Skip to content
A simple daemon to allow session software to update firmware
C Meson Python Shell Makefile C++
Branch: master
Clone or download
hughsie trivial: Add fu_common_read_uint16_safe()
This allows us to put the offsets-to-offset checks in the right place.
Latest commit 80768f5 Oct 22, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.circleci snap: switch to core18 Sep 22, 2019
.github trivial: add stalebot (Fixes: #1393) Sep 23, 2019
.tx trivial: Add some files ready for a first release Mar 16, 2015
contrib Add a systemd preset file for `fwupd-refresh.service` Oct 20, 2019
data Add a systemd preset file for `fwupd-refresh.service` Oct 20, 2019
docs dfu: Remove support for the Metadata Store Proposal Oct 9, 2019
libfwupd Add new device flags indicating update resilience Oct 17, 2019
plugins trivial: dell: work around a memory leak caught by address sanitizer Oct 19, 2019
po Release fwupd 1.3.2 Sep 26, 2019
policy trivial: update references of hughsie/fwupd to fwupd/fwupd Aug 22, 2019
snap trivial: snap: correct install hook root directory Sep 26, 2019
src trivial: Add fu_common_read_uint16_safe() Oct 22, 2019
subprojects trivial: update references of hughsie/fwupd to fwupd/fwupd Aug 22, 2019
.gitignore Port from libappstream-glib to libxmlb Oct 17, 2018
.gitmodules contrib: Adjust flatpak build for moving to flathub Nov 1, 2018
.lgtm.yml uefi: use tpm2-tss library to read PCR values Aug 27, 2019
.travis.yml Publish docs to fwupd.github.io using CircelCI Aug 22, 2019
AUTHORS Add initial build files and enough code to launch a simple D-Bus daemon Feb 26, 2015
CODE_OF_CONDUCT.md Create CODE_OF_CONDUCT.md Sep 12, 2017
COMMITMENT Add COMMITMENT file as part of GPL Common Cure Rights Commitment Jun 18, 2018
CONTRIBUTING.md Fix some typos spotted using codespell Apr 8, 2019
COPYING Adjust all licensing to LGPL 2.1+ (Closes: #526) May 29, 2018
MAINTAINERS Add initial build files and enough code to launch a simple D-Bus daemon Feb 26, 2015
README.md synaptics-rmi: Move the fuzzing instructions to the toplevel README Oct 2, 2019
RELEASE trivial: post release version bump Sep 26, 2019
SECURITY.md Create SECURITY.md May 28, 2019
meson.build Add a systemd preset file for `fwupd-refresh.service` Oct 20, 2019
meson_options.txt Add a new plugin for working with eMMC devices (Fixes: #1455) Oct 18, 2019
meson_post_install.sh Use more systemd directives for directories Aug 27, 2019

README.md

fwupd

Build Status Coverity Scan Build Status

Get it from the Snap Store

This project aims to make updating firmware on Linux automatic, safe and reliable.

Additional information is available at the website: https://fwupd.org

Compiling

The most up to date compilation instructions are available in the Wiki

LVFS

This project is configured by default to download firmware from the Linux Vendor Firmware Service (LVFS).

This service is available to all OEMs and firmware creators who would like to make their firmware available to Linux users.

You can find more information about the technical details of creating a firmware capsule in the hardware vendors section of the fwupd website.

Basic usage flow (command line)

If you have a device with firmware supported by fwupd, this is how you will check for updates and apply them using fwupd's command line tools.

# fwupdmgr get-devices

This will display all devices detected by fwupd.

# fwupdmgr refresh

This will download the latest metadata from LVFS.

# fwupdmgr get-updates

If updates are available for any devices on the system, they'll be displayed.

# fwupdmgr update

This will download and apply all updates for your system.

  • Updates that can be applied live will be done immediately.
  • Updates that run at bootup will be staged for the next reboot.

You can find more information about the update workflow in the end users section of the fwupd website.

Reporting status

fwupd will encourage users to report both successful and failed updates back to LVFS. This is an optional feature, but encouraged as it provides valuable feedback to LVFS administrators and OEM developers regarding firmware update process efficacy.

The privacy policy regarding this data can be viewed on the fwupd website.

To report the status of an update run:

# fwupdmgr report-history

To clear the local history of updates:

# fwupdmgr clear-history

Only updates that were distributed from the LVFS will be reported to the LVFS.

Enterprise Use

The flow of updates can be controlled in the enterprise using the "approved updates" feature. This allows the domain administrator to filter the possible updates from a central server (e.g. the LVFS, or a mirror) to only firmware that have been tested specifically in your organisation.

The list of approved updates can be enabled by adding ApprovalRequired=true to the remote configuration file, e.g. lvfs.conf. Once enabled, the list of approved updates can be set in daemon.conf using a comma delimited list.

For example:

ApprovedFirmware=foo,bar

Where foo,bar refers to the container checksums that would correspond to two updates in the metadata file.

Additionally, the list of approved firmware can be supplemented using fwupdmgr set-approved-firmware baz or using the D-Bus interface.

Other frontends

  1. GNOME Software is the graphical frontend available. When compiled with firmware support, it will check for updates periodically and automatically download firmware in the background. After the firmware has been downloaded a popup will be displayed in Gnome Software to perform the update.

  2. KDE Discover is the software centre, generally bundled with KDE Plasma. With the release of KDE Plasma 5.14, a new fwupd backend has been implemented in KDE Discover for firmware updates. These firmware updates are shown with other system updates.

  3. Wyse Management Suite A software suite available on Dell IoT gateways and Wyse thin clients with built-in fwupd support. The remote administration interface can be used to download and deploy firmware updates.

Fuzzing

There are several automated fuzzing tests in fwupd. These take some time to run:

CC=afl-gcc meson --default-library=static ../
AFL_HARDEN=1 ninja
ninja fuzz-synaptics-rmi
ninja fuzz-firmware
ninja fuzz-smbios
You can’t perform that action at this time.