users

users@lists.genode.org

2 participants
2352 discussions

Start a nNew thread

Security check required
by Security check 17 Aug '26

17 Aug '26

3 2

Secure Boot status for Sculpt OS July 2026 update?
by larryflynt＠tutamail.com 17 Jul '26

17 Jul '26

Hi all, I've been following Genode/Sculpt OS and the recent discussions around Secure Boot. I saw Johannes Lötzsch's post on the 2026 roadmap thread back in January where he described his partial setup (TrustedGRUB/Lanzaboote for the kernel, but the Sculpt image and GENODE* configs unsigned), and Norman's reply that the topic "screams to be addressed in 2026." Now that we're halfway through 2026 and Sculpt 26.04 has shipped, I wanted to ask: Is there any progress on a full verified boot chain? Even a rough plan or list of blockers would be interesting to hear. Johannes mentioned using Lanzaboote with custom keys — is that still the best community approach today, or has anyone managed to go further (signed system image, measured GENODE* partition, TPM integration)? For someone who wants to contribute here — what's the smallest useful piece that could move this forward? Is it documentation of the existing hack, build-system work, a design discussion on how to handle the dynamic depot model, something else? I think Sculpt's runtime security architecture is genuinely unmatched, but telling users to disable Secure Boot to run it is a hard sell. I'd love to see this gap closed. Thanks Alex

1 0

How to Explicitly Sync When Appending to a File
by Rumen Mitov 24 Jun '26

24 Jun '26

Hello, I would like to sync the file-system after every invocation to `Genode::Append_file::append()`. However, the `_sync()` interface is private as are the Genode::Append_file's `_io` and `_handle`. What is the recommended way to sync? I tried using handles as well: ```cpp Vfs::File_system &fs{root_dir.root_dir()}; Vfs::Vfs_handle *handle {}; fs.open("foo", Vfs::Directory_service::Open_mode::OPEN_MODE_RDWR | Vfs::Directory_service::Open_mode::OPEN_MODE_CREATE, &handle, heap); // file opens properly for (long long unsigned i = 0; i < 10; i++) { auto _str = Genode::String<512>(Genode::Hex(i), "\n"); Genode::Const_byte_range_ptr const bufrange { _str.string(), _str.length() }; Genode::size_t out = 0; auto res = fs.write(handle, bufrange, out); handle->advance_seek(out); Genode::warning("WROTE: ", out, "B, RES: ", (Genode::uint32_t)res); } fs.close(handle); ``` However, before I could add syncing to the above example, I noticed that `fs.write()` returns WRITE_ERR_INVALID. I am stuck on what could be wrong, as I based this example off of the internal implementation of `Genode::Writeable_file`. As always, any help is greatly appreciated :) Best, Rumen P.S. This was tested on rump-ext2fs.

