# Raspberry Pi4 bootloader EEPROM release notes
## 2026-02-06: config: Add support for customer OTP rows in conditional expressions (latest)
* config: Add support for customer OTP rows in conditional expressions
Support conditional filter for eight customer OTP rows to be used by config.txt from Pi 1 onwards.
(Requires updated start4.elf)
* rpi-fw-crypto: Fix bad hmac arguments lock-up
Improve argument validation so that a bad key-id or invalid private key
can no longer cause a lock-up during HMAC operations.
* Assume eMMC for CM4/CM5 non-lite
Attempt the fast path by skipping the SD interface condition command timeout on CM4/CM5 (non-lite) modules and enable eMMC mode directly. This saves ~250ms of the boot time.
## 2026-01-13: Promote 2026-01-09 to the default release (default)
## 2026-01-09: arm_loader: Apply rpifwcrypto lock permissions GET/SET USER OTP (latest)
* arm_loader: Apply rpifwcrypto lock permissions GET/SET USER OTP
Previously, the GET/SET user OTP mailboxes would provide access to the
device unique private key. Update the mailbox API to fail if the
key has been locked via lock_device_private_key=1 in config.txt or
the associated mailbox call.
GET/SET user OTP fails by setting the result tag to the standard
error code (0x80000000). The dedicate GET/SET private key continue
to fail the entire mailbox operation to force vcmailbox to exit
with a non-zero error code.
* cm5: Add support for 8-bit bus width eMMC
* Query all sdram devices for temperature when adjusting refresh
* Add support for more SDRAM die configurations.
## 2025-12-09: Promote 2025-12-08 to the default release (default)
## 2025-12-08: arm_loader: Add machine ID derived from OTP values (latest)
* arm_loader: Add machine ID derived from OTP values
Machine ID is generated and exposed in device tree as rpi-machine-id
* arm_ldconfig: Avoid double os_prefix on initramfs
When using auto_initramfs we were picking up prefix from the kernel,
but also adding os_prefix later:
fname = prefixed_path(initramfs_file, os_prefix, temp_path, sizeof(temp_path));
See: https://forums.raspberrypi.com/viewtopic.php?t=394238
* recovery: Use OTP rpiboot GPIO if non-zero
If an rpiboot GPIO has already been written to OTP then default to
that value if C(program_rpiboot_gpio) is not specified on config.txt.
## 2025-11-27: helpers/config_loader: Also support bootvar0 eeprom config on Pi4 (latest)
* helpers/config_loader: Also support bootvar0 eeprom config on Pi4
This allows an eeprom config setting (e.g. BOOTARG0=0x10) to be set on a board
which config.txt can use as a conditional expression (e.g. [bootarg0&0x10]).
* pi5: Write over-voltage config to the UART log
Write the high level over-voltage configuration to the UART log for
diagnostic purposes.
* Stop partition-walk after boot-mode timeout/retries limit
Fix a fatal assert with USB boot where the partition walk could be
retried after the USB timeout/retry limit had been reached.
See: https://github.com/raspberrypi/rpi-eeprom/issues/776
* rpiboot: Extend metadata to report status of operations
Report success/fail status of recovery operations based on config.txt settings
## 2025-11-21: recovery: Restore recovery_wait option (latest)
* recovery: Restore recovery_wait option
Restore the recovery_wait config.txt option. If this option is set
then recovery.bin will not rename itself or reboot. Instead flash
the activity LED on completion.
This option can be useful when creating an SD card to erase the
EEPROM or program the RPIBOOT gpio on multiple devices.
If recovery_wait=1 and recovery.bin is run from the SD card then
indicate success of erase_eeprom=1 or program_rpiboot_gpio=N was
set instead of requiring the EEPROM to be updated.
* Manufacture test updates for SDRAM.
## 2025-11-09: Promote 2025-11-05 to the default release (default)
## 2025-11-05: Add iommu_dma_numa_policy=interleave when needed (latest)
* arm_loader: Add iommu_dma_numa_policy=interleave when needed
This applies a similar numa interleave for iommu dma kernel allocations.
This includes buffers allocated for hevc and v3d.
See: https://forums.raspberrypi.com/viewtopic.php?t=392666
## 2025-10-14: recovery: Use ROM boot-mode to detect rpiboot (latest)
* recovery: Use ROM boot-mode flag to detect rpiboot mode
In recovery-mode use the bootrom register flag to detect the
original boot-mode rather than looking at whether the rpiboot
usb-device boot driver is initialised.
* Manufacturing test updates.
## 2025-10-08: Fix accidental set of PM_RSTS bit 5 when stopping watchdog (latest)
* Fix accidental set of PM_RSTS bit 5 when stopping watchdog
Fix an issue in the watchdog code where the raw PM_RSTS value
was used as partition number. If HADWRF (bit 5) was set (on reboot)
this could cause bit 10 to be set. If an OS didn't clear the partition
flags on reboot then this could end up being treated as request to
boot from partition 32.
## 2025-10-03: arm_dt: Report OTP SDRAM size via device-tree (latest)
* arm_dt: Report OTP SDRAM size via device-tree
Report the SDRAM in gigabits via device-tree as
/proc/device-tree/chosen/rpi-sdram-size-gbit. Scripts reporting the
device-capabilities should use this value (if defined) instead of the
memory-size field in the boardrev row.
* Apply UART_BAUD in early bootsys UART init
Update bootsys and fatal error handlers to use the user
defined UART_BAUD rate.
* rpifwcrypto: Add support for ECDSA P-256 key generation
Also, slightly improve the entropy by passing the system
timer value as the personality string.
## 2025-09-23: Fix network install regression on Pi4 (latest)
* Fix network install regression on Pi4
Fix an issue with the ECDSA signature code which caused network
install to fail to load on Pi4.
* Fix TFTP to allow larger files
Allow TFTP block counter to rollover to 0.
See: https://github.com/raspberrypi/rpi-eeprom/issues/720
## 2025-09-22: Add LZ4 decompressor (latest)
* Add LZ4 decompressor
LZ4 gives a better compression ratio than the previously used CK compress. The bootloader can now decompress both LZ4 compressed files and CK compressed files.
* rpifwcrypto: Add GET_CRYPTO_PRIVATE_KEY mailbox API
For provisioning, add a new mailbox API which returns the private key
in DER format. The API will return an error if the key-status for
the specified key is LOCKED.
