS/UEFI implementations, by

  • Using coreboot to initialize the hardware (e.g. memory controller, CPU, etc.) while minimizing unwanted functionality (e.g. backdoors such as the Intel Management Engine)
  • ... which runs a payload such as SeaBIOS, GRUB, or U-Boot
  • ... which loads your operating system's boot loader (BSD and Linux-based systems are supported).

Why use Libreboot, and what is coreboot?

A lot of users who use libre operating systems still use proprietary boot firmware, which often contain backdoors and bugs, hampering user freedom and right to repair.

coreboot provides libre boot firmware by initializing the hardware then running a payload. However, coreboot is notoriously difficult to configure and install for most non-technical users, requiring detailed technical knowledge of hardware.

Libreboot solves this by being a coreboot distribution (in the same way that Alpine Linux is a Linux distribution). It provides a fully automated build system that downloads and compiles pre-configured ROM images for supported motherboards, so end-users could easily fetch images to flash onto their devices.

Libreboot also produces documentation aimed at non-technical users and excellent user support via IRC.

Contribute

You can check bugs listed on the bug tracker.

You may use Codeberg pull requests to send patches with bug fixes or other improvements. This repository hosts the code for the main build system. The website lives in a separate repository.

Development is also done on the IRC channel.

License for this README

It's just a README file. It is released under Creative Commons Zero, version 1.0.

Languages
C 71.4%
Shell 12.5%
Roff 11.4%
Python 2.8%
Awk 1%
Other 0.9%