2 3

SEO website
by vacod43519＠dyleris.com 13 Jun '26

13 Jun '26

https://www.adultfanweekly.com

1 0

Re: AI-generated code
by Ryan Davidovics 09 Jun '26

09 Jun '26

Norman, Understood. Thank you for your reply. I will take care to avoid pasting any AI generated content in the future. If I understand your answer correctly, then using AI to research and investigate is acceptable, but any proposed changes, bug reports, or fixes should solely consist of code and content I create, and which I assume all responsibility for? Thanks, Ryan Davidovics -------- Original Message -------- On Monday, 06/08/26 at 05:01 users-request(a)lists.genode.org wrote: Send users mailing list submissions to users(a)lists.genode.org To subscribe or unsubscribe via email, send a message with subject or body 'help' to users-request(a)lists.genode.org You can reach the person managing the list at users-owner(a)lists.genode.org When replying, please edit your Subject line so it is more specific than "Re: Contents of users digest..." Today's Topics: 1. MSM8226 Port part_block GPT Partition Parsing Error (Ryan Davidovics) 2. AI-generated code (was Re: MSM8226 Port part_block GPT Partition Parsing Error) (Norman Feske) ---------------------------------------------------------------------- Message: 1 Date: Mon, 08 Jun 2026 01:47:42 +0000 From: Ryan Davidovics <davidovicsryanp(a)protonmail.com> Subject: MSM8226 Port part_block GPT Partition Parsing Error To: "users(a)lists.genode.org" <users(a)lists.genode.org> Message-ID: <In2Lv_iy0CX68v2IED625TkHDmkg4Y9wg3LDs9Uxd-e9jdHz83zmO_EQx 1WzCLmUOALjtEA0CrQvwLfewHJrrcLbQ_bghhvAN7EsmLMB5-c=(a)protonmail.com> Content-Type: multipart/alternative; boundary="b1=_PHFoLFLjnJOmFBdCeBKKc0YQJv7ZBM03H1EDpxyU" Hello, My sincerest apologies if this question is malformed, misplaced, or mistaken in some way. I am inexperienced with Genode, but have been exploring it for a number of personal projects. The one I am currently working on is creating a minimal sculpt-like OS to replace the default Android 4.2 operating system on a rugged 4G Sonim XP5700 phone to serve as a platform for further Genode exploration and IoT projects. To test the viability of this, I have been using Claude Opus 4.7/4.8 to accelerate working through creating a port for the msm8226/msm8926 SoC and phone platform. It has been largely successful so far, but hit a snag when implementing the file system service. This was its report: ``` part_block has a real bug for this device's GPT: the parse loop (gpt.h:373) runs to a hardcoded MAX_PARTITIONS=128, but this Qualcomm GPT declares fewer entry slots, so the entry-array buffer (sized to the header's actual entries(), gpt.h:363) overruns once i passes the real count. (_calculate_used at gpt.h:342 already correctly bounds by entries() — only the parse loop doesn't.) The one-line fix is to bound the parse loop by min(entries(), MAX_PARTITIONS). ``` And its recommended fix, which successfully resolved the issue: ``` diff --git a/repos/os/src/server/part_block/gpt.h b/repos/os/src/server/part_block/gpt.h index dbe9128e01..3539024cfb 100644 --- a/repos/os/src/server/part_block/gpt.h +++ b/repos/os/src/server/part_block/gpt.h @@ -370,7 +370,17 @@ class Block::Gpt : public Block::Partition_table _gpt_total = (gpt.part_lba_end() - gpt.part_lba_start()) + 1; _gpt_used = _calculate_used(gpt, entries, gpt.entries()); - for (int i = 0; i < MAX_PARTITIONS; i++) { + /* + * Iterate only over the entries the header actually declares -- + * a GPT may advertise fewer slots than MAX_PARTITIONS (e.g. the + * Qualcomm MSM8226 eMMC declares < 128), and the entry-array + * buffer above is sized to gpt.entries(); walking to MAX_PARTITIONS + * unconditionally overruns it (Mmio Range_violation). This matches + * the bound already used by _calculate_used(). + */ + unsigned const num_entries = min(gpt.entries(), + (uint32_t)MAX_PARTITIONS); + for (unsigned i = 0; i < num_entries; i++) { Gpt_entry e(entries.range_at(i * gpt.entry_size())); ``` I am not sure of what the stance is on AI generated code or how well-documented pull requests need to be before creation, and I do not yet have the ability to test this change in a comprehensive way. I would love to contribute in any way I can, but am not yet certain of whether I have the tools or knowledge to do so correctly yet. I would greatly appreciate any feedback or advice, and thank you for your time and consideration regardless. This has been a remarkable project to learn about so far. Thanks, Ryan Davidovics

2 1

MSM8226 Port part_block GPT Partition Parsing Error
by Ryan Davidovics 08 Jun '26

