|
|
@@ -5,64 +5,318 @@
|
|
|
#define HARDWARE_SECURE_KEY "ARK-OS-9aaafa37077ee91e5df2f47a8e9e1564beecde1cc13b279f51d915bf8c746eb4"
|
|
|
|
|
|
EFI_STATUS check_os_signature(EFI_HANDLE ImageHandle, EFI_SYSTEM_TABLE *SystemTable) {
|
|
|
- Print(L"Checking Hardware Secure Key...\n");
|
|
|
- // In a real scenario, we would read the securebuild.ark or avb.img from disk.
|
|
|
- // For this conceptual implementation, we assume we read it and compare.
|
|
|
- int has_key = 1; // Assume key exists in hardware
|
|
|
- int match = 1; // Assume signature matches
|
|
|
+ // Conceptual hardware verified boot check
|
|
|
+ int has_key = 1;
|
|
|
+ int match = 1;
|
|
|
|
|
|
if (has_key) {
|
|
|
if (match) {
|
|
|
- Print(L"Signature matches. OS is verified.\n");
|
|
|
return EFI_SUCCESS;
|
|
|
} else {
|
|
|
- Print(L"WARNING: Signature mismatch! Halting boot.\n");
|
|
|
return EFI_SECURITY_VIOLATION;
|
|
|
}
|
|
|
} else {
|
|
|
- Print(L"No hardware key found. Proceeding with unverified boot.\n");
|
|
|
return EFI_SUCCESS;
|
|
|
}
|
|
|
}
|
|
|
|
|
|
EFI_STATUS load_drm_module() {
|
|
|
- Print(L"Loading DRM Module...\n");
|
|
|
- // Code to load DRM from /frameworks/DRM into memory
|
|
|
- Print(L"DRM Module loaded and initialized.\n");
|
|
|
+ // Conceptual DRM module loading
|
|
|
return EFI_SUCCESS;
|
|
|
}
|
|
|
|
|
|
-EFI_STATUS load_kernel(EFI_HANDLE ImageHandle, EFI_SYSTEM_TABLE *SystemTable) {
|
|
|
- Print(L"Loading Kernel into memory...\n");
|
|
|
- // Code to locate bzImage on the EFI System Partition, load it into RAM,
|
|
|
- // prepare boot parameters (command line, initrd), and jump to it.
|
|
|
- Print(L"Kernel loaded. Passing specifications and security file passthroughs...\n");
|
|
|
- // Boot transfer
|
|
|
+static EFI_STATUS read_file_from_esp(
|
|
|
+ EFI_HANDLE ImageHandle,
|
|
|
+ EFI_SYSTEM_TABLE *SystemTable,
|
|
|
+ CHAR16 *FileName,
|
|
|
+ VOID **BufferOut,
|
|
|
+ UINTN *SizeOut
|
|
|
+) {
|
|
|
+ EFI_STATUS status;
|
|
|
+ EFI_LOADED_IMAGE *loaded_image = NULL;
|
|
|
+ EFI_SIMPLE_FILE_SYSTEM_PROTOCOL *fs = NULL;
|
|
|
+ EFI_FILE_HANDLE root = NULL;
|
|
|
+ EFI_FILE_HANDLE file = NULL;
|
|
|
+
|
|
|
+ // 1. Get the LoadedImage protocol for the current bootloader
|
|
|
+ status = uefi_call_wrapper(
|
|
|
+ SystemTable->BootServices->HandleProtocol,
|
|
|
+ 3,
|
|
|
+ ImageHandle,
|
|
|
+ &LoadedImageProtocol,
|
|
|
+ (VOID **)&loaded_image
|
|
|
+ );
|
|
|
+ if (EFI_ERROR(status)) return status;
|
|
|
+
|
|
|
+ // 2. Open the SimpleFileSystem protocol on the device handle of the loaded image
|
|
|
+ status = uefi_call_wrapper(
|
|
|
+ SystemTable->BootServices->HandleProtocol,
|
|
|
+ 3,
|
|
|
+ loaded_image->DeviceHandle,
|
|
|
+ &FileSystemProtocol,
|
|
|
+ (VOID **)&fs
|
|
|
+ );
|
|
|
+ if (EFI_ERROR(status)) return status;
|
|
|
+
|
|
|
+ // 3. Open the volume
|
|
|
