2 * Copyright (c) 2008-2010 Rui Paulo
3 * Copyright (c) 2006 Marcel Moolenaar
6 * Copyright (c) 2018 Netflix, Inc.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 * 2. Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in the
16 * documentation and/or other materials provided with the distribution.
18 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
19 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
20 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
21 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
22 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
23 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
24 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
25 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
26 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
27 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30 #include <sys/cdefs.h>
31 __FBSDID("$FreeBSD$");
36 #include <sys/param.h>
37 #include <sys/reboot.h>
50 #include <bootstrap.h>
55 #include "loader_efi.h"
57 struct arch_switch archsw; /* MI/MD interface boundary */
59 EFI_GUID acpi = ACPI_TABLE_GUID;
60 EFI_GUID acpi20 = ACPI_20_TABLE_GUID;
61 EFI_GUID devid = DEVICE_PATH_PROTOCOL;
62 EFI_GUID imgid = LOADED_IMAGE_PROTOCOL;
63 EFI_GUID mps = MPS_TABLE_GUID;
64 EFI_GUID netid = EFI_SIMPLE_NETWORK_PROTOCOL;
65 EFI_GUID smbios = SMBIOS_TABLE_GUID;
66 EFI_GUID smbios3 = SMBIOS3_TABLE_GUID;
67 EFI_GUID dxe = DXE_SERVICES_TABLE_GUID;
68 EFI_GUID hoblist = HOB_LIST_TABLE_GUID;
69 EFI_GUID lzmadecomp = LZMA_DECOMPRESSION_GUID;
70 EFI_GUID mpcore = ARM_MP_CORE_INFO_TABLE_GUID;
71 EFI_GUID esrt = ESRT_TABLE_GUID;
72 EFI_GUID memtype = MEMORY_TYPE_INFORMATION_TABLE_GUID;
73 EFI_GUID debugimg = DEBUG_IMAGE_INFO_TABLE_GUID;
74 EFI_GUID fdtdtb = FDT_TABLE_GUID;
75 EFI_GUID inputid = SIMPLE_TEXT_INPUT_PROTOCOL;
78 * Number of seconds to wait for a keystroke before exiting with failure
79 * in the event no currdev is found. -2 means always break, -1 means
80 * never break, 0 means poll once and then reboot, > 0 means wait for
81 * that many seconds. "fail_timeout" can be set in the environment as
84 static int fail_timeout = 5;
87 * Current boot variable
95 EFI_DEVICE_PATH *path;
96 EFI_HANDLE *hin, *hin_end, *walker;
101 * Find all the handles that support the SIMPLE_TEXT_INPUT_PROTOCOL and
102 * do the typical dance to get the right sized buffer.
106 status = BS->LocateHandle(ByProtocol, &inputid, 0, &sz, 0);
107 if (status == EFI_BUFFER_TOO_SMALL) {
108 hin = (EFI_HANDLE *)malloc(sz);
109 status = BS->LocateHandle(ByProtocol, &inputid, 0, &sz,
111 if (EFI_ERROR(status))
114 if (EFI_ERROR(status))
118 * Look at each of the handles. If it supports the device path protocol,
119 * use it to get the device path for this handle. Then see if that
120 * device path matches either the USB device path for keyboards or the
121 * legacy device path for keyboards.
123 hin_end = &hin[sz / sizeof(*hin)];
124 for (walker = hin; walker < hin_end; walker++) {
125 status = BS->HandleProtocol(*walker, &devid, (VOID **)&path);
126 if (EFI_ERROR(status))
129 while (!IsDevicePathEnd(path)) {
131 * Check for the ACPI keyboard node. All PNP3xx nodes
132 * are keyboards of different flavors. Note: It is
133 * unclear of there's always a keyboard node when
134 * there's a keyboard controller, or if there's only one
135 * when a keyboard is detected at boot.
137 if (DevicePathType(path) == ACPI_DEVICE_PATH &&
138 (DevicePathSubType(path) == ACPI_DP ||
139 DevicePathSubType(path) == ACPI_EXTENDED_DP)) {
140 ACPI_HID_DEVICE_PATH *acpi;
142 acpi = (ACPI_HID_DEVICE_PATH *)(void *)path;
143 if ((EISA_ID_TO_NUM(acpi->HID) & 0xff00) == 0x300 &&
144 (acpi->HID & 0xffff) == PNP_EISA_ID_CONST) {
149 * Check for USB keyboard node, if present. Unlike a
150 * PS/2 keyboard, these definitely only appear when
151 * connected to the system.