* config: Add support for board_attributes in conditional expressions
Add support for the board-attributes row in config.txt conditional
expressions. This can be used to change boot behavior for
Compute Module Lite / No-WiFi etc.
* board_info: Log the OTP board revision at startup
Log the board revision plus the raw OTP value at startup.
## 2025-08-27: Fix PARTITION property to allow default (0) partition to be overridden (latest)
* Fix PARTITION property to allow default (0) partition to be overridden
Fix the partition selection to allow the bootloader PARTITION
property to override the reboot partition number if the reboot
argument is 0 or > 31. Previously, it was only allowing
partition numbers > 31 to be overridden.
See: https://github.com/raspberrypi/rpi-eeprom/issues/743
* Enable RPIBOOT in BOOT_ORDER / set-reboot-order
Previously, rpiboot required the bootrom to have initialised
rpiboot before running the firmware. Update the rpiboot
initialisation so that rpiboot to be enabled after booting from
SPI flash.
This could be selectively enabled by setting BOOT_ORDER property
(0x3) behind a GPIO conditional in the EEPROM config. On Pi5, the
set_reboot_order config.txt option or mailbox property can be
used to set a one-time boot-order on
N.B. There is no timeout for RPIBOOT so this should only be set
as the last boot mode OR used with a boot_watchdog.
## 2025-08-20: Fix PARTITION_WALK for missing start.elf files (latest)
* Fix PARTITION_WALK for missing start.elf files
Fix a missing call to bootloader_reset_state so that PARTITION_WALK
will work if the boot-partition is FAT, contains config.txt etc
but does not have valid firmware.
See: https://github.com/raspberrypi/rpi-eeprom/issues/738
* force_eeprom_read=0 disables HAT I2C
Although setting force_eeprom_read=0 has always prevented the HAT EEPROM
from being read, with the recent changes to support Power HAT+s it does
not prevent an early scan to see if such an EEPROM exists. This can be
problematic for applications where the I2C0 pins have been repurposed.
Change the inhibit logic to cut all HAT I2C probing off at the knees,
including any automatic settings of usb_max_current_enable, as it should
always have done.
See: https://github.com/raspberrypi/firmware/issues/1985
* bootcode.bin: Add support for boot.img ramdisk on Pi3 and earlier
Add support for boot.img ramdisk support, enable by adding boot_ramdisk=1
in config.txt
* rpifwcrypto: Preliminary firmware support for rpifwcrypto API
* Add config.txt to block GET_CUSTOMER_PRIVATE_KEY mailbox API
lock_device_private_key=1
## 2025-08-13: Enable PARTITION_WALK property by default (latest)
* Enable the PARTITION_WALK property by default
Previously, the new PARTITION_WALK which searches for bootable
partitions after a failure had to be explicitly enabled. Change
the default to be enabled by default. It can be switched off by
setting PARTITION_WALK=0 in the EEPROM config.
* Optimise bootmain for size on Pi4
Pi4 only has a 512KB SPI flash EEPROM and the addition of features
plus fixes is now causing contention for space between the code and
the EEPROM config. Since bootmain is only responsible for loading
start.elf revert to the original configuration which is optimised
for size rather than speed. Pi5 continues to be optimised for speed.
## 2025-07-17: arm_loader: Also require the early-watchdog property (latest)
* arm_loader: Also require the early-watchdog property
The change correcting the implementation of dtoverlay_is_enabled had the
unintended consequence of causing the firmware to enable the watchdog
even though the user had not explicitly requested it. This is harmless
on Linux because the watchdog driver takes over and disarms it, but on
other operating systems this can lead to a reboot. Avoid this problem
by also requiring the presence of a new property, "early-watchdog".
See: https://github.com/raspberrypi/firmware/issues/1980
* helpers/config_loader: Add bootvar0 eeprom config that can be used in config.txt section expressions
This allows an eeprom config setting (e.g. BOOTVAR0=0x10) to be set on a board
which config.txt can use as a conditional expression (e.g. [bootvar0&0x10]).
* arm_loader: Fix boot-watchdog stop on Pi4
Fix a problem where the boot_watchdog heartbeat timer was not
stopped correctly which could cause it to clash with the kernel
watchdog driver.
## 2025-07-03: Check for SD card overcurrent (latest)
* board_info: Use the Ethernet PHY address probed by the bootloader
Use the Ethernet PHY address supplied by the bootloader in
preference to the static configurations defined in start4.elf
* Check for SD card overcurrent on Pi5, Pi500 and Pi4
Before booting, the bootloader now checks the SD power switch
overcurrent signal. The overcurrent signal occurs if the SD
card is damaged and has a short circuit which will cause it to
get hot.
If an over-current condition is detected the bootloader switches
switches off power to the SD card and waits five seconds before
probing the SD card again. This error is displayed on the
diagnostic screen, the UART and the activity LED (1 long, 2 short)
flashes.
The check can be switched to a non-blocking warning by setting
SD_OVERCURRENT_CHECK=0 in the bootloader config.
* Add a new error code pattern for SD overcurrent
Add a new error pattern (1 long, 2 short) to signal SD card
overcurrent.
* Add support for a bootloader watchdog
Add support for a boot watchdog (using PM_RSTC hw wdog) which will
trigger if the OS is not started within the specified amount of time. The
watchdog is enabled by setting the BOOT_WATCHDOG_TIMEOUT=N (seconds)
property in the bootlaoder config.
The BOOT_WATCHDOG_PARTITION=P property can be set to pass a different
partition number to the bootloader on reset if the watchdog
is triggered.
The boot watchdog is automatically cleared just before starting
the OS and (optionally) enabling the kernel watchdog.
* Skip first SD boot if no card detected
On platforms with an SD Card detect signal, skip the first attempt to
boot from SD if the card appears to be absent. This can save over a
second on a cold boot, and a little under a second for a reboot.
## 2025-05-16: 2711: Automatically set revoke_devkey if program_pubkey=1 (latest)
* 2711: (recovery) Automatically set revoke_devkey if program_pubkey=1
Previously, on BCM2711 products it was possible to program the key
hash without revoking the development key. This can be useful for
testing but should never be used in production because it is possible
to an install an older version of the bootloader which doesn't
support secure-boot. Since the secure-boot tools are stable and
have improved usability (RPi secure-boot provisioner) this test
feature not necessary and is just a security risk so the behaviour
is changed to always revoke the development key if program_pubkey=1.