+ status = uefi_call_wrapper(fs->OpenVolume, 2, fs, &root);
|
|
|
+ if (EFI_ERROR(status)) return status;
|
|
|
+
|
|
|
+ // 4. Open the file
|
|
|
+ status = uefi_call_wrapper(
|
|
|
+ root->Open,
|
|
|
+ 5,
|
|
|
+ root,
|
|
|
+ &file,
|
|
|
+ FileName,
|
|
|
+ EFI_FILE_MODE_READ,
|
|
|
+ 0
|
|
|
+ );
|
|
|
+ if (EFI_ERROR(status)) {
|
|
|
+ uefi_call_wrapper(root->Close, 1, root);
|
|
|
+ return status;
|
|
|
+ }
|
|
|
+
|
|
|
+ // 5. Get file info to determine size
|
|
|
+ EFI_FILE_INFO *file_info = NULL;
|
|
|
+ UINTN info_size = 0;
|
|
|
+ status = uefi_call_wrapper(
|
|
|
+ file->GetInfo,
|
|
|
+ 4,
|
|
|
+ file,
|
|
|
+ &GenericFileInfo,
|
|
|
+ &info_size,
|
|
|
+ NULL
|
|
|
+ );
|
|
|
+ if (status == EFI_BUFFER_TOO_SMALL) {
|
|
|
+ status = uefi_call_wrapper(
|
|
|
+ SystemTable->BootServices->AllocatePool,
|
|
|
+ 3,
|
|
|
+ EfiLoaderData,
|
|
|
+ info_size,
|
|
|
+ (VOID **)&file_info
|
|
|
+ );
|
|
|
+ if (EFI_ERROR(status)) {
|
|
|
+ uefi_call_wrapper(file->Close, 1, file);
|
|
|
+ uefi_call_wrapper(root->Close, 1, root);
|
|
|
+ return status;
|
|
|
+ }
|
|
|
+
|
|
|
+ status = uefi_call_wrapper(
|
|
|
+ file->GetInfo,
|
|
|
+ 4,
|
|
|
+ file,
|
|
|
+ &GenericFileInfo,
|
|
|
+ &info_size,
|
|
|
+ (VOID *)file_info
|
|
|
+ );
|
|
|
+ }
|
|
|
+
|
|
|
+ if (EFI_ERROR(status)) {
|
|
|
+ if (file_info) uefi_call_wrapper(SystemTable->BootServices->FreePool, 1, file_info);
|
|
|
+ uefi_call_wrapper(file->Close, 1, file);
|
|
|
+ uefi_call_wrapper(root->Close, 1, root);
|
|
|
+ return status;
|
|
|
+ }
|
|
|
+
|
|
|
+ UINTN file_size = file_info->FileSize;
|
|
|
+ uefi_call_wrapper(SystemTable->BootServices->FreePool, 1, file_info);
|
|
|
+
|
|
|
+ // 6. Allocate buffer for file contents
|
|
|
+ VOID *buffer = NULL;
|
|
|
+ status = uefi_call_wrapper(
|
|
|
+ SystemTable->BootServices->AllocatePool,
|
|
|
+ 3,
|
|
|
+ EfiLoaderData,
|
|
|
+ file_size,
|
|
|
+ &buffer
|
|
|
+ );
|
|
|
+ if (EFI_ERROR(status)) {
|
|
|
+ uefi_call_wrapper(file->Close, 1, file);
|
|
|
+ uefi_call_wrapper(root->Close, 1, root);
|
|
|
+ return status;
|
|
|
+ }
|
|
|
+
|
|
|
+ // 7. Read file contents
|
|
|
+ UINTN read_size = file_size;
|
|
|
+ status = uefi_call_wrapper(file->Read, 3, file, &read_size, buffer);
|
|
|
+ if (EFI_ERROR(status) || read_size != file_size) {
|
|
|
+ uefi_call_wrapper(SystemTable->BootServices->FreePool, 1, buffer);
|
|
|
+ uefi_call_wrapper(file->Close, 1, file);
|
|
|
+ uefi_call_wrapper(root->Close, 1, root);
|
|
|
+ return EFI_DEVICE_ERROR;
|
|
|
+ }
|
|
|
+
|
|
|
+ // 8. Clean up and return
|
|
|
+ uefi_call_wrapper(file->Close, 1, file);
|
|
|
+ uefi_call_wrapper(root->Close, 1, root);
|
|
|
+
|
|
|
+ *BufferOut = buffer;
|
|
|
+ *SizeOut = file_size;
|
|
|
return EFI_SUCCESS;
|
|
|
}
|
|
|
|
|
|
EFI_STATUS efi_main(EFI_HANDLE ImageHandle, EFI_SYSTEM_TABLE *SystemTable) {
|
|
|
InitializeLib(ImageHandle, SystemTable);
