UEFI firmware capsules for Linux
This project provides the pieces needed to flash an industry standard UEFI capsule in a Linux OS. It also aims to be compatible with some implementation decisions that were made in Windows.
The following binaries are produced:
libfwuplibrary providing APIs to do UEFI updates for other applications
fwupdatereference command line tool
fwup.efiEFI application used for flashing the update from EFI.
fwupd is a project for managing firmware updates of many types of devices. It has supported UEFI firmware update ever since its first release.
fwupd versions 1.0.x and earlier use
libfwupd from this project for performing the flash
(following most of Normal Flow below).
fwupd versions 1.1.x and later have merged the code from this project directly into the codebase and will manage boot assets directly at installation time. This project is not needed when using a newer fwupd.
UEFI capsule updates are not actually flashed within Linux. They're staged for update to be installed on the next boot.
fwupdate --applywill be executed with the capsule payload as an argument
libfwupwill copy the payload to the EFI system partition.
libfwupwill create EFI NVRAM entries pointing to the correct payload on the EFI system partition.
libfwupwill create a new EFI Boot entry to launch the firmware updating EFI application.
libfwupwill set the
BootNextvariable to run that application on next boot.
- The user will reboot the system.
fwup.efiapplication will examine EFI NVRAM entries to find capsules previously staged.
fwup.efiapplciation will call the BIOS
UpdateCapsule()method to flash the capsules.
- The BIOS will flash the capsules and then reboot back into the OS.
UEFI capsule updates are typically distributed by services such as LVFS in .CAB format. The command line tool provided by this project works directly on the payload stored in the .CAB. Most users should apply UEFI capsule updates with a higher level tool such as fwupd.
The following dependencies are needed to compile:
- efivar (>=33)
- gnu-efi (>= 3.0.2)
Optionally if libsmbios is present some additional features on Dell systems can be enabled as well.
Optionally set the EFI system partition mount point. If not configured it will default to
# git config fwupdate.espmountdir $DIRECTORY
Set the EFI subdirectory directory that EFI binaries are installed into.
# git config fwupdate.efidir $DIRECTORY
This usually refers to the OS distributor. If not configured it will default to the value defined for
Run the build command
Run the install command
# make install
Some distributions don't use the same paths for the dependencies as in Make.defaults.
For example on Debian and Ubuntu you need to override
GNUEFIDIR to the correct path.
Checking if UEFI capsule updates are supported:
# fwupdate --supported
Checking which ESRT GUIDs are on the system:
# fwupdate --list
Display details of all ESRT entries:
# fwupdate --info
Applying a payload:
# fwupdate --apply=<guid> <payload>
Enable firmware updates on supported Dell systems (if compiled with libsmbios):
# fwupdate --enable