153 } else if (DevicePathType(path) == MESSAGING_DEVICE_PATH &&
154 DevicePathSubType(path) == MSG_USB_CLASS_DP) {
155 USB_CLASS_DEVICE_PATH *usb;
157 usb = (USB_CLASS_DEVICE_PATH *)(void *)path;
158 if (usb->DeviceClass == 3 && /* HID */
159 usb->DeviceSubClass == 1 && /* Boot devices */
160 usb->DeviceProtocol == 1) { /* Boot keyboards */
165 path = NextDevicePathNode(path);
174 set_currdev(const char *devname)
177 env_setenv("currdev", EV_VOLATILE, devname, efi_setcurrdev, env_nounset);
178 env_setenv("loaddev", EV_VOLATILE, devname, env_noset, env_nounset);
182 set_currdev_devdesc(struct devdesc *currdev)
186 devname = efi_fmtdev(currdev);
187 printf("Setting currdev to %s\n", devname);
188 set_currdev(devname);
192 set_currdev_devsw(struct devsw *dev, int unit)
194 struct devdesc currdev;
197 currdev.d_unit = unit;
199 set_currdev_devdesc(&currdev);
203 set_currdev_pdinfo(pdinfo_t *dp)
207 * Disks are special: they have partitions. if the parent
208 * pointer is non-null, we're a partition not a full disk
209 * and we need to adjust currdev appropriately.
211 if (dp->pd_devsw->dv_type == DEVT_DISK) {
212 struct disk_devdesc currdev;
214 currdev.dd.d_dev = dp->pd_devsw;
215 if (dp->pd_parent == NULL) {
216 currdev.dd.d_unit = dp->pd_unit;
217 currdev.d_slice = D_SLICENONE;
218 currdev.d_partition = D_PARTNONE;
220 currdev.dd.d_unit = dp->pd_parent->pd_unit;
221 currdev.d_slice = dp->pd_unit;
222 currdev.d_partition = D_PARTISGPT; /* XXX Assumes GPT */
224 set_currdev_devdesc((struct devdesc *)&currdev);
226 set_currdev_devsw(dp->pd_devsw, dp->pd_unit);
231 sanity_check_currdev(void)
235 return (stat("/boot/defaults/loader.conf", &st) == 0 ||
236 stat("/boot/kernel/kernel", &st) == 0);
241 probe_zfs_currdev(uint64_t guid)
244 struct zfs_devdesc currdev;
246 currdev.dd.d_dev = &zfs_dev;
247 currdev.dd.d_unit = 0;
248 currdev.pool_guid = guid;
249 currdev.root_guid = 0;
250 set_currdev_devdesc((struct devdesc *)&currdev);
251 devname = efi_fmtdev(&currdev);
252 init_zfs_bootenv(devname);
254 return (sanity_check_currdev());
259 try_as_currdev(pdinfo_t *hd, pdinfo_t *pp)
265 * If there's a zpool on this device, try it as a ZFS
266 * filesystem, which has somewhat different setup than all
267 * other types of fs due to imperfect loader integration.
268 * This all stems from ZFS being both a device (zpool) and
269 * a filesystem, plus the boot env feature.
271 if (efizfs_get_guid_by_handle(pp->pd_handle, &guid))
272 return (probe_zfs_currdev(guid));
275 * All other filesystems just need the pdinfo
276 * initialized in the standard way.
278 set_currdev_pdinfo(pp);
279 return (sanity_check_currdev());
283 * Sometimes we get filenames that are all upper case
284 * and/or have backslashes in them. Filter all this out
285 * if it looks like we need to do so.
299 #define SIZE(dp, edp) (size_t)((intptr_t)(void *)edp - (intptr_t)(void *)dp)
301 enum { BOOT_INFO_OK = 0, BAD_CHOICE = 1, NOT_SPECIFIC = 2 };
303 match_boot_info(EFI_LOADED_IMAGE *img __unused, char *boot_info, size_t bisz)
309 EFI_DEVICE_PATH *dp, *edp, *first_dp, *last_dp;
313 FILEPATH_DEVICE_PATH *fp;
318 * FreeBSD encodes it's boot loading path into the boot loader
319 * BootXXXX variable. We look for the last one in the path
320 * and use that to load the kernel. However, if we only fine
321 * one DEVICE_PATH, then there's nothing specific and we should
324 * In an ideal world, we'd look at the image handle we were
325 * passed, match up with the loader we are and then return the
326 * next one in the path. This would be most flexible and cover
327 * many chain booting scenarios where you need to use this
328 * boot loader to get to the next boot loader. However, that
329 * doesn't work. We rarely have the path to the image booted
330 * (just the device) so we can't count on that. So, we do the
331 * enxt best thing, we look through the device path(s) passed
332 * in the BootXXXX varaible. If there's only one, we return
333 * NOT_SPECIFIC. Otherwise, we look at the last one and try to
334 * load that. If we can, we return BOOT_INFO_OK. Otherwise we
335 * return BAD_CHOICE for the caller to sort out.