|
|
|
-
|
|
|
- Print(L"Welcome to ArkOS Bootloader\n");
|
|
|
-
|
|
|
- EFI_STATUS status = check_os_signature(ImageHandle, SystemTable);
|
|
|
+ EFI_STATUS status;
|
|
|
+
|
|
|
+ // 1. Locate the Graphics Output Protocol (GOP)
|
|
|
+ EFI_GRAPHICS_OUTPUT_PROTOCOL *gop = NULL;
|
|
|
+ EFI_GUID gop_guid = EFI_GRAPHICS_OUTPUT_PROTOCOL_GUID;
|
|
|
+ status = uefi_call_wrapper(
|
|
|
+ SystemTable->BootServices->LocateProtocol,
|
|
|
+ 3,
|
|
|
+ &gop_guid,
|
|
|
+ NULL,
|
|
|
+ (VOID **)&gop
|
|
|
+ );
|
|
|
+
|
|
|
+ UINTN center_x = 0;
|
|
|
+ UINTN center_y = 0;
|
|
|
+ UINTN anim_width = 200;
|
|
|
+ UINTN anim_height = 200;
|
|
|
+
|
|
|
+ // 2. Clear screen to black and display the white dot
|
|
|
+ if (!EFI_ERROR(status) && gop) {
|
|
|
+ EFI_GRAPHICS_OUTPUT_BLT_PIXEL black = {0, 0, 0, 0};
|
|
|
+ uefi_call_wrapper(
|
|
|
+ gop->Blt,
|
|
|
+ 10,
|
|
|
+ gop,
|
|
|
+ &black,
|
|
|
+ EfiBltVideoFill,
|
|
|
+ 0, 0,
|
|
|
+ 0, 0,
|
|
|
+ gop->Mode->Info->HorizontalResolution,
|
|
|
+ gop->Mode->Info->VerticalResolution,
|
|
|
+ 0
|
|
|
+ );
|
|
|
+
|
|
|
+ center_x = (gop->Mode->Info->HorizontalResolution - anim_width) / 2;
|
|
|
+ center_y = (gop->Mode->Info->VerticalResolution - anim_height) / 2;
|
|
|
+
|
|
|
+ // Draw a 6x6 pixel white dot in the center of the 200x200 region
|
|
|
+ EFI_GRAPHICS_OUTPUT_BLT_PIXEL white = {255, 255, 255, 0};
|
|
|
+ uefi_call_wrapper(
|
|
|
+ gop->Blt,
|
|
|
+ 10,
|
|
|
+ gop,
|
|
|
+ &white,
|
|
|
+ EfiBltVideoFill,
|
|
|
+ 0, 0,
|
|
|
+ center_x + 97, center_y + 97,
|
|
|
+ 6, 6,
|
|
|
+ 0
|
|
|
+ );
|
|
|
+ }
|
|
|
+
|
|
|
+ // 3. Perform OS Key signature check and load DRM
|
|
|
+ status = check_os_signature(ImageHandle, SystemTable);
|
|
|
if (EFI_ERROR(status)) {
|
|
|
return status;
|
|
|
}
|
|
|
-
|
|
|
- // Only load DRM if we successfully passed the key check (or if no key was present and we proceeded)
|
|
|
- // The prompt says: "load DRM and makesure the OS is singe... if it does not have a key it will boot up anyway"
|
|
|
load_drm_module();
|
|
|
|
|
|
- status = load_kernel(ImageHandle, SystemTable);
|
|
|
- if (EFI_ERROR(status)) {
|
|
|
- Print(L"Failed to load kernel.\n");
|
|
|
- return status;
|
|
|
+ // 4. Resolve path and load the kernel image (bzImage)
|
|
|
+ EFI_LOADED_IMAGE *loaded_image = NULL;
|
|
|
+ status = uefi_call_wrapper(
|
|
|
+ SystemTable->BootServices->HandleProtocol,
|
|
|
+ 3,
|
|
|
+ ImageHandle,
|
|
|
+ &LoadedImageProtocol,
|
|
|
+ (VOID **)&loaded_image
|
|
|
+ );
|
|
|
+ if (EFI_ERROR(status)) return status;
|
|
|
+
|
|
|
+ EFI_DEVICE_PATH *kernel_path = FileDevicePath(loaded_image->DeviceHandle, L"\\EFI\\BOOT\\bzImage");
|
|
|
+ if (kernel_path == NULL) return EFI_OUT_OF_RESOURCES;
|
|
|
+
|
|
|
+ EFI_HANDLE kernel_img = NULL;
|
|
|
+ status = uefi_call_wrapper(
|
|
|
+ SystemTable->BootServices->LoadImage,
|
|
|
+ 6,
|
|
|