This change is not relevant on BCM2712 because secure-boot requires
that the second stage bootloader is counter-signed with the customer's
private key.
## 2025-05-13: Promote 2025-05-08 to the default release (default) (automatic)
## 2025-05-08: Implement TCP window for net boot (latest)
* Signed boot and HTTP boot mode
HTTP boot mode is supposed to be disabled if signed boot is enabled and
a host is not specified. The code is checking the http_secure flag to
enforce this. But this is valid now we support custom CA certs.
Only disable HTTP mode if we're using the default HOST.
* Implement TCP window for net boot
The minimal IP stack used for https booting lacks the ability to cache
packets received out of order, which can lead to severe slowdown when
it happens. The problem seems to affect some ISPs more than others.
The receive window implemented here copes with packet losses of 10%.
* netboot: Correct the TCP MSS
* Correct msecs in debug timestamps
The fractional part of timestamps in UART debug output was showing the
100ths and 1000ths of a second, rather than 10ths and 100ths, causing
strange sequences that appear to jump backwards.
## 2025-02-17: Promote 2025-02-11 to default release (default)
## 2025-02-11: recovery: Walk partitions to delete recovery.bin (latest)
* recovery: Walk partitions to delete recovery.bin
Previously, recovery.bin would fail to delete itself
if the bootrom loaded recovery.bin where there are multiple FAT
partitions and the first partition does not contain recovery.bin
Update the rename code to walk the partition table to find
the recovery.bin file to delete.
* Enable overriding of high partition numbers
Previously, the PARTITION=N bootloader config setting would only
be used at power on reset or if the partition number passed to
reboot was zero.
Change the behaviour so that the bootloader config PARTITION
property can override the reboot partition number if the reboot
parameter is > 31.
* Walk the partition table if the requested partition is not bootable
Previously, if the specified boot partition was not bootable the
bootloader would stop and advance to the next BOOT_ORDER. If the
new PARTITION_WALK option is set to 1 the bootloader will now
check each partition in turn starting from the specified partition
before advancing the BOOT_ORDER.
This feature is intended for use with A/B systems to handle the case
where autoboot.txt is missing / corrupted. This change enables
the system to failover to the next available bootable partition.
The autoboot.txt file is not scanned during the partition-walk
phase i.e. there is no recursive processing of autoboot.txt files.
This option is only supported on physical block devices
(SD, NVMe, USB) and not RAMDISK. USB assumes a single high speed
device, partition walks on multiple USB devices is not recommended
and may cause timeouts.
* Improve keyboard handling in boot menu
Try and make it more likely that we have enough time to perform key
detection.
Ignore mice, which were being enumerated and slowing things down.
## 2024-12-07: Enable banklow (and so NUMA) by default (latest)
* Enable banklow (and so NUMA) by default
banklow=1 (2712) and banklow=3 (2711) give the best performance.
## 2024-10-21: Fix PCIe BAR issue for some switches (latest)
* Boot-menu improvements
Remain in the forced boot mode until the menu is used to select a different
boot-mode or reset to the original boot-order.
## 2024-10-10: Use soft-reset to preseve SDRAM contents after ramoops (latest)
* SD card high-speed/low-voltage mode can only be exited by powercycling.
Pi 4s before rev 1.4 lack the power switch required to do this, so must
resort to a global reset that turns off many things, including SDRAM.
To ensure correct operation, the bootloader checks that the SD I/O
voltage is the expected 3.3V, forcing a power cycle if it isn't.
However, this doesn't take advantage of presence of the dedicated SD
power switch, always forcing a global reset, a consequence of which can
be the loss of SDRAM content - including any ramoops dump of the crash
logs.
Make the bootloader more SD_PWR_ON aware, only triggering a global reset
if one isn't found.
See: https://github.com/raspberrypi/linux/issues/5298
* Remove requirement for GPT ptable array to be at LBA-2
See: https://github.com/raspberrypi/rpi-eeprom/issues/585
* Introduce a new boot-menu feature where pressing SPACE at power on
gives the user a one-shot option to select a different boot mode.
e.g. Select USB boot if the default SD card is corrupted or unavailable.
* Display the bootloader network-install UI for longer on a cold boot to make
this feature more visible to first time users.
To revert to the previous behaviour remove NET_INSTALL_AT_POWER_ON=1
from the bootloader config.
* Default to 2GB start for PCI bus addresses on 2711 and 2712
This change also constrains the window size to 2GB, so all PCI bus address
assignments fall below 4GB, avoiding a potential bug with 32-bit BARs in
esoteric bus topologies (e.g. lots of GPUs).
## 2024-09-05: Fix self-update if EEPROM is write-protected (latest)
* arm_dt: Consult the hat_map for all HATs
* USB boot - ignore RP2 / RP3 MSD device in BOOTSEL mode.
* recovery.bin - Fix erase_eeprom to not block reboot_recovery
* Fix self-update to continue to boot instead of retrying forever
if the EEPROM is write protected.
https://github.com/raspberrypi/rpi-eeprom/issues/597
## 2024-08-14 (recovery.bin) - Add support for OTP metadata (latest)
* Update to recovery.bin to output metadata about OTP during rpiboot
## 2024-07-30 - USB boot fixes for CM4-S and interop improvements (latest)
* Resolve USB boot regression in 2024-04-17 relase on CM4S
See https://github.com/raspberrypi/rpi-eeprom/issues/588
* Improve compatibility for booting from some USB SD card readers
https://github.com/raspberrypi/rpi-eeprom/issues/527
## 2024-07-05 (recovery.bin) - Enable program_rpioboot_gpio - (latest)
* Enable the usage of program_rpiboot_gpio in config.txt for recovery.bin
without requiring secure-boot to be enabled.
This may be useful CI systems provisioning images on Pi4B / Pi400
via RPIBOOT.
This is an OTP setting and cannot be reverted after programming.
See https://www.raspberrypi.com/documentation/computers/config_txt.html#program_rpiboot_gpio
## 2024-05-17 - Ignore bootloader updates for Pi5 on Pi4 - (latest)
* Add timestamps to UART log messages.
* Add support for [tryboot] conditional the bootloader EEPROM
config file.
