logo

bootstrap-initrd

Linux initrd to bootstrap from a small binary seed git clone https://anongit.hacktivis.me/git/bootstrap-initrd.git/
commit: 5ba63f014480e58bb7d368bf8031a91ef54c83d0
parent 23ae6131beed7a230516ef84cc3a8f36987c8ac5
Author: Haelwenn (lanodan) Monnier <contact@hacktivis.me>
Date:   Sun, 12 Oct 2025 04:33:11 +0200

RATIONALES: add notes around bearssl & al.

Diffstat:

MRATIONALES.md10+++++++++-
1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/RATIONALES.md b/RATIONALES.md @@ -110,13 +110,21 @@ Meanwhile: - genext2fs: uses autotools but only for generating a config.h which can be vendored - lwext4: a lot more code than you'd need on systems like Linux which have builtin support for ext2 +## extra: bearssl +- bearssl: codegen from C# for some files (see ./T0/ and *.t0 files). + Maybe generator can be rewritten in a simpler language, or *.t0 files in lex/yacc +- wolfssl: depends on autotools/cmake, gates `make dist` tarballs behind registration +- mbedtls: depends on CMake, might require Python +- openssl: depends on Perl +- gnutls: depends on autotools (and still has a questionable API security-wise) +- nss: horrible mess of a buildsystem, depends on Perl + ## misc extras - lua: For oasis - muon: For pkgconf and git without autotools - pkgconf: For iproute2 - GNU make: Required by the other extras - iproute2: Basic networking configuration -- bearssl: small TLS library - tiny-curl: Still pretty big but hopefully close enough to the usual one - cacert (from curl.haxx.se): Maybe could be reduced to a handful of CAs (like maybe even just Let's Encrypt) - git: For oasis