337 if (bisz < sizeof(attr) + sizeof(fplen) + sizeof(CHAR16))
341 memcpy(&attr, walker, sizeof(attr));
342 walker += sizeof(attr);
343 memcpy(&fplen, walker, sizeof(fplen));
344 walker += sizeof(fplen);
345 descr = (CHAR16 *)(intptr_t)walker;
346 len = ucs2len(descr);
347 walker += (len + 1) * sizeof(CHAR16);
348 last_dp = first_dp = dp = (EFI_DEVICE_PATH *)walker;
349 edp = (EFI_DEVICE_PATH *)(walker + fplen);
350 if ((char *)edp > ep)
352 while (dp < edp && SIZE(dp, edp) > sizeof(EFI_DEVICE_PATH)) {
353 text = efi_devpath_name(dp);
355 printf(" BootInfo Path: %S\n", text);
356 efi_free_devpath_name(text);
359 dp = (EFI_DEVICE_PATH *)((char *)dp + efi_devpath_length(dp));
363 * If there's only one item in the list, then nothing was
364 * specified. Or if the last path doesn't have a media
365 * path in it. Those show up as various VenHw() nodes
366 * which are basically opaque to us. Don't count those
367 * as something specifc.
369 if (last_dp == first_dp) {
370 printf("Ignoring Boot%04x: Only one DP found\n", boot_current);
373 if (efi_devpath_to_media_path(last_dp) == NULL) {
374 printf("Ignoring Boot%04x: No Media Path\n", boot_current);
379 * OK. At this point we either have a good path or a bad one.
382 pp = efiblk_get_pdinfo_by_device_path(last_dp);
384 printf("Ignoring Boot%04x: Device Path not found\n", boot_current);
387 set_currdev_pdinfo(pp);
388 if (!sanity_check_currdev()) {
389 printf("Ignoring Boot%04x: sanity check failed\n", boot_current);
394 * OK. We've found a device that matches, next we need to check the last
395 * component of the path. If it's a file, then we set the default kernel
396 * to that. Otherwise, just use this as the default root.
398 * Reminder: we're running very early, before we've parsed the defaults
399 * file, so we may need to have a hack override.
401 dp = efi_devpath_last_node(last_dp);
402 if (DevicePathType(dp) != MEDIA_DEVICE_PATH ||
403 DevicePathSubType(dp) != MEDIA_FILEPATH_DP) {
404 printf("Using Boot%04x for root partition\n", boot_current);
405 return (BOOT_INFO_OK); /* use currdir, default kernel */
407 fp = (FILEPATH_DEVICE_PATH *)dp;
408 ucs2_to_utf8(fp->PathName, &kernel);
409 if (kernel == NULL) {
410 printf("Not using Boot%04x: can't decode kernel\n", boot_current);
413 if (*kernel == '\\' || isupper(*kernel))
415 if (stat(kernel, &st) != 0) {
417 printf("Not using Boot%04x: can't find %s\n", boot_current,
421 setenv("kernel", kernel, 1);
423 text = efi_devpath_name(last_dp);
425 printf("Using Boot%04x %S + %s\n", boot_current, text,
427 efi_free_devpath_name(text);
430 return (BOOT_INFO_OK);
434 * Look at the passed-in boot_info, if any. If we find it then we need
435 * to see if we can find ourselves in the boot chain. If we can, and
436 * there's another specified thing to boot next, assume that the file
437 * is loaded from / and use that for the root filesystem. If can't
438 * find the specified thing, we must fail the boot. If we're last on
439 * the list, then we fallback to looking for the first available /
440 * candidate (ZFS, if there's a bootable zpool, otherwise a UFS
441 * partition that has either /boot/defaults/loader.conf on it or
442 * /boot/kernel/kernel (the default kernel) that we can use.
444 * We always fail if we can't find the right thing. However, as
445 * a concession to buggy UEFI implementations, like u-boot, if
446 * we have determined that the host is violating the UEFI boot
447 * manager protocol, we'll signal the rest of the program that
448 * a drop to the OK boot loader prompt is possible.
451 find_currdev(EFI_LOADED_IMAGE *img, bool do_bootmgr, bool is_last,
452 char *boot_info, size_t boot_info_sz)
455 EFI_DEVICE_PATH *devpath, *copy;
465 * First choice: if rootdev is already set, use that, even if
468 rootdev = getenv("rootdev");
469 if (rootdev != NULL) {
470 printf("Setting currdev to configured rootdev %s\n", rootdev);
471 set_currdev(rootdev);
476 * Second choice: If we can find out image boot_info, and there's
477 * a follow-on boot image in that boot_info, use that. In this
478 * case root will be the partition specified in that image and
479 * we'll load the kernel specified by the file path. Should there
480 * not be a filepath, we use the default. This filepath overrides
484 rv = match_boot_info(img, boot_info, boot_info_sz);
486 case BOOT_INFO_OK: /* We found it */
488 case BAD_CHOICE: /* specified file not found -> error */
489 /* XXX do we want to have an escape hatch for last in boot order? */
491 } /* Nothing specified, try normal match */
496 * Did efi_zfs_probe() detect the boot pool? If so, use the zpool
497 * it found, if it's sane. ZFS is the only thing that looks for
498 * disks and pools to boot. This may change in the future, however,
499 * if we allow specifying which pool to boot from via UEFI variables
500 * rather than the bootenv stuff that FreeBSD uses today.