See: https://github.com/raspberrypi/rpi-eeprom/issues/454
* Fix MAX_RESTARTS parameter
See: https://github.com/raspberrypi/rpi-eeprom/issues/576
* Add recovery_reboot option to config.txt for rpiboot which causes
the system to reboot after updating the bootloader.
* Improve secure-boot OTP provisioning logging.
* Fix setting to enable secure-boot mode on Pi4B
## 2024-04-17 - Build Pi4 firmware from the mainline branch - STABLE
* Switch to building the Pi4 firmware from the common Pi4/Pi5
mainline release. This doesn't change the Pi4 features
but should make it quicker to release bug fixes in common code.
* Fix issue that caused the TRYBOOT flag to be lost in secure-boot mode.
* dtoverlay: Use %u when converting u32s to strings
See: https://github.com/raspberrypi/linux/issues/6039
* Improved debug messages for secure-boot.
* Generate the bootloader diagnostics qrcode at run time.
## 2024-04-15 - Fix tryboot mode in secure-boot - DEFAULT
* Promote the secure-boot fix to the DEFAULT release.
## 2024-04-15 - Fix tryboot mode in secure-boot - STABLE
* Fix an issue where the tryboot flag was being reset and lost during
the secure-boot initialization.
## 2024-01-22 - Fix issue boot.img end sector check - STABLE
* See https://github.com/raspberrypi/rpi-eeprom/issues/521
## 2024-01-18 - Fix issue with minimal sized FAT partition - STABLE
* Fix handling of files that use the last cluster in the partition
https://github.com/raspberrypi/rpi-eeprom/issues/521
## 2023-08-01 - Remove beta release folder
* Remove the beta release folder and provide a symlink to stable
for backwards compatibility for anyone who has beta in
the defaults file.
Future beta releases will be "feature-specific" and on a separate
branch / download rather than appearing in the generic APT release.
## 2023-05-15 - Promote pieeprom-2023-05-11 to STABLE
## 2023-05-11 - Fix hang in secure-boot init - BETA
* Fix intermittent hang when initialising secure-boot during a reboot loop.
## 2023-01-18 - Promote previous STABLE release to DEFAULT
Interesting changes since the last default release
* Update VL805 to 138C0 - fix for handling of split transactions
https://github.com/raspberrypi/linux/pull/5262
* Fix HID error handling with network install
https://github.com/raspberrypi/rpi-eeprom/issues/458
## 2023-01-12 - Promote previous BETA release to STABLE
* Sign the 2023-01-04 release with the secure-boot ROM key and release
as pieeprom-2023-01-11.bin
## 2023-01-04 - VL805 firmware update - BETA
* Update VL805 to 138C0 - fix for handling of split transactions
https://github.com/raspberrypi/linux/pull/5262
* Fix HID error handling with network install
https://github.com/raspberrypi/rpi-eeprom/issues/458
## 2022-12-07 - Fix SD voltage reset on Pi4 R1.1 (DEFAULT/STABLE/BETA).
* Fix issue where SD voltage was not reset by power cycling PMIC on reboot.
See https://github.com/raspberrypi/firmware/issues/1763
## 2022-12-01 - Promote pieeprom-2022-11-25 to the DEFAULT release.
Interesting changes since the last default release
* [tryboot] conditional statement + tryboot_a_b mode
* Support custom OTP mac addresses
* Increase TFTP_MAX_BLOCK_SIZE
* Stop NVMe cleanly
* Fixes for NETCONSOLE parsing and initialisation.
* Long filename support for start_file / fixup_file.
* Secure boot and display debug info on the diagnostis screen.
## 2022-11-25 - Fix unconfigured netconsole messages - BETA + STABLE
* Fix unconfigured netconsole messages https://github.com/raspberrypi/rpi-eeprom/issues/452
* Add display state to HDMI diagnostics screen
## 2022-11-04 - Fix secure boot issue - BETA + STABLE
* Fix an OOM issue that was causing secure boot to fail (but not from RPIBOOT)
## 2022-11-02 - Add option to use Customer OTP for MAC address - BETA
* Add a new EEPROM property that allows the Ethernet MAC address
programmed during manufacture to be overridden a value in the
Customer OTP register.
MAC_ADDRESS_OTP=A,B
where A and B are the customer row numbers (0..7)
## 2022-10-20 - Promote pieeprom-2022-10-18 BETA release to stable
## 2022-10-18 - Tryboot enhancements for A/B partition booting - BETA
* Add support for a [tryboot] conditional statement in config files.
* Load config.txt instead of tryboot.txt if tryboot_a_b=1 in autoboot.txt
* Fix failover to partition 1 if the `boot_partition` points to non-bootable partition.
* Enable `autoboot.txt` in secure-boot mode.
## 2022-10-12 - Fix USB boot regression - BETA
* Reduce size of USB transfer
## 2022-10-06 - Fix issue with screen display - BETA
* Fix issue with the bootloader display not being cleared properly
## 2022-10-03 - Add pieeprom-2022-10-03.bin - BETA
* Increase the size of USB in-transfers
* Increase TFTP_MAX_BLOCKSIZE to 1468
* stop NVMe cleanly
## 2022-09-02 - Add pieeprom-2022-09-02 - BETA + STABLE
* Parse target MAC address in NETCONSOLE property https://github.com/raspberrypi/rpi-eeprom/issues/440
## 2022-08-02 - Add pieeprom-2022-08-02 - BETA + STABLE
* Display the secure-boot configuration on the diagnostics screen
if secure-boot is enabled.
See https://www.raspberrypi.com/documentation/computers/configuration.html#bcm2711-bootloader-properties-chosenbootloader
* Toggle SD power at boot to reset card-state after ROM SD probe.
## 2022-07-26 - Add pieeprom-2022-07-26 - BETA + STABLE
* Fix FAT issue https://github.com/raspberrypi/rpi-eeprom/issues/438
## 2022-07-22 - Add pieeprom-2022-07-22 - BETA + STABLE
* NVMe fix large file reads - see https://github.com/raspberrypi/firmware/issues/1731
The firmware fix is also relevant for the bootloader when loading
large boot.img files.
## 2022-07-19 - Add pieeprom-2022-07-19 - STABLE
* Enable secure-boot on the 2022-07-14 beta release and promote to stable.
