How to add boot parameters? (to mitigate copy.fail)

MNT Pocket Reform
1

As the title says. I’ve no idea where anything is and how it’s used. Is this documented somewhere accessable or is it scurry through docs from first principle that’s the way? If it had been grub I’d been done yesterday.

So, how do I add and apply boot parameters? I’m using an nvme with /boot on the mmc. Just changing the conf in /boot/loader/entries wasn’t enough and I’m not sure which command that is the equivalent of a grubinstall for, I’m guessing, the files in /usr/share/reform-tools-machines/.

I want to add initcall_blacklist=algif_aead_init from: cve-details

2

Which kernel are you running?

The latest kernel has the fix for this CVE in it. Most distros have been patched at this point.

That being said you can edit the kernel’s command-line parameters in extlinux.conf:

$ cat /boot/extlinux/extlinux.conf
default l0
menu title U-Boot menu
prompt 1
timeout 1


label l0
        menu label Arch mnt-reform-arm64
        linux /Image-test
        initrd /initramfs-linux
        fdt /mnt-reform.dtb

        append   ro root=/dev/nvme0n1p1 no_console_suspend cryptomgr.notests ${bootargs} console=tty1 loglevel=3 nvme_core.default_ps_max_latency_us=1000000

In this example I’ve add nvme_core.default_ps_max_latency_us=1000000 for some testing.

1 Like
3

Well, I’m dumb. Thanks for the pointers regarding the boot parameters anyway.

4

While you can do that and it will affect the next boot, the next time you install or upgrade your kernel, u-boot-update will get triggered and overwrite everything you had written in /boot/extlinux/extlinux.conf. It says that at the top of the file:

## /boot/extlinux/extlinux.conf
##
## IMPORTANT WARNING
##
## The configuration of this file is generated automatically.
## Do not edit this file manually, use: u-boot-update

If you then open the man page of u-boot-update you will see that to permanently add options you can edit /etc/default/u-boot or add a fragment to a file in /etc/u-boot-menu/conf.d/. The variable you may want to update is called U_BOOT_PARAMETERS. It is documented in the man page of u-boot-update.

1 Like