This is the first release with Redfish support!
http://www.kurttaylor.com/blog/2019/02/openbmc-2-6-release/
https://github.com/openbmc/docs/blob/master/release/release-notes.md#26-feb-4-2019
Tag: OpenBMC
OpenBMC on PantsDown
[…]Solution: The mitigations are in the 2.6 level of OpenBMC for all supported SPEED-based platforms. The complete solution is platform dependent because it can involve patching both the BMC firmware and the host firmware. For example, disabling the iLPC2AHB bridge can be a bit of a finicky process. The host platform’s operating system may be impacted when the P2A bridge is disabled. The solution may require an updated ASPEED video driver. See Linux commit 71f677a.[…]
CVE-2019-6260: PantsDown: Gaining control of BMC from the host processor
CVE-2019-6260: Gaining control of BMC from the host processor
Posted on 23/01/2019 by Stewart Smith
This is details for CVE-2019-6260 – which has been nicknamed “pantsdown” due to the nature of feeling that we feel that we’ve “caught chunks of the industry with their…” and combined with the fact that naming things is hard, so if you pick a bad name somebody would have to come up with a better one before we publish.
I expect OpenBMC to have a statement shortly.[…]
MORF – AMI’s open source Redfish Framework in OpenBMC
IBM providing their OpenBMC code to Linux Foundation
[…]IBM is providing their OpenBMC code base to The Linux Foundation, and this project will be supported by several organizations, including Facebook, Google, Intel, and Microsoft. The community is looking to expand and invites contributors from across the industry to come together in defining and creating the OpenBMC stack.[…]The Linux Foundation is pleased to welcome OpenBMC to our family of open source projects and to work with the community to support its growth.[…]
Raptor meets OpenBMC crowdsourcing pledge goal!
Overall Goal: $50,000 USD
Raptor’s Contribution: $30,000 USD
Community Goal: $20,000 USD
Current Pledges: $20,000 USD
Remaining Deficit: $0 USD
Overall Funding Status: 100.0%
Community Funding Status: 100.0%
https://www.raptorengineering.com/coreboot/kgpe-d16-bmc-port-offer.php
One week left to help Raptor with OpenBMC port!
Raptor Engineering seeks funds for OpenBMC port
Raptor Engineering is asking for crowdsource funding to help them port OpenBMC to an ASUS system:
“Make coreboot a first-class citizen in the datacenter on modern, blob-free hardware.”
https://www.raptorengineering.com/coreboot/kgpe-d16-bmc-port-offer.php
Talos Secure Workstation: coreboot + POWER8
New potential product on CrowdSupply with a NICE set of features (…and I wonder how secure it will be):
* Blob-free operation
* Fully libre (open-source) IBM OPAL primary firmware w/ PetitBoot interface
* Fully libre (open-source) OpenBMC secondary (IPMI / OoBM) firmware
* NO signing keys preventing firmware modification
OpenPOWER firmware update from Stewart
Stewart Smith has a new blog post about OpenPOWER, focusing on firmware development community changes, including comments on OpenBMC and other projects. As well, apparently now non-IBM developers can now contribute to OpenPOWER firmware, as someone from Foxconn.com has recently done, which sounds like an improvement.
Facebook’s OpenBMC project
I just learned about Facebook’s OpenBMC, thanks to Sai Dasari of Facebook, who just posted a message to the Open Compute Project’s hardware management list, talking about DMTF Redfish and Facebook’s OpenBMC.
OpenBMC is an open software framework to build a complete Linux image for a Board Management Controller (BMC).
When we were developing Facebook’s top-of-rack “Wedge” switch, we followed our usual process in the beginning; our partner was responsible for developing the BMC software. However, in the first months of the project, many requirements for the BMC software emerged, introducing extra complexity, coordination, and delays into the BMC software-development process. To address these challenges, at one of Facebook’s hackathon events, four engineers worked to create our own BMC software. Within 24 hours, we were able to build a minimum BMC software image, including an SSH server and the ability to change fan speed, power-on the host CPU, and blink some LEDs. It was far from a production image, but it gave us a strong confidence that we could eventually develop our own BMC software for “Wedge.” Fast-forward eight months, and we’ve deployed our solution — code-named “OpenBMC” — into production along with Wedge. And today we’re sharing OpenBMC with the open source community in the hope that we can collaborate based on this open software framework for next-generation system management.
More Information:
https://code.facebook.com/posts/1471778586452119/openbmc-for-server-porting-and-supporting-new-features-for-yosemite-/
https://code.facebook.com/posts/1601610310055392/introducing-openbmc-an-open-software-framework-for-next-generation-system-management/
https://github.com/facebook/openbmc
https://twitter.com/hashtag/openbmc
Firmware Security 