Re: kern/59377: NetBSD 10.1 cgd encrypted system can't load firmware files

["Martin Husemann via gnats" <gnats-admin%NetBSD.org@localhost>]

The following reply was made to PR kern/59377; it has been noted by GNATS.

From: Martin Husemann <martin%duskware.de@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: kern/59377: NetBSD 10.1 cgd encrypted system can't load firmware
 files
Date: Tue, 29 Apr 2025 16:48:23 +0200

 On Tue, Apr 29, 2025 at 02:40:00PM +0000, patrice.clement%laposte.net@localhost wrote:
 > The file is present in the /libdata directory.
 
 If you boot with root-on-cgd the /libdata directory is the one in the
 memory ramdisk (outside of the chroot). You need to add the firmware
 files there.
 
 > @Riastradh suggested to re-compile the "ramdisk-cgdroot.fs" file [1] with all firmware filesi i.e. by adding this line to the file:
 > 
 > COPYDIR ${DESTDIR}/libdata libdata
 
 This is one way of doing it.
 
 There are other options, like:
 
 	https://wiki.netbsd.org/security/custom_cgdroot
 
 The pivotroot() syscall (as suggested by AST some years ago at one of the
 EuroBSDCons) would avoid this issue.
 
 Martin