README.md 4.52 KB
Newer Older
1
2
fwupd
=====
3
[![Build Status](https://travis-ci.org/fwupd/fwupd.png?branch=master)](https://travis-ci.org/fwupd/fwupd)
4
[![Coverity Scan Build Status](https://scan.coverity.com/projects/10744/badge.svg)](https://scan.coverity.com/projects/10744)
5

6
7
[![Get it from the Snap Store](https://snapcraft.io/static/images/badges/en/snap-store-white.svg)](https://snapcraft.io/fwupd)

8
This project aims to make updating firmware on Linux automatic, safe and reliable.
9

Jonathan's avatar
Jonathan committed
10
Additional information is available at the website: https://fwupd.org/
11

12
13
## Compiling

Jonathan's avatar
Jonathan committed
14
The most up to date compilation instructions are available in the [Wiki](https://github.com/fwupd/fwupd/wiki/Compilation).
15

16
17
18
LVFS
----
This project is configured by default to download firmware from the [Linux Vendor
19
Firmware Service (LVFS)](https://fwupd.org/).
20

21
22
This service is available to all OEMs and firmware creators who would like to make
their firmware available to Linux users.
23

24
You can find more information about the technical details of creating a firmware
Zander's avatar
Zander committed
25
capsule in the hardware vendors section of the [fwupd website](https://fwupd.org).
26

27
28
29
30
Basic usage flow (command line)
------------------------------

If you have a device with firmware supported by fwupd, this is how you will check
31
for updates and apply them using fwupd's command line tools.
32

33
`# fwupdmgr get-devices`
34
35
36

This will display all devices detected by fwupd.

37
`# fwupdmgr refresh`
38
39
40

This will download the latest metadata from LVFS.

41
`# fwupdmgr get-updates`
42
43
44

If updates are available for any devices on the system, they'll be displayed.

45
`# fwupdmgr update`
46
47
48

This will download and apply all updates for your system.

49
50
* Updates that can be applied live will be done immediately.
* Updates that run at bootup will be staged for the next reboot.
51

52
You can find more information about the update workflow in the end
Zander's avatar
Zander committed
53
users section of the [fwupd website](https://fwupd.org).
54

55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
Reporting status
---------------

fwupd will encourage users to report both successful and failed updates back
to LVFS.  This is an optional feature, but encouraged as it provides valuable
feedback to LVFS administrators and OEM developers regarding firmware update
process efficacy.

The privacy policy regarding this data can be viewed on the [fwupd website](https://fwupd.org/privacy).

To report the status of an update run:

`# fwupdmgr report-history`

To clear the local history of updates:

`# fwupdmgr clear-history`

 Only updates that were distributed from the LVFS will be reported to the LVFS.

Jonathan's avatar
Jonathan committed
75
Enterprise use
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
--------------

The flow of updates can be controlled in the enterprise using the
"approved updates" feature. This allows the domain administrator to filter
the possible updates from a central server (e.g. the LVFS, or a mirror)
to only firmware that have been tested specifically in your organisation.

The list of approved updates can be enabled by adding `ApprovalRequired=true`
to the remote configuration file, e.g. `lvfs.conf`. Once enabled, the
list of approved updates can be set in `daemon.conf` using a comma delimited list.

For example:

    ApprovedFirmware=foo,bar

Where `foo,bar` refers to the container checksums that would correspond
to two updates in the metadata file.

Additionally, the list of approved firmware can be supplemented using
`fwupdmgr set-approved-firmware baz` or using the D-Bus interface.

97
98
99
Other frontends
-------------------

100
101
102
 1. [GNOME Software](https://wiki.gnome.org/Apps/Software) is the graphical
 frontend available. When compiled with firmware support, it will check for
 updates periodically and automatically download firmware in the background.
Jonathan's avatar
Jonathan committed
103
 After the firmware has been downloaded a popup will be displayed in GNOME
104
105
106
107
108
109
110
111
 Software to perform the update.

2. [KDE Discover](https://userbase.kde.org/Discover) is the software centre,
 generally bundled with KDE Plasma. With the release of
 [KDE Plasma 5.14](https://www.kde.org/announcements/plasma-5.14.0.php),
 a new fwupd backend has been implemented in KDE Discover for firmware updates.
 These firmware updates are shown with other system updates.

112
113
3. [Wyse Management Suite](https://www.dell.com/en-us/work/shop/wyse-endpoints-and-software/wyse-management-suite/spd/wyse-wms)
 A software suite available on Dell IoT gateways and Wyse thin clients with built-in fwupd support.
114
115
 The remote administration interface can be used to download and deploy firmware
 updates.
116
117
118
119
120
121
122
123
124
125
126
127


Fuzzing
-------

There are several automated fuzzing tests in fwupd. These take some time to run:

    CC=afl-gcc meson --default-library=static ../
    AFL_HARDEN=1 ninja
    ninja fuzz-synaptics-rmi
    ninja fuzz-firmware
    ninja fuzz-smbios