502 if (pool_guid != 0) {
503 printf("Trying ZFS pool\n");
504 if (probe_zfs_currdev(pool_guid))
507 #endif /* EFI_ZFS_BOOT */
510 * Try to find the block device by its handle based on the
511 * image we're booting. If we can't find a sane partition,
512 * search all the other partitions of the disk. We do not
513 * search other disks because it's a violation of the UEFI
514 * boot protocol to do so. We fail and let UEFI go on to
515 * the next candidate.
517 dp = efiblk_get_pdinfo_by_handle(img->DeviceHandle);
519 text = efi_devpath_name(dp->pd_devpath);
521 printf("Trying ESP: %S\n", text);
522 efi_free_devpath_name(text);
524 set_currdev_pdinfo(dp);
525 if (sanity_check_currdev())
527 if (dp->pd_parent != NULL) {
528 pdinfo_t *espdp = dp;
530 STAILQ_FOREACH(pp, &dp->pd_part, pd_link) {
531 /* Already tried the ESP */
535 * Roll up the ZFS special case
536 * for those partitions that have
539 text = efi_devpath_name(pp->pd_devpath);
541 printf("Trying: %S\n", text);
542 efi_free_devpath_name(text);
544 if (try_as_currdev(dp, pp))
551 * Try the device handle from our loaded image first. If that
552 * fails, use the device path from the loaded image and see if
553 * any of the nodes in that path match one of the enumerated
554 * handles. Currently, this handle list is only for netboot.
556 if (efi_handle_lookup(img->DeviceHandle, &dev, &unit, &extra) == 0) {
557 set_currdev_devsw(dev, unit);
558 if (sanity_check_currdev())
563 devpath = efi_lookup_image_devpath(IH);
564 while (devpath != NULL) {
565 h = efi_devpath_handle(devpath);
572 if (efi_handle_lookup(h, &dev, &unit, &extra) == 0) {
573 set_currdev_devsw(dev, unit);
574 if (sanity_check_currdev())
578 devpath = efi_lookup_devpath(h);
579 if (devpath != NULL) {
580 copy = efi_devpath_trim(devpath);
590 interactive_interrupt(const char *msg)
592 time_t now, then, last;
595 now = then = getsecs();
597 if (fail_timeout == -2) /* Always break to OK */
599 if (fail_timeout == -1) /* Never break to OK */
603 printf("press any key to interrupt reboot in %d seconds\r",
604 fail_timeout - (int)(now - then));
608 /* XXX no pause or timeout wait for char */
612 } while (now - then < fail_timeout);
617 parse_args(int argc, CHAR16 *argv[])
624 * Parse the args to set the console settings, etc
625 * boot1.efi passes these in, if it can read /boot.config or /boot/config
626 * or iPXE may be setup to pass these in. Or the optional argument in the
627 * boot environment was used to pass these arguments in (in which case
628 * neither /boot.config nor /boot/config are consulted).
630 * Loop through the args, and for each one that contains an '=' that is
631 * not the first character, add it to the environment. This allows
632 * loader and kernel env vars to be passed on the command line. Convert
633 * args from UCS-2 to ASCII (16 to 8 bit) as they are copied (though this
634 * method is flawed for non-ASCII characters).
637 for (i = 1; i < argc; i++) {
638 cpy16to8(argv[i], var, sizeof(var));
639 howto |= boot_parse_arg(var);
646 setenv_int(const char *key, int val)
650 snprintf(buf, sizeof(buf), "%d", val);
655 * Parse ConOut (the list of consoles active) and see if we can find a
656 * serial port and/or a video port. It would be nice to also walk the
657 * ACPI name space to map the UID for the serial port to a port. The
658 * latter is especially hard.
661 parse_uefi_con_out(void)
664 int vid_seen = 0, com_seen = 0, seen = 0;
667 EFI_DEVICE_PATH *node;
668 ACPI_HID_DEVICE_PATH *acpi;
669 UART_DEVICE_PATH *uart;
674 rv = efi_global_getenv("ConOut", buf, &sz);
675 if (rv != EFI_SUCCESS)
678 node = (EFI_DEVICE_PATH *)buf;
679 while ((char *)node < ep) {
681 if (DevicePathType(node) == ACPI_DEVICE_PATH &&
682 DevicePathSubType(node) == ACPI_DP) {
683 /* Check for Serial node */
685 if (EISA_ID_TO_NUM(acpi->HID) == 0x501) {
686 setenv_int("efi_8250_uid", acpi->UID);
689 } else if (DevicePathType(node) == MESSAGING_DEVICE_PATH &&
690 DevicePathSubType(node) == MSG_UART_DP) {
693 setenv_int("efi_com_speed", uart->BaudRate);
694 } else if (DevicePathType(node) == ACPI_DEVICE_PATH &&
695 DevicePathSubType(node) == ACPI_ADR_DP) {
696 /* Check for AcpiAdr() Node for video */
698 } else if (DevicePathType(node) == HARDWARE_DEVICE_PATH &&
699 DevicePathSubType(node) == HW_PCI_DP) {
701 * Note, vmware fusion has a funky console device
702 * PciRoot(0x0)/Pci(0xf,0x0)
703 * which we can only detect at the end since we also
705 * PciRoot(0x0)/Pci(0x1f,0x0)/Serial(0x1)
706 * so only match it if it's last.
