Jump to content

[HOW TO] OpenCore 0.9.4 >> 0.9.5 differences


miliuco
 Share

1 post in this topic

Recommended Posts

OpenCore 0.9.5 is out. You can get it from Acidanthera.

 

Main changes

  • Added UEFI quirk ShimRetainProtocol, allowing OpenCore chained from shim to verify Linux using shim's certificates. It requests Linux shim to keep protocol installed for subsequent image loads. This option is only required if chaining OpenCore from shim. It must be set in order to allow OpenCore to launch items which are verified by certificates present in shim, but not in the system Secure Boot database.
  • Added OpenLegacyBoot driver for supporting legacy OS booting.

config.plist

  • UEFI >> quirks: added ShimRetainProtocol (Boolean). Failsafe value is False.

Drivers
 

OpenLegacyBoot.efi: it aims to detect and boot legacy installed operating systems. Usage: 

  • Install Windows or another legacy operating system as normal if this has not been done earlier (OpenLegacyBoot is not involved in this stage and may be unable to boot from installation media such as a USB device)
  • Reboot into OpenCore: the installed legacy operating system should appear and boot directly from OpenCore when selected.

OpenLegacyBoot does not require any additional filesystem drivers such as OpenNtfsDxe.efi to be loaded for base functionality, but loading them will enable the use of .contentDetails and .VolumeIcon.icns files for boot entry.
Note: MBR (Master Boot Record) installations of Windows are legacy and will not be supported without the OpenLegacyBoot driver.

 

Tools

 

Renamed ShimToCert folder as ShimUtils; added new tools:

  • shim-make.tool
  • sbat-info.tool
  • unsign-efi-sig-list.tool
  • and update shim-to-cert.tool.

Read /Utilities/ShimUtils/README.md for extended info.

In summary "the new recommended way to boot OpenCore + OpenLinuxBoot + Secure Boot is to make a user build of Shim. The vendor certificates and revocation lists extracted from the distro shimx64.efi files are combined and signed by you, into your own build of Shim; in this approach, these vendor certificates should NOT also be included in the system Secure Boot database, and should be removed if you added them previously."

 

Kexts

  • AppleALC 1.8.5
  • MacHyperVSupport 0.9.5.

 

 

Edited by miliuco
  • Like 10
  • Thanks 2
Link to comment
Share on other sites

 Share

×
×
  • Create New...