## 2022-07-14 - Add pieeprom-2022-07-14 - BETA
* Enable long-filenames & sub-directories for start_file & fixup_file.
Use Unix path separators with a maximum path of 255 characters.
Relative paths (. or ..) are not supported.
## 2022-05-20 - Add pieeprom-2022-05-20 - BETA
* Reduce boot-time when network install is disabled NET_INSTALL_ENABLED=0.
* Switch to the newer SDIO HC and increase SPI clock speed.
## 2022-04-27 - Promote pieeprom-2022-04-26 to the DEFAULT release
* Enable Network Install in the default bootloader release.
* This release is signed with the secure-boot key and supports
the new HTTP boot-order for downloading signed boot images for
automated provisioning systems.
## 2022-04-22 - Add pieeprom-2022-04-26 release - STABLE/BETA
* Release pieeprom-2022-04-22 signed with the secure-boot key so that
network install can be used on secure-boot devices.
## 2022-04-22 - Add pieeprom-2022-04-22 release - BETA
* Fix netboot reboot failure on Pi 4B R1.1 if OS enables IDDQ power saving
https://github.com/raspberrypi/rpi-eeprom/issues/417
* Fix incorrect error code (configuration error) on EEPROM update failure.
* Enable more verbose errors for EEPROM update failures.
## 2022-03-10 - Promote the 2022-03-10 beta release to LATEST/STABLE
* Includes new net install feature, enabled by default for Pi 4 and Pi 400
* New net install download screen may appear on boot if a boot location can't
be found or if boot is slow. Alternative press and hold shift on boot to
start net install.
* New HTTP boot order.
* Bootloader diagnosis screen is now 720p if supported by your monitor.
* Self update mode is now enabled during SD/EMMC boot.
* The PARTITION number can now be specified as an EEPROM property.
* Allow smaller MSD discovery timeouts to be specified.
* Some tweaks and fixes to IPV6 netboot.
* Increase the max ramdisk size to 128MB
* Increase timeout of early SD/EMMC commands to 100ms
## 2022-03-10 - HTTP_PATH fix - BETA
* Fix the defective HTTP_PATH eeprom configuration
## 2022-02-28 - More net Install changes - BETA
Net install changes.
* Net install is initiated on boot if shift is pressed.
* New HTTP boot order (7) and configuration parameters,
HTTP_HOST, HTTP_PATH, HTTP_PORT to set url
Other interesting changes.
* Increase the max ramdisk size to 128MB
* Increase timeout of early SD/EMMC commands to 100ms
## 2022-02-16 - Net Install fixes - BETA
Net install changes.
* Got rid of confirmation step that required you to press <Space> to
initiate net install. Now just long press <Shift>
* Updated the screen text to make it more obvious the device is still
trying boot when the net install is showing.
* Fixed a DHCP net install bug which caused us to lose the
gateway address.
* Fixed a bug with the uIP timers which could cause net install to
always fail.
* Implemented resume and retry on download failure.
Other interesting changes.
* Allow smaller MSD discovery timeouts to be specified.
* Some tweaks and fixes to IPV6 netboot.
## 2022-02-08 - Fix secure-boot boot failure - STABLE
* Fix boot failure regression on boards which had the OTP secure boot bits set.
## 2022-02-04 - Network Install - BETA
* New network install feature for the bootloader. To disable network install
(e.g. in an industrial product) set NET_INSTALL_ENABLED=0 in the EEPROM
config or HDMI_DISABLE=1.
* Self update mode is now enabled during SD/EMMC boot. This enables
rpi-eeprom-update to be used on a CM4 / CM4-lite because recovery.bin
is not required. For industrial products we recommend disabling
self-update after initial setup by setting ENABLE_SELF_UPDATE=0 in
the EEPROM config.
* The PARTITION number can now be specified as an EEPROM property. This
might be used to boot maintenance software if a button connected to
a GPIO is pressed. The partition number specified via the reboot
command or autoboot.txt are a higher precedence than the EEPROM
property.
## 2022-01-25 - Promote pieeprom-2022-01-25 to the DEFAULT release
Interesting changes since the last default release
* Support and bug fixes for all Compute Module variants.
* NVMe interoperability fixes
* FAT/GPT fixes and file-system performance improvements.
* Add secure-boot support for industrial applications
See https://github.com/raspberrypi/usbboot/blob/master/secure-boot-recovery/README.md
* Added ramdisk / boot.img - for RPIBOOT and secure-boot.
## 2022-01-25 - Create new release from 2022-01-20 - LATEST/STABLE
* Rebuild 2022-01-20 for new stable release
## 2022-01-20 - Some NVMe boot fixes - BETA
* PCIe retry on error
* NVMe logging changes
* NVMe attempts to boot twice
* Increase the maximum GPU memory size from 256MB to 512MB so long as
boot_ramdisk=0. This should only be used with the legacy camera
application and FKMS for very memory intensive camera operations.
N.B. The new libcamera and KMS driver use CMA instead of GPU memory.
## 2021-12-02 - Promote the 2021-12-02 beta release to LATEST/STABLE
* Just fixes a regression with MTB detection affecting factory testing
## 2021-12-02 - Fix MTB detection for factory test - BETA
* Just fixes a regression with MTB detection affecting factory testing
## 2021-12-09 - Update default recovery.bin
* Promote the recovery.bin from stable to default. This avoids an issue
where recovery.bin fails to load on large FAT32 boot partions with 32K
clusters.
## 2021-11-29 - Promote the 2021-11-22 beta release to LATEST/STABLE
Interesting changes since the last stable release:-
* NVMe / PCIe reset fixes
* GPT / FAT enhancements
* FAT performance improvements
* Secure-boot for industrial customers (see usbboot repo)
## 2021-11-22 - Fix for Sabrent rocket Nano NVMe reboot issue - BETA
* Fixes issue with Sabrent rocket Nano NVMe disk after a reboot.
Run pcie initialisation again if there's an error.
## 2021-10-27 - Secure boot improvements - BETA
* Improve the error logging if a file is too large and truncated.
* Increase the maximum size of the ramdisk to 96MB.
* Preliminary changes to expose the boot-mode used to load the ramdisk via device-tree.
N.B. Secure boot is only recommended for industrial customers and is currently
a beta release. This can only be enabled via RPIBOOT
https://github.com/raspberrypi/usbboot/blob/master/Readme.md
## 2021-10-05 - Update for latest Broadcom SDRAM settings - BETA
* Minor update for latest SDRAM tuning settings.