710 node = NextDevicePathNode(node); /* Skip the end node */
712 if (pci_pending && vid_seen == 0)
716 * Truth table for RB_MULTIPLE | RB_SERIAL
718 * 0 Use only video console
719 * RB_SERIAL Use only serial console
720 * RB_MULTIPLE Use both video and serial console
721 * (but video is primary so gets rc messages)
722 * both Use both video and serial console
723 * (but serial is primary so gets rc messages)
725 * Try to honor this as best we can. If only one of serial / video
726 * found, then use that. Otherwise, use the first one we found.
727 * This also implies if we found nothing, default to video.
730 if (vid_seen && com_seen) {
732 if (com_seen < vid_seen)
741 main(int argc, CHAR16 *argv[])
744 int howto, i, uhowto;
746 bool has_kbd, is_last;
748 EFI_DEVICE_PATH *imgpath;
751 size_t sz, bosz = 0, bisz = 0;
752 UINT16 boot_order[100];
753 char boot_info[4096];
754 EFI_LOADED_IMAGE *img;
758 archsw.arch_autoload = efi_autoload;
759 archsw.arch_getdev = efi_getdev;
760 archsw.arch_copyin = efi_copyin;
761 archsw.arch_copyout = efi_copyout;
762 archsw.arch_readin = efi_readin;
763 archsw.arch_zfs_probe = efi_zfs_probe;
765 /* Get our loaded image protocol interface structure. */
766 BS->HandleProtocol(IH, &imgid, (VOID**)&img);
768 /* Tell ZFS probe code where we booted from, if zfs configured */
769 efizfs_set_preferred(img->DeviceHandle);
771 /* Init the time source */
774 has_kbd = has_keyboard();
777 * XXX Chicken-and-egg problem; we want to have console output
778 * early, but some console attributes may depend on reading from
779 * eg. the boot device, which we can't do yet. We can use
780 * printf() etc. once this is done.
782 setenv("console", "efi", 1);
786 * Initialise the block cache. Set the upper limit.
788 bcache_init(32768, 512);
790 howto = parse_args(argc, argv);
791 if (!has_kbd && (howto & RB_PROBE))
792 howto |= RB_SERIAL | RB_MULTIPLE;
794 uhowto = parse_uefi_con_out();
797 * We now have two notions of console. howto should be viewed as
798 * overrides. If console is already set, don't set it again.
801 #define SERIAL_ONLY RB_SERIAL
802 #define VID_SER_BOTH RB_MULTIPLE
803 #define SER_VID_BOTH (RB_SERIAL | RB_MULTIPLE)
804 #define CON_MASK (RB_SERIAL | RB_MULTIPLE)
805 if (strcmp(getenv("console"), "efi") == 0) {
806 if ((howto & CON_MASK) == 0) {
807 /* No override, uhowto is controlling and efi cons is perfect */
808 howto = howto | (uhowto & CON_MASK);
809 setenv("console", "efi", 1);
810 } else if ((howto & CON_MASK) == (uhowto & CON_MASK)) {
811 /* override matches what UEFI told us, efi console is perfect */
812 setenv("console", "efi", 1);
813 } else if ((uhowto & (CON_MASK)) != 0) {
815 * We detected a serial console on ConOut. All possible
816 * overrides include serial. We can't really override what efi
817 * gives us, so we use it knowing it's the best choice.
819 setenv("console", "efi", 1);
822 * We detected some kind of serial in the override, but ConOut
823 * has no serial, so we have to sort out which case it really is.
825 switch (howto & CON_MASK) {
827 setenv("console", "comconsole", 1);
830 setenv("console", "efi comconsole", 1);
833 setenv("console", "comconsole efi", 1);
835 /* case VIDEO_ONLY can't happen -- it's the first if above */
841 * howto is set now how we want to export the flags to the kernel, so
842 * set the env based on it.
844 boot_howto_to_env(howto);
846 if (efi_copy_init()) {
847 printf("failed to allocate staging area\n");
848 return (EFI_BUFFER_TOO_SMALL);
851 if ((s = getenv("fail_timeout")) != NULL)
852 fail_timeout = strtol(s, NULL, 10);
855 * Scan the BLOCK IO MEDIA handles then
856 * march through the device switch probing for things.
