Re: kern/59377: NetBSD 10.1 cgd encrypted system can't load firmware files

["Patrice Clement via gnats" <gnats-admin%NetBSD.org@localhost>]

The following reply was made to PR kern/59377; it has been noted by GNATS.

From: Patrice Clement <patrice.clement%laposte.net@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: kern/59377: NetBSD 10.1 cgd encrypted system can't load firmware
 files
Date: Tue, 29 Apr 2025 15:06:48 +0000

 On 4/29/25 14:50, Martin Husemann via gnats wrote:
 > The following reply was made to PR kern/59377; it has been noted by GNATS.
 >
 > From: Martin Husemann <martin%duskware.de@localhost>
 > To: gnats-bugs%netbsd.org@localhost
 > Cc:
 > Subject: Re: kern/59377: NetBSD 10.1 cgd encrypted system can't load firmware
 >   files
 > Date: Tue, 29 Apr 2025 16:48:23 +0200
 >
 >   On Tue, Apr 29, 2025 at 02:40:00PM +0000, patrice.clement%laposte.net@localhost wrote:
 >   > The file is present in the /libdata directory.
 >   
 >   If you boot with root-on-cgd the /libdata directory is the one in the
 >   memory ramdisk (outside of the chroot). You need to add the firmware
 >   files there.
 Yep I got that part. The solution pointed out by Riastradh is to add 
 those files to the ramdisk file and recompile it. I think I'm going to 
 take that route as it seems to be the easiest path to fix the issue.
 >
 >   > @Riastradh suggested to re-compile the "ramdisk-cgdroot.fs" file [1] with all firmware filesi i.e. by adding this line to the file:
 >   >
 >   > COPYDIR ${DESTDIR}/libdata libdata
 >   
 >   This is one way of doing it.
 >   
 >   There are other options, like:
 >   
 >   	https://wiki.netbsd.org/security/custom_cgdroot
 >   
 I have read that page already but I'm not quite sure it is relevant to 
 the problem that I'm facing.
 >   The pivotroot() syscall (as suggested by AST some years ago at one of the
 >   EuroBSDCons) would avoid this issue.
 
 Alright. Sorry I'm not familiar with this talk. A link or some 
 documentation would be welcomed.
 
 Best,
 
 Patrice
 
 >   
 >   Martin
 >