## 2021-10-04 - Add support for GPT FAT16 and increase USB timeouts - BETA
* Update the FAT detection to support FAT16 for EFI/ESD paritions with
GPT instead of assuming FAT32. The latest firmware is also required
for a similar update.
* Increase the timeouts for MSD SCSI commands to reduce the risk of
timeouts when probing the capacity of slow to start devices
e.g. USB RAID with spinning disks.
## 2021-09-27 - Fix recovery.bin rename issue and EEPROM netconsole - BETA
* Fix recovery.bin rename issue
* Update pieeprom-2021-09-27.bin to fix netconsole
## 2021-09-23 - Temporarily revert recovery.bin 2021-09-22 BETA/STABLE
* Revert until fix for can be verified https://github.com/raspberrypi/rpi-eeprom/issues/367
## 2021-09-23 - Bootloader file-system updates - BETA
This release makes major changes to the bootloader file-system code in order
to support new features and should be treated as a bleeding edge BETA release!
* Improve file-system performance to reduce boot time.
* Preliminary support for IPV6 TFTP. Requires an updated start4.elf.
Details to follow.
* Fix VL805=1 option for CM4 IO boards that follow the same XHCI
design as Pi4B. Start.elf will be updated in the next rpi-update release
and the latest CM4 DTBs are required for the 'XHCI reset controller'
* Preliminary support for loading signed boot image files.
Requires updated GPU firmware.
## 2021-09-22 - Update recovery.bin to fix issue with large FAT partitions - STABLE
* Bump the latest recovery.bin under beta to stable.
## 2021-09-22 - Update recovery.bin to fix issue with large FAT partitions - BETA
* Fix an issue where the ROM fails to load larger recovery.bin files
on FAT partitions with large cluster sizes.
## 2021-07-07 - Promote pieeprom-2021-07-06 to stable - STABLE
* Promote the latest beta to stable. For CM4 users this adds NVMe
boot support to the stable release.
## 2021-07-06 - Tidyup PXE debug strings - BETA
* Remove redundant debug string - hexdump is more useful for debug.
* Minor internal changes for manufacturing test.
## 2021-06-25 - Support 256MB gpu_mem with boot ramdisk - BETA
* Tweak the address map so that boot ramdisks (e.g. rpiboot -d imager)
work with large amounts of GPU memory.
## 2021-06-17 - Avoid unnecessary PCIe probe on CM4 - BETA
* Avoid default PCIe / XHCI probe on CM4 unless required for the current boot
mode (USB_MSD or NVME).
* Leave PCIe RC in reset state when loading start.elf except for USB-MSD mode.
## 2021-06-11 - Add USB_MSD_STARTUP_DELAY option - BETA
* Minor update to BRCM SDRAM settings.
* Add USB_MSD_STARTUP_DELAY option (default 0 option). This adds a configurable
delay (in milliseconds) the first time the USB host controller is initialised
before device enumeration.
Normally, this should not be required. However, some HDD enclosures may
require an extended startup delay in order to spinup drives. Without this
the get-capacity command may stall and timeout.
## 2021-05-19 - Use the latest BRCM SDRAM settings - BETA
* Use the latest BRCM SDRAM settings.
* FAT12 support for small bootloader ramdisk images.
* Minor file-system performance optimisations.
* Added recovery.bin config.txt option (erase_eeprom=1) to perform an
SPI chip-erase operation instead of programming the bootloader image.
## 2021-04-30 - Update default version to 2021-04-29
* The manufacturing release has been updated to pieeprom-2021-04-29 so update the default release to match this.
## 2021-04-29 - Pi400 - Reduce MII clock freq when probing ethernet PHY - STABLE
* Pi400 - Reduce MII clock freq when probing ethernet PHY - STABLE
## 2021-04-19 - Promote 2021-03-18 from LATEST to DEFAULT - DEFAULT
* Display VC_BUILD_ID strings instead of the SHA256 hash
* Add support for [cm4] and [pi400] config conditionals filters.
* Change network boot to use the same "RXID" Ethernet PHY configuration as the 5.10 kernel
* TFTP - reply to duplicate ACKS
* Skip rendering of HDMI diagnostics display for the first 8 seconds unless an error occurs.
* UDP checksum fixes
* Add support for the BCM2711 XHCI controller - BOOT_ORDER 0x5
* XHCI protocol layer fixes for non-VLI controllers
* Avoid USB MSD timeout if there is only one device
* Implement tryboot for OS upgrade fallback
* Check the update-timestamp before applying an update in SELF-UPDATE mode
## 2021-04-13 - Fix error pattern for HDMI and SDRAM failures - BETA/STABLE
* Fix recovery.bin error handler so that the LED error pattern is still
displayed even if HDMI or SDRAM fail.
## 2021-03-18 - Fix occasional reboot fail on Pi4B pre 1.4 - STABLE
* Fix GPIO expander reset issue on some Pi4B 1.1 to 1.3 boards
## 2021-03-17 - Fix issue with PCIe bridges in Linux - BETA
* NVMe BETA boot support broke PCIe bridges in Linux. This should fix the problem
## 2021-03-04 - NVMe boot support - BETA
* Adds support for NVMe to the bootloader with a new NVMe boot mode "6"
NVMe currently only works for controller 0 on namespace 1 with a page size of 4096 bytes
and block size of 512 bytes
* The default boot order has been updated to F641 for cm4 ONLY, so NVMe boot is
attempted after SD and USB
To use the new NVMe add "6" to the BOOT_ORDER.
This requires the latest rpi-update firmware to work or else you will see a compatibility
error on boot. You also need the latest kernel from rpi-update to load rootfs from NVMe
see https://github.com/Hexxeh/rpi-firmware/commit/48570ba954a318feee348d4e642ebd2b58d9dd97
and https://github.com/Hexxeh/rpi-firmware/commit/e150906874ff8b9fb6271971fa4238997369f790
## 2021-02-22 - Promote 2021-02-16 to stable - STABLE (LATEST)
* Freezing for default/critical update.
## 2021-02-16 - Change VC version info & TFTP fix - BETA
* Display the VC_BUILD strings instead of the sha256 of the .elf file so that
the information is the same as "vcgencmd version"
* Change TFTP to ACK data blocks which it has already ACK'd instead of ignoring them.