858 i = efipart_inithandles();
859 if (i != 0 && i != ENOENT) {
860 printf("efipart_inithandles failed with ERRNO %d, expect "
864 for (i = 0; devsw[i] != NULL; i++)
865 if (devsw[i]->dv_init != NULL)
866 (devsw[i]->dv_init)();
868 printf("%s\n", bootprog_info);
869 printf(" Command line arguments:");
870 for (i = 0; i < argc; i++)
871 printf(" %S", argv[i]);
874 printf(" EFI version: %d.%02d\n", ST->Hdr.Revision >> 16,
875 ST->Hdr.Revision & 0xffff);
876 printf(" EFI Firmware: %S (rev %d.%02d)\n", ST->FirmwareVendor,
877 ST->FirmwareRevision >> 16, ST->FirmwareRevision & 0xffff);
878 printf(" Console: %s (%#x)\n", getenv("console"), howto);
882 /* Determine the devpath of our image so we can prefer it. */
883 text = efi_devpath_name(img->FilePath);
885 printf(" Load Path: %S\n", text);
886 efi_setenv_freebsd_wcs("LoaderPath", text);
887 efi_free_devpath_name(text);
890 rv = BS->HandleProtocol(img->DeviceHandle, &devid, (void **)&imgpath);
891 if (rv == EFI_SUCCESS) {
892 text = efi_devpath_name(imgpath);
894 printf(" Load Device: %S\n", text);
895 efi_setenv_freebsd_wcs("LoaderDev", text);
896 efi_free_devpath_name(text);
900 uefi_boot_mgr = true;
902 sz = sizeof(boot_current);
903 rv = efi_global_getenv("BootCurrent", &boot_current, &sz);
904 if (rv == EFI_SUCCESS)
905 printf(" BootCurrent: %04x\n", boot_current);
907 boot_current = 0xffff;
908 uefi_boot_mgr = false;
911 sz = sizeof(boot_order);
912 rv = efi_global_getenv("BootOrder", &boot_order, &sz);
913 if (rv == EFI_SUCCESS) {
914 printf(" BootOrder:");
915 for (i = 0; i < sz / sizeof(boot_order[0]); i++)
916 printf(" %04x%s", boot_order[i],
917 boot_order[i] == boot_current ? "[*]" : "");
919 is_last = boot_order[(sz / sizeof(boot_order[0])) - 1] == boot_current;
921 } else if (uefi_boot_mgr) {
923 * u-boot doesn't set BootOrder, but otherwise participates in the
924 * boot manager protocol. So we fake it here and don't consider it
927 bosz = sizeof(boot_order[0]);
928 boot_order[0] = boot_current;
933 * Next, find the boot info structure the UEFI boot manager is
934 * supposed to setup. We need this so we can walk through it to
935 * find where we are in the booting process and what to try to
939 snprintf(buf, sizeof(buf), "Boot%04X", boot_current);
940 sz = sizeof(boot_info);
941 rv = efi_global_getenv(buf, &boot_info, &sz);
942 if (rv == EFI_SUCCESS)
945 uefi_boot_mgr = false;
949 * Disable the watchdog timer. By default the boot manager sets
950 * the timer to 5 minutes before invoking a boot option. If we
951 * want to return to the boot manager, we have to disable the
952 * watchdog timer and since we're an interactive program, we don't
953 * want to wait until the user types "quit". The timer may have
954 * fired by then. We don't care if this fails. It does not prevent
955 * normal functioning in any way...
957 BS->SetWatchdogTimer(0, 0, 0, NULL);
960 * Initialize the trusted/forbidden certificates from UEFI.
961 * They will be later used to verify the manifest(s),
962 * which should contain hashes of verified files.
963 * This needs to be initialized before any configuration files
966 #ifdef EFI_SECUREBOOT
971 * Try and find a good currdev based on the image that was booted.
972 * It might be desirable here to have a short pause to allow falling
973 * through to the boot loader instead of returning instantly to follow
974 * the boot protocol and also allow an escape hatch for users wishing
975 * to try something different.