+ FALSE,
|
|
|
+ ImageHandle,
|
|
|
+ kernel_path,
|
|
|
+ NULL,
|
|
|
+ 0,
|
|
|
+ &kernel_img
|
|
|
+ );
|
|
|
+ if (EFI_ERROR(status)) return status;
|
|
|
+
|
|
|
+ // 5. Play the boot animation (expanding nucleus) from ESP
|
|
|
+ if (gop) {
|
|
|
+ VOID *anim_buffer = NULL;
|
|
|
+ UINTN anim_size = 0;
|
|
|
+ status = read_file_from_esp(ImageHandle, SystemTable, L"\\EFI\\BOOT\\animation.bin", &anim_buffer, &anim_size);
|
|
|
+ if (!EFI_ERROR(status)) {
|
|
|
+ UINTN num_frames = 60;
|
|
|
+ UINTN expected_size = num_frames * anim_width * anim_height * sizeof(EFI_GRAPHICS_OUTPUT_BLT_PIXEL);
|
|
|
+
|
|
|
+ if (anim_size >= expected_size) {
|
|
|
+ // Clear the white dot to black first
|
|
|
+ EFI_GRAPHICS_OUTPUT_BLT_PIXEL black = {0, 0, 0, 0};
|
|
|
+ uefi_call_wrapper(
|
|
|
+ gop->Blt,
|
|
|
+ 10,
|
|
|
+ gop,
|
|
|
+ &black,
|
|
|
+ EfiBltVideoFill,
|
|
|
+ 0, 0,
|
|
|
+ 0, 0,
|
|
|
+ gop->Mode->Info->HorizontalResolution,
|
|
|
+ gop->Mode->Info->VerticalResolution,
|
|
|
+ 0
|
|
|
+ );
|
|
|
+
|
|
|
+ EFI_GRAPHICS_OUTPUT_BLT_PIXEL *frames = (EFI_GRAPHICS_OUTPUT_BLT_PIXEL *)anim_buffer;
|
|
|
+ for (UINTN f = 0; f < num_frames; f++) {
|
|
|
+ EFI_GRAPHICS_OUTPUT_BLT_PIXEL *frame = &frames[f * anim_width * anim_height];
|
|
|
+
|
|
|
+ uefi_call_wrapper(
|
|
|
+ gop->Blt,
|
|
|
+ 10,
|
|
|
+ gop,
|
|
|
+ frame,
|
|
|
+ EfiBltBufferToVideo,
|
|
|
+ 0, 0,
|
|
|
+ center_x, center_y,
|
|
|
+ anim_width, anim_height,
|
|
|
+ anim_width * sizeof(EFI_GRAPHICS_OUTPUT_BLT_PIXEL)
|
|
|
+ );
|
|
|
+
|
|
|
+ uefi_call_wrapper(SystemTable->BootServices->Stall, 1, 16666);
|
|
|
+ }
|
|
|
+ }
|
|
|
+ uefi_call_wrapper(SystemTable->BootServices->FreePool, 1, anim_buffer);
|
|
|
+ }
|
|
|
}
|
|
|
|
|
|
- Print(L"Jumping to Kernel...\n");
|
|
|
-
|
|
|
- // The kernel will now take over and eventually launch the Swift splash screen.
|
|
|
- return EFI_SUCCESS;
|
|
|
+ // 6. Set command line options for the kernel
|
|
|
+ EFI_LOADED_IMAGE *kernel_loaded_image = NULL;
|
|
|
+ status = uefi_call_wrapper(
|
|
|
+ SystemTable->BootServices->HandleProtocol,
|
|
|
+ 3,
|
|
|
+ kernel_img,
|
|
|
+ &LoadedImageProtocol,
|
|
|
+ (VOID **)&kernel_loaded_image
|
|
|
+ );
|
|
|
+ if (EFI_ERROR(status)) return status;
|
|
|
+
|
|
|
+ CHAR16 *cmd_line = L"initrd=\\EFI\\BOOT\\initramfs.img console=ttyS0 loglevel=0 logo.nologo init=/init root=/dev/sdb rw quiet vt.global_cursor_default=0";
|
|
|
+ kernel_loaded_image->LoadOptions = cmd_line;
|
|
|
+ kernel_loaded_image->LoadOptionsSize = (StrLen(cmd_line) + 1) * sizeof(CHAR16);
|
|
|
+
|
|
|
+ // 7. Start the kernel
|
|
|
+ UINTN exit_data_size = 0;
|
|
|
+ CHAR16 *exit_data = NULL;
|
|
|
+ status = uefi_call_wrapper(
|
|
|
+ SystemTable->BootServices->StartImage,
|
|
|
+ 3,
|
|
|
+ kernel_img,
|
|
|
+ &exit_data_size,
|
|
|
+ &exit_data
|
|
|
+ );
|
|
|
+
|
|
|
+ return status;
|
|
|
}
|
