Premday #3 - Fwupd for everyone

Criteo presents the firmirror project to ease firmware management with fwupd in large companies.

Transcript

1. fwupd for everyone Who like fwupd? (you will see what I mean in the next slide)
2. Imagine very hard a world where you can • Update your BMC • Update your PSUs • Update your backplanes • Update your BIOS • Update your disks • Update your NICs • Update your <insert server part with another firmware> Using fully standard, open-source tooling? (by any chance, fwupd?)
3. Now you can *mic drop*
4. Now you can *mic drop*
5. How • https://github.com/criteo/firmirror • Will scan manufacturers repos (HPE + Dell) to download the firmware • Translate them and wrap them into fwupd CAB format • Push them to an INTERNAL S3 repo • … works? • This was done because current "solutions" ("products"? -> proprietary software?) were highly unsatisfactory • HW vendors: you can still redeem yourself by uploading your firmware to the LVFS and providing complete metadata, at least you will be controlling them
6. The ugly part: fwupd in enterprise • JSON I/O • Known good configuration • Reports detailed update status to a centralized server • Verified platform security • CAn yOu stOP COntRaDICtiNg mE? TL;DR: has basically all you need, and fwupd is open source Cool
7. Next 1. Will be probably transferred soon to Premday's organization 2. May be expanded for other manufacturers (feel free to contribute, we're ) 3. Will be officially implemented at Criteo this quarter