977 if (find_currdev(img, uefi_boot_mgr, is_last, boot_info, bisz) != 0)
978 if (!interactive_interrupt("Failed to find bootable partition"))
979 return (EFI_NOT_FOUND);
981 efi_init_environment();
983 #if !defined(__arm__)
984 for (k = 0; k < ST->NumberOfTableEntries; k++) {
985 guid = &ST->ConfigurationTable[k].VendorGuid;
986 if (!memcmp(guid, &smbios, sizeof(EFI_GUID))) {
989 snprintf(buf, sizeof(buf), "%p",
990 ST->ConfigurationTable[k].VendorTable);
991 setenv("hint.smbios.0.mem", buf, 1);
992 smbios_detect(ST->ConfigurationTable[k].VendorTable);
998 interact(); /* doesn't return */
1000 return (EFI_SUCCESS); /* keep compiler happy */
1003 COMMAND_SET(poweroff, "poweroff", "power off the system", command_poweroff);
1006 command_poweroff(int argc __unused, char *argv[] __unused)
1010 for (i = 0; devsw[i] != NULL; ++i)
1011 if (devsw[i]->dv_cleanup != NULL)
1012 (devsw[i]->dv_cleanup)();
1014 RS->ResetSystem(EfiResetShutdown, EFI_SUCCESS, 0, NULL);
1020 COMMAND_SET(reboot, "reboot", "reboot the system", command_reboot);
1023 command_reboot(int argc, char *argv[])
1027 for (i = 0; devsw[i] != NULL; ++i)
1028 if (devsw[i]->dv_cleanup != NULL)
1029 (devsw[i]->dv_cleanup)();
1031 RS->ResetSystem(EfiResetCold, EFI_SUCCESS, 0, NULL);
1037 COMMAND_SET(quit, "quit", "exit the loader", command_quit);
1040 command_quit(int argc, char *argv[])
1046 COMMAND_SET(memmap, "memmap", "print memory map", command_memmap);
1049 command_memmap(int argc __unused, char *argv[] __unused)
1052 EFI_MEMORY_DESCRIPTOR *map, *p;
1060 status = BS->GetMemoryMap(&sz, 0, &key, &dsz, &dver);
1061 if (status != EFI_BUFFER_TOO_SMALL) {
1062 printf("Can't determine memory map size\n");
1066 status = BS->GetMemoryMap(&sz, map, &key, &dsz, &dver);
1067 if (EFI_ERROR(status)) {
1068 printf("Can't read memory map\n");
1073 snprintf(line, sizeof(line), "%23s %12s %12s %8s %4s\n",
1074 "Type", "Physical", "Virtual", "#Pages", "Attr");
1076 if (pager_output(line)) {
1081 for (i = 0, p = map; i < ndesc;
1082 i++, p = NextMemoryDescriptor(p, dsz)) {
1083 snprintf(line, sizeof(line), "%23s %012jx %012jx %08jx ",
1084 efi_memory_type(p->Type), (uintmax_t)p->PhysicalStart,
1085 (uintmax_t)p->VirtualStart, (uintmax_t)p->NumberOfPages);
1086 if (pager_output(line))
1089 if (p->Attribute & EFI_MEMORY_UC)
1091 if (p->Attribute & EFI_MEMORY_WC)
1093 if (p->Attribute & EFI_MEMORY_WT)
1095 if (p->Attribute & EFI_MEMORY_WB)
1097 if (p->Attribute & EFI_MEMORY_UCE)
1099 if (p->Attribute & EFI_MEMORY_WP)
1101 if (p->Attribute & EFI_MEMORY_RP)
1103 if (p->Attribute & EFI_MEMORY_XP)
1105 if (p->Attribute & EFI_MEMORY_NV)
1107 if (p->Attribute & EFI_MEMORY_MORE_RELIABLE)
1109 if (p->Attribute & EFI_MEMORY_RO)
1111 if (pager_output("\n"))
1119 COMMAND_SET(configuration, "configuration", "print configuration tables",
1120 command_configuration);
1123 command_configuration(int argc, char *argv[])
1128 printf("NumberOfTableEntries=%lu\n",
1129 (unsigned long)ST->NumberOfTableEntries);
1131 for (i = 0; i < ST->NumberOfTableEntries; i++) {
1135 guid = &ST->ConfigurationTable[i].VendorGuid;
1137 if (efi_guid_to_name(guid, &name) == true) {
1141 printf("Error while translating UUID to name");
1143 printf(" at %p\n", ST->ConfigurationTable[i].VendorTable);
1150 COMMAND_SET(mode, "mode", "change or display EFI text modes", command_mode);
1153 command_mode(int argc, char *argv[])
1161 SIMPLE_TEXT_OUTPUT_INTERFACE *conout;
1162 extern void HO(void);
1164 conout = ST->ConOut;
1167 mode = strtol(argv[1], &cp, 0);
1168 if (cp[0] != '\0') {
1169 printf("Invalid mode\n");
1172 status = conout->QueryMode(conout, mode, &cols, &rows);
1173 if (EFI_ERROR(status)) {
1174 printf("invalid mode %d\n", mode);
1177 status = conout->SetMode(conout, mode);
1178 if (EFI_ERROR(status)) {
1179 printf("couldn't set mode %d\n", mode);
1182 sprintf(rowenv, "%u", (unsigned)rows);
1183 setenv("LINES", rowenv, 1);
1184 HO(); /* set cursor */
1188 printf("Current mode: %d\n", conout->Mode->Mode);
1189 for (i = 0; i <= conout->Mode->MaxMode; i++) {
1190 status = conout->QueryMode(conout, i, &cols, &rows);
1191 if (EFI_ERROR(status))
1193 printf("Mode %d: %u columns, %u rows\n", i, (unsigned)cols,
1198 printf("Select a mode with the command \"mode <number>\"\n");