* Change network boot to use the same "RXID" configuration as the 5.10 kernel.
## 2021-01-16 - Fix 1V8 SD voltage reset for Pi 4B R1.1 - LATEST + BETA
* Fix regression for GPIO expander reset change which caused PMIC reset
to get card out of 1V8 mode to be missed.
## 2021-01-14 - Promote pieeprom-2021-01-11 to STABLE (LATEST)
## 2021-01-11 - Timeout stalled USB MSD devices - BETA
* Timeout USB MSD commands and move to the next boot mode if a device stops responding.
* Reset the GPIO expander at power on.
* Use the bootloader build timestamp instead of zero for the update-timestamp
if it is not defined in the .sig file.
## 2021-01-05 - USB MSD interop improvements for Pi 4B < R1.4 - BETA
* Revert the USB port power delay on R1.1 boards to be more like the Sep 2020
production release. Verified with Geekworm X835, Orico NVME M.2 USB adapter
and Microsoft Wireless keyboard.
* Increase the HDMI delay to 8 seconds.
## 2020-12-14 - Promote pieeprom-2020-12-11.bin to stable - STABLE
* Feature freeze to support stable release of BCM2711 XHCI boot, tryboot,
HDMI_DELAY, USB MSD improvements.
## 2020-12-11 - CM4/PI400 conditional filters - BETA
* Add support for [cm4] and [pi400] config conditionals filters.
* Tidyup RPIBOOT USB descriptors.
* Add a gap before displaying LED error pattern and change the default state
to off after displaying the first error pattern.
* Generate 0xffff instead of 0x0 if the checksum of the UDP packet to be
transmitted is 0x0.
* Rename USB-DEV to RPIBOOT in boot-mode strings. Bootmode was renamed to
avoid confusion with USB MSD boot.
## 2020-11-24 BCM2711 xHC boot support - BETA
* Add support for booting from the BCM2711 XHCI controller which is the
USB-C socket on Pi 4B / Pi 400 and the type A sockets on Compute Module 4
IO board. The controller only supports USB 2.0 and the primary usage is
for USB-MSD support on CM 4 boards without requiring a PCIe XHCI controller.
To use this add '5' to the BOOT_ORDER in the EEPROM config for BCM_USB_MSD boot.
This requires the latest rpi-update firmware.
If start.elf is loaded via the BCM2711 XHCI (BOOT_ORDER 5) then the config.txt
otg_mode setting will be set to 1 so that the OS can continue booting
using the BCM2711 XHCI. This means that the device/gadget mode is not available
when booted in this mode and there is no support for switching back to
the DWC2 controller from the BCM2711 XHCI controller.
* Update halt behavior on Pi 400 to re-enable 'power on' button if the OS
did a reset rather than using the standard mailbox shutdown commands. This
overrides WAKE_ON_GPIO / POWER_OFF_ON_HALT settings on Pi 400 because
it has a dedicated power button.
If a button on GPIO3 really is requried then it can be re-enabled by setting
WAKE_ON_GPIO=2 but that will consume more power.
* Fix short blink before one-shot error pattern - #251
* Validate SDRAM in recovery mode.
* XHCI protocol layer fixes for non-VLI controllers.
* Updated 'tryboot' for new version which also supports Pi3 and earlier.
## 2020-10-28 Defer HDMI diagnostics display, update-timestamps, tryboot support - BETA
* Skip rendering of the diagnostics screen for HDMI_DELAY seconds (default 5).
This means that for SD-card and USB MSD flash boot devices the diagnostics
screen will not be visible.
* On Pi 4B 1.4 (8GB) initialise SDRAM whilst waiting for the USB port power
off time. This makes booting slightly faster.
* Remove HDMI console messages where the information is duplicated elsewhere
on the display.
* Improve compatibility with external USB 3.0 disk enclosures by enumerating
the downstream hubs before executing the USB port power off.
N.B. Pi4 8GB automatically powers off the USB ports during chip-reset and
does not need this change.
* Don't timeout a USB MSD device after USB_MSD_LUN_TIMEOUT if there are no other
MSD devices or LUNs to try. This avoids unnecessary timeouts on very slow
to initialise disk drives e.g. USB HDDs designed for backups.
* Fix failover to partition zero if the partition number is invalid. For USB
MSD boot a start.elf update is also required.
* SD-Card - Change default retries from 0 to 1 to improve reliability with
some old SD v1 cards.
* Fix issue where boot would stop if partition type 0x83 was encountered
before the first FAT partition.
* SELF_UPDATE mode (Network, USB MSD boot) now reads the timestamp information
in pieeprom.sig created by rpi-eeprom-update to see if the updated is
newer than the current 'update-timestamp'. If not, the update is skipped
to avoid stale updates on network or USB disks being installed by accident.
recovery.bin updates (from the SD card) do not check the timestamp because
recovery.bin renames itself once the update is completed. However, it still
writes the update-timestamp to the EEPROM.
The update-timestamp is the timestamp when the update is created is
independent of the build-timestamp for the bootloader executable. See
rpi-eeprom-update -h
* Add support for the 'tryboot' feature that enables operating systems to
implement a fallback mechanism if an OS upgrade fails. This works with all
bootable media types but requires updated firmware and OS software.
This feature should be viewed as EXPERIMENTAL and may change depending upon
feedback from other OS/distro maintainers.
https://github.com/raspberrypi/linux/commit/757666748ebf69dc161a262faa3717a14d68e5aa
## 2020-10-02 Include CM4 manufacturing bootloader image.
* Include the release image for reference. This contains some minor changes
to support manufacture test.
## 2020-09-14 Promote the 2020-09-03 release to be the default EEPROM images.
* Promote the 2020-09-03 bootloader EEPROM and VLI 0138A1 as the default
release (critical folder).
Interesting changes since 2020-04-16:-
* Add support for booting from USB mass storage devices.
* Add support for bootloader updates for USB MSD or network boot (self-update)
* Improve compatibility for USB devices which require the USB port power
to be switched off for a period of time during a reboot.
* Add support GPT and Hybrid MBR partition tables.
* Add support for EEPROM write-protect.
* Add the ability to loop between different boot-modes until a bootable
image is found. The default is to loop between SD and USB-MSD.
* VLI 0138A1 - Improve full-speed isochronous endpoint support.