08 Jun '26

Hello, My sincerest apologies if this question is malformed, misplaced, or mistaken in some way. I am inexperienced with Genode, but have been exploring it for a number of personal projects. The one I am currently working on is creating a minimal sculpt-like OS to replace the default Android 4.2 operating system on a rugged 4G Sonim XP5700 phone to serve as a platform for further Genode exploration and IoT projects. To test the viability of this, I have been using Claude Opus 4.7/4.8 to accelerate working through creating a port for the msm8226/msm8926 SoC and phone platform. It has been largely successful so far, but hit a snag when implementing the file system service. This was its report: ``` part_block has a real bug for this device's GPT: the parse loop (gpt.h:373) runs to a hardcoded MAX_PARTITIONS=128, but this Qualcomm GPT declares fewer entry slots, so the entry-array buffer (sized to the header's actual entries(), gpt.h:363) overruns once i passes the real count. (_calculate_used at gpt.h:342 already correctly bounds by entries() — only the parse loop doesn't.) The one-line fix is to bound the parse loop by min(entries(), MAX_PARTITIONS). ``` And its recommended fix, which successfully resolved the issue: ``` diff --git a/repos/os/src/server/part_block/gpt.h b/repos/os/src/server/part_block/gpt.h index dbe9128e01..3539024cfb 100644 --- a/repos/os/src/server/part_block/gpt.h +++ b/repos/os/src/server/part_block/gpt.h @@ -370,7 +370,17 @@ class Block::Gpt : public Block::Partition_table _gpt_total = (gpt.part_lba_end() - gpt.part_lba_start()) + 1; _gpt_used = _calculate_used(gpt, entries, gpt.entries()); - for (int i = 0; i < MAX_PARTITIONS; i++) { + /* + * Iterate only over the entries the header actually declares -- + * a GPT may advertise fewer slots than MAX_PARTITIONS (e.g. the + * Qualcomm MSM8226 eMMC declares < 128), and the entry-array + * buffer above is sized to gpt.entries(); walking to MAX_PARTITIONS + * unconditionally overruns it (Mmio Range_violation). This matches + * the bound already used by _calculate_used(). + */ + unsigned const num_entries = min(gpt.entries(), + (uint32_t)MAX_PARTITIONS); + for (unsigned i = 0; i < num_entries; i++) { Gpt_entry e(entries.range_at(i * gpt.entry_size())); ``` I am not sure of what the stance is on AI generated code or how well-documented pull requests need to be before creation, and I do not yet have the ability to test this change in a comprehensive way. I would love to contribute in any way I can, but am not yet certain of whether I have the tools or knowledge to do so correctly yet. I would greatly appreciate any feedback or advice, and thank you for your time and consideration regardless. This has been a remarkable project to learn about so far. Thanks, Ryan Davidovics

2 1

Announcement: Genode OS Framework version 26.05 released
by Christian Helmuth 29 May '26

29 May '26

Hello everyone, I'm happy to announce the Genode 26.05 release and the completion of our migration from GitHub.com to Codeberg.org! On the technical side, we turned the prominent aspects of Sculpt OS into building blocks that can easily be reused to craft custom operating systems based on Genode. Further, we significantly improved our driver base, for example by fine-grained DMA-buffer accounting, MSI/MSI-X support, Linux 6.18 driver sources, and an advanced LTE modem stack with MBIM and QMI support. Also, Qt6 was updated to 6.8.3, a libslirp-based NIC driver de-privileges networking on Genode/Linux, and Goa is now on par with Sculpt OS 26.04. Last but not least, the release is accompanied by profoundly revised editions of the Foundations, Applications, and Platforms books. The current release contains the following changes and new features. - Revisions of the Foundations, Applications, and Platforms books - Completed migration from GitHub to Codeberg - Sculpt OS reshaped into re-usable building blocks - Touch-based window management - Device drivers - Fine-grained DMA-buffer accounting - Linux device-driver environment updated to kernel 6.18.19 - Improved drivers for Wifi, VESA, EFI boot fb, AHCI - Advanced LTE modem stack - New I2C HID driver - New Intel SOF audio driver - Qt6 updated to version 6.8.3 - De-privileged user-level networking on Linux - Goa SDK updated to Sculpt OS 26.04 Read the complete release documentation for version 26.05 here https://genode.org/documentation/release-notes/26.05 Best regards -- Christian Helmuth Genode Labs https://www.genode-labs.com/ · https://genode.org/ https://floss.social/@genode · https://genodians.org/ https://de.linkedin.com/company/genodelabs Genode Labs GmbH · Amtsgericht Dresden · HRB 28424 · Sitz Dresden Geschäftsführer: Dr.-Ing. Norman Feske, Christian Helmuth