1203 COMMAND_SET(lsefi, "lsefi", "list EFI handles", command_lsefi);
1206 command_lsefi(int argc __unused, char *argv[] __unused)
1209 EFI_HANDLE *buffer = NULL;
1211 UINTN bufsz = 0, i, j;
1215 status = BS->LocateHandle(AllHandles, NULL, NULL, &bufsz, buffer);
1216 if (status != EFI_BUFFER_TOO_SMALL) {
1217 snprintf(command_errbuf, sizeof (command_errbuf),
1218 "unexpected error: %lld", (long long)status);
1221 if ((buffer = malloc(bufsz)) == NULL) {
1222 sprintf(command_errbuf, "out of memory");
1226 status = BS->LocateHandle(AllHandles, NULL, NULL, &bufsz, buffer);
1227 if (EFI_ERROR(status)) {
1229 snprintf(command_errbuf, sizeof (command_errbuf),
1230 "LocateHandle() error: %lld", (long long)status);
1235 for (i = 0; i < (bufsz / sizeof (EFI_HANDLE)); i++) {
1237 EFI_GUID **protocols = NULL;
1240 printf("Handle %p", handle);
1241 if (pager_output("\n"))
1245 status = BS->ProtocolsPerHandle(handle, &protocols, &nproto);
1246 if (EFI_ERROR(status)) {
1247 snprintf(command_errbuf, sizeof (command_errbuf),
1248 "ProtocolsPerHandle() error: %lld",
1253 for (j = 0; j < nproto; j++) {
1254 if (efi_guid_to_name(protocols[j], &name) == true) {
1255 printf(" %s", name);
1258 printf("Error while translating UUID to name");
1260 if ((ret = pager_output("\n")) != 0)
1263 BS->FreePool(protocols);
1272 #ifdef LOADER_FDT_SUPPORT
1273 extern int command_fdt_internal(int argc, char *argv[]);
1276 * Since proper fdt command handling function is defined in fdt_loader_cmd.c,
1277 * and declaring it as extern is in contradiction with COMMAND_SET() macro
1278 * (which uses static pointer), we're defining wrapper function, which
1279 * calls the proper fdt handling routine.
1282 command_fdt(int argc, char *argv[])
1285 return (command_fdt_internal(argc, argv));
1288 COMMAND_SET(fdt, "fdt", "flattened device tree handling", command_fdt);
1292 * Chain load another efi loader.
1295 command_chain(int argc, char *argv[])
1297 EFI_GUID LoadedImageGUID = LOADED_IMAGE_PROTOCOL;
1298 EFI_HANDLE loaderhandle;
1299 EFI_LOADED_IMAGE *loaded_image;
1302 struct devdesc *dev;
1308 command_errmsg = "wrong number of arguments";
1314 if ((fd = open(name, O_RDONLY)) < 0) {
1315 command_errmsg = "no such file";
1319 if (fstat(fd, &st) < -1) {
1320 command_errmsg = "stat failed";
1325 status = BS->AllocatePool(EfiLoaderCode, (UINTN)st.st_size, &buf);
1326 if (status != EFI_SUCCESS) {
1327 command_errmsg = "failed to allocate buffer";
1331 if (read(fd, buf, st.st_size) != st.st_size) {
1332 command_errmsg = "error while reading the file";
1333 (void)BS->FreePool(buf);
1338 status = BS->LoadImage(FALSE, IH, NULL, buf, st.st_size, &loaderhandle);
1339 (void)BS->FreePool(buf);
1340 if (status != EFI_SUCCESS) {
1341 command_errmsg = "LoadImage failed";
1344 status = BS->HandleProtocol(loaderhandle, &LoadedImageGUID,
1345 (void **)&loaded_image);
1351 for (i = 2; i < argc; i++)
1352 len += strlen(argv[i]) + 1;
1354 len *= sizeof (*argp);
1355 loaded_image->LoadOptions = argp = malloc (len);
1356 loaded_image->LoadOptionsSize = len;
1357 for (i = 2; i < argc; i++) {
1358 char *ptr = argv[i];
1360 *(argp++) = *(ptr++);
1366 if (efi_getdev((void **)&dev, name, (const char **)&path) == 0) {
1368 struct zfs_devdesc *z_dev;
1370 struct disk_devdesc *d_dev;
1373 switch (dev->d_dev->dv_type) {
1376 z_dev = (struct zfs_devdesc *)dev;
1377 loaded_image->DeviceHandle =
1378 efizfs_get_handle_by_guid(z_dev->pool_guid);
1382 loaded_image->DeviceHandle =
1383 efi_find_handle(dev->d_dev, dev->d_unit);
1386 hd = efiblk_get_pdinfo(dev);
1387 if (STAILQ_EMPTY(&hd->pd_part)) {
1388 loaded_image->DeviceHandle = hd->pd_handle;
1391 d_dev = (struct disk_devdesc *)dev;
1392 STAILQ_FOREACH(pd, &hd->pd_part, pd_link) {
1394 * d_partition should be 255
1396 if (pd->pd_unit == (uint32_t)d_dev->d_slice) {
1397 loaded_image->DeviceHandle =
1407 status = BS->StartImage(loaderhandle, NULL, NULL);
1408 if (status != EFI_SUCCESS) {
1409 command_errmsg = "StartImage failed";
1410 free(loaded_image->LoadOptions);
1411 loaded_image->LoadOptions = NULL;
1412 status = BS->UnloadImage(loaded_image);
1416 return (CMD_ERROR); /* not reached */
1419 COMMAND_SET(chain, "chain", "chain load file", command_chain);