## 2020-09-07 Promote 2020-09-03 to release to STABLE
## 2020-09-03 Only use green LED for error status in bootloader - BETA
* Turn the green LED on and leave it on unless an error code occurs.
Previously, SD activity was displayed but that plus muxing with the
SPI CS made the LED activity confusing.
The HDMI diagnostics screen now provides much better information
for determining if the bootloader is running or frozen.
* CM4 enable GPIO for SD power.
* Filename should be 2020-09-03
## 2020-08-31 Disable self-update from SD card - BETA
* Since the ROM will load recovery.bin from the SD card self-update is not
required. Although it functions correctly there is a small risk stale
pieeprom.upd files would be installed automatically e.g. if the
rpi-eeprom-update service has been disabled.
## 2020-08-10 Promote 2020-07-31 release to STABLE
* The USB port power management change from the last BETA improves
compatibility for devices which during reset with no regressions reported.
Make this the latest stable release.
## 2020-07-31 Standardize USB port power control across board revisions - BETA
* Turn off USB port power for 1-second regardless of boot-mode. This appears
to resolve an issue on R1.3 and older board revisions where some USB
devices would fail upon reboot. On R1.4 USB port power is turned off
automatically by the PMIC so this is just held in reset for longer. For
earlier board revisions the USB port power is explicitly turned off via
XHCI.
This can be overridden via USB_MSD_PWR_OFF_TIME in the EEPROM config.
* Update to the latest Broadcom memsys FW - no significant functional change.
## 2020-07-20 Promote 2020-07-16 bootloader and VL805 0138A1 FW to stable - STABLE
* Promote the latest beta to stable as the next production firmware release
candidate.
The main difference between this and the previous stable version is
the VL805 FW update.
## 2020-07-16 Update VL805 FW to 0138A1 and add optional EEPROM write-protect - BETA
* Patch previous 2020-07-16 from c44ee87f -> 45291ce6 to fix a CM4 specific
issue which does not impact Model B
* Update the VL805 embedded / standalone FW version to 0138A1
* User settings of the ASPM bits in the PCI configuration space
link control register are now maintained
* Better full-speed Isochronous endpoint support
* Add eeprom_write_protect config.txt variable which if set configures
the non-volatile status register bits to define the write protect
regions.
* If 1 then configure the write protect regions for both the
bootloader and VLI EEPROMs to cover the entire EEPROM.
* If zero then clear all write protect bits.
* If missing or -1 then don't change the current state.
* The write protect is only effective if the /WP pin is pulled low
e.g. by shorting TP5 to ground.
* WARNING: Previous versions of the bootloader, recovery.bin and vl805
tool do NOT clear the non-volatile status bits for the VL805 SPI EEPROM.
Consequently, installing an older version will fail/hang if the write
protect bits have not been cleared first (eeprom_write_protect=0)
* Update the vl805 user-space tool to clear the WP bits.
* Add recovery_wait config.txt option which if set to 1 forces the EEPROM
rescue image and flashes the activity LED forever. This is intended for
use with an SD card image which just contains recovery.bin + config.txt
and is used to set/clear WP on multiple boards.
* The write protect functionality works with self-update mode, however,
the bootloader must have already been updated to the version supporting
write protect first i.e. at least two reboots are required.
* Update the HDMI diagnostics screen to display 'RO' after the EEPROM version
if the write status register for the bootloader SPI EEPROM has write protect
bits defined. This does NOT attempt to verify if /WP is low.
## 2020-07-06 Tweak USB port power and clear ACT LED after SPI - BETA
* Increase port power off limit to 5 seconds.
* Increase the port power off default to 1 second. This seems to cover most
commonly seen USB MSD devices which require the USB port power to be disabled
after the USB HC chip is reset.
* Reset activity LED after SPI access to reduce the number of spurious LED flashes.
* Add SPI error diagnostic error code (3 long 1 short) if SPI commands timeout.
(So far this failure has not been observed on failed boards)
## 2020-06-17 Promote 2020-06-15 to STABLE
* Promote the latest beta EEPROM and recovery.bin to stable and
feature freeze USB MSD support until a production release is ready.
## 2020-06-15 Increase default USB port power delay - BETA
* Increase the default power off delay to 500ms following more
interop testing.
* Make the USB port power off time configurable via the USB_MSD_PWR_OFF_TIME
config. The range may be set between 250 and 1000ms. Zero means no port
power off.
* Fix some issues in XHCI endpoint configuration where the code was wrong
but does not fail with the current VL805 FW.
## 2020-06-12 Improve support for powered USB SATA devices - BETA
* Reset Ethernet MAC + PHY if final boot mode is not network boot
See: Kernel warning and network failure when attempting to use the network after bootloader times out. #144
* Improve handling of multiple bootable USB devices and remove USB_MSD_BOOT_MAX_RETRIES
* Resolve: No DHCPACK with DHCP relay agent #58
* Toggle USB root hub port power for 200ms on the first USB MSD boot attempt
See: Bootloader can't boot via USB-HDD after system reboot #151
* Update bootloader handover to support uart_2ndstage - requires
a newer start.elf firmware which will be via rpi-update.
* Assert PCIe fundamental reset if the final bootmode was not USB-MSD because
the OS might not do this before starting XHCI.
## 2020-06-03 Bootmode tweaks and fix issue with > 4TB drives - BETA
* Resolve: Unable to boot from USB MSD - Seagate 5Tb HDD backup drive #139
* Increase USB MSD timeout from 10 to 20 seconds.
* Max retries now default to zero because the default BOOT_ORDER includes
restart (0xf). Therefore, each boot-mode is now tried once before moving
to the next mode. The retries mechanism is largely redundant now that
the loop/restart mode exists.
* If TFTP fails and network boot retries > 0 then wait 5 seconds before
retrying to avoid overloading a misconfigured TFTP server.
* Map undefined boot-modes in BOOT_ORDER to SD (0x1) instead of stopping.
* Add missing pieeprom-2020-05-28
## 2020-05-28 Secondary fix for VL805 readback issue - BETA
* Re-upload 2020-05-28 after Git issue
* rpi-eeprom-update for new board revisions
## 2020-05-27 Fix DPI issue - BETA
* Resolve: DPI failure after HDMI diagnostics screen in beta bootloader #133
* Resolve: VL805 