SchOS/boot
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Nexoniarz eab13241a0 hwreport: describe a machine onto a USB stick, from a Linux-style /sys
hwreport writes one folder to the first read-write FAT mount, or mounts
the first USB stick that takes vfat itself and unmounts it afterwards:
summary.txt (machine, firmware, CPU, memory, every PCI and USB device
with its driver or "-- no driver"), dmesg.txt, lspci.txt in the shape of
lspci -nnk -xxx, lsusb.txt, dmi.txt, memmap.txt, the ACPI tables as raw
.dat files iasl -d reads, and copies of /proc. Serials, the UUID and the
MSDM/SLIC tables (a Windows licence key) are left out.

It reads /sys, which is new: sysfs at Linux's paths and in Linux's
formats -- /sys/bus/pci/devices with uevent, config and resource,
/sys/bus/usb/devices, /sys/firmware/acpi/tables, dmi/tables, memmap
and efi, /sys/class/dmi/id. toybox's lspci and lsusb work unmodified
against it. The USB core now keeps a table of attached devices for it.

The machine's name comes from SMBIOS (kernel/dev/dmi.c). The UEFI loader
hands over the entry point from the configuration table, the kernel
falls back to the 0xF0000 scan, and the log gets Linux's "DMI:" line.

Two bugs found on the way:

- The loader handed over at most 40 memory-map entries, in firmware
  order. A laptop's UEFI map is 60-150 descriptors with RAM above 4 GB
  listed last, so that is what was dropped. The entries now have their
  own area at 0x31000 with room for 256, are sorted before merging, and
  the kernel's 32 usable regions keep the largest when there are more.
- MemTotal and sysinfo's totalram were PHYSTOP, an address, which counts
  the PCI hole: a 6 GB machine reported 8. Now the usable RAM, summed.

usb.ids moves to /usr/share/hwdata, where lsusb looks for it, and
pci.ids joins it (`make pci-ids`, BSD-3-Clause like usb.ids).

Checked under QEMU q35: the report written to a FAT32 stick, fsck.fat
clean, DSDT.dat disassembled by iasl on the host, lspci -k and lsusb
showing names, 6 GB of RAM seen as 6137 MB.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01S1giNvrHTrPMPw7V6x1kQ4
2026-10-23 12:54:11 +02:00
..
common licence: SchOS is GPL-2.0-or-later, no longer Apache-2.0 2026-10-22 08:48:45 +02:00
uefi hwreport: describe a machine onto a USB stick, from a Linux-style /sys 2026-10-23 12:54:11 +02:00
README.md licence: SchOS is GPL-2.0-or-later, no longer Apache-2.0 2026-10-22 08:48:45 +02:00

Booting SchOS

One firmware path:

boot/
  uefi/    the loader: a 64-bit PE application
  common/  the user interface, shared with nothing else now

There were two. boot/bios/ held an MBR, an El Torito CD stub and a real-mode stage 2, and it was a separate directory rather than #ifdefs because the two shared almost nothing: a BIOS loader lives in 16-bit real mode and talks to the firmware through software interrupts, while UEFI hands a loader long mode with paging already on and a table of function pointers to call.

That asymmetry is what removed it. Everything since roughly 2012 boots UEFI, CSM — the firmware-side BIOS emulation that let legacy loaders run at all — has been going away since Intel dropped support for it in 2020, and the cost of the second path was not the code but the tax on everything that touched it: stage 2 had a 65-sector ceiling that it silently overflowed, and the resolution menu could not be shared because VBE mode setting is INT 10h and needs real mode.

The contract below survives it. It was written to let a second loader exist, and it is worth keeping in that shape: it is what the kernel expects, stated once, rather than a description of whoever happens to be calling.

What the loader must hand the kernel

Whichever path runs, the kernel expects the same things. This is the contract; a second loader is correct exactly when it satisfies it.

Where Notes
Kernel image loaded per its ELF program headers entry at entry64
CPU state see below -- the two paths differ here
Memory map E820_MAP_ADDR, 24-byte entries, count at E820_COUNT_ADDR kernel/arch/x86_64/e820.c reads it
Framebuffer VBE_INFO_ADDR address, pitch, width, height, depth
Verbose flag BOOT_VERBOSE_FLAG_ADDR set by the F8 menu

The addresses are defined once, in include/memlayout.h and include/schboot.h. The kernel does not care which firmware produced them.

The entry point

UEFI hands a loader long mode with paging already on. Dropping back to protected mode only to climb out again is a mode switch whose failure mode is a triple fault with no console, so the kernel publishes an entry that takes the machine as it already is. kernel/arch/x86_64/entry.S carries a sch64_header — magic SCH64BOO, 8-byte aligned within the first 16 KB, followed by a 64-bit physical address — found by scanning. include/schboot.h holds the magic so loader and kernel cannot disagree.

The 32-bit multiboot entry is still in entry.S and now has no caller: the BIOS loader was the only thing that used it. It is left in place rather than removed in the same change that removed the loader, because deleting kernel entry code is its own piece of work with its own way of failing silently.

What that entry expects:

  • long mode, interrupts off
  • CR3 pointing at tables that identity-map the low 4 GB and map the same 4 GB at 0xffff800000000000. entry64low's first instruction is a movabs to a high address, so identity alone triple faults immediately.
  • RBX = the framebuffer physical address, and never 1 — that value marks an application processor in entry64high.

The kernel loads its own GDT at that entry (entry64uefi), rather than the loader doing it. A loader arriving in long mode is still on the firmware's descriptors, and the first thing the kernel does that depends on its own selectors takes a #GP against a GDT the firmware no longer owns — it surfaced as unexpected trap 13 ... cs=38, a long way from the cause.

e820.c reads a BIOS memory map. UEFI hands out a different structure (EFI_MEMORY_DESCRIPTOR, from GetMemoryMap), so the UEFI loader has to translate it into the same 24-byte entries rather than inventing a second format for the kernel to learn.

What booting looks like now

make esp stages EFI/BOOT/BOOTX64.EFI and schos/kernel, and QEMU is pointed at OVMF with that directory as a virtual FAT volume — make qemu. make iso builds a disc with a single El Torito entry pointing at a FAT image holding the same two files.

Neither is an installable disk. A real GPT image with a real FAT partition is the installer's job, and until it exists there is nothing here that writes to a disk a machine could boot from unaided.

Secure Boot is not addressed either: the loader is unsigned, so a machine enforcing it will refuse to run this.