1 0

Announcement: Sculpt OS version 26.04 released
by Norman Feske 19 May '26

19 May '26

Dear Sculpt-OS users, I'm wholly excited to share the release of Sculpt OS 26.04 today! https://genode.org/news/sculpt-os-release-26.04 This version is a break-through in several respects: First, it has been largely restructured to put _all_ components right at the fingertips of the user. Many aspects that were formerly hardwired and somewhat obscured have now became transparent and part of the user experience. Second, the configuration has become the system's data model, which is exposed to the user and can thereby be reviewed and edited on the fly. Once one gets the hang of it, working with the system becomes a unique user experience of control and playfulness. Third, the above mentioned data model as well as any state reported by components leverage Genode's human-inclined data (HID) format to great effect, fostering clarity over ceremony. Fourth, thanks to an early version of an on-target Goa SDK offered by cproc's depot, Genode components can now be developed, compiled, and tested directly on Sculpt OS without the need of a virtual machine. A distant dream has become reality. Additionally, the release comes with welcome technical and feature improvements such as the updated arsenal of drivers for modern PC hardware and an updated version of the Chromium-based Falkon browser. It goes without saying that the manual has been updated to reflect all the changes: https://genode.org/documentation/articles/sculpt-26-04 The new version is available at Sculpt's system-update dialog or as a ready-to-use system image at our download page: https://genode.org/download/sculpt Happy sculpting! Norman -- Dr.-Ing. Norman Feske Genode Labs https://www.genode-labs.com · https://genode.org Genode Labs GmbH · Amtsgericht Dresden · HRB 28424 · Sitz Dresden Geschäftsführer: Dr.-Ing. Norman Feske, Christian Helmuth

2 1

Async Handling of RPC Entrypoints
by Rumen Mitov 11 May '26

11 May '26

Hi, During FOSDEM, one of the discussions touched on the components' handling of incoming RPC calls. Currently this is done in a synchronous manner because (if I remember correctly) it was simply easier to implement it that way as opposed to handling it asynchronously. What would be some of the challenges in handling this asynchronously? It was mentioned that the RPC mechanism was tightly integrated with the whole codebase, so it would require a large refactor. I am curious to hear your thoughts on how supporting asynchronous RPC calls could impact the following: - preservation of determinism (in the context of formal verification) - would the capability model need to be reworked to support revoking in-flight RPC requests? If so how could a client component signal to the server that it should drop the request? I don't mean to argue for replacing the current model, I'm just interested learning a bit more about the design trade-offs :) Best, Rumen

4 4

Sculpt 26.04 Release Candidates
by Christian Helmuth 24 Apr '26

24 Apr '26

Hello everybody, just now, I published the first alpha image of Sculpt 26.04 under the following URLs. It’s also available via the Sculpt “System → Update” dialog in entry `https://depot.genode.org/chelmuth` from a running Sculpt installation. https://depot.genode.org/chelmuth/image/sculpt-pc-2026-04-17.img.xz https://depot.genode.org/chelmuth/image/sculpt-pc-2026-04-17.zip Note, the image represents an alpha state and comes with shortcomings we're actively working on. For example, the selection of a preset currently deactivates networking, which must be enabled again to download missing depot archives. I will post here when updated candidates were published. Please report any discovered issues and ask questions on the mailing list or our Discourse forum. Happy sculpting! -- Christian Helmuth Genode Labs https://www.genode-labs.com/ · https://genode.org/ https://floss.social/@genode · https://genodians.org/ https://de.linkedin.com/company/genodelabs Genode Labs GmbH · Amtsgericht Dresden · HRB 28424 · Sitz Dresden Geschäftsführer: Dr.-Ing. Norman Feske, Christian Helmuth

1 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

users