Progress call: 17:00 UTC
Progress Call - May 25, 2025
- Subdomain setup with Home Assisant
- Gnudip has option for "Wildcard domains"
- User has to add a static domain for the subdomain
- User has to select the subdomain in the app
FreedomBox DynDNS service
- Switching to HTTP update mechanism (still limited to IPv4 only)
- Switching from TCP mechanism
- Ultimately to move away from GnuDIP
- Break compatibility with GnuDIP
- Update other kinds of records - MX, SRV
- Point the client to /update path on the server
- currently points to the CGI BIN script.
- support both GET and POST /update URLs
- Compatibility with OpenWRT's DDNS client
- UEFI/Secureboot images for AMD64
- Images will boot on BIOS with Secureboot enabled on x86 hardware
- GPT partition table instead of MBR partition table
- ESP partition: contains EFI binaries
- Secure boot checks signatures on EFI binaries
- A Microsoft-signed binary called SHIM loads GRUB
- Owners of devices can sign their own binaries instead
- Kernels and kernel modules don't load unless they are signed. Protects from malware-injected kernel modules
- A/B partitioning scheme is possible.
- dm-verity used for signature verification of binaries in root partition
- Also possible for ARM64 images. Though UEFI is in use, Secureboot is not currently enabled.
- No easy way to support BIOS-based booting anymore. (20 years old machines)
- grub-cloud-amd64
- Virtmanager needs an extra package (ovmf) to turn on UEFI-mode.
VirtualBox needs to be configured to use UEFI booting before starting the machine
- Encrypted disks can only be unlocked on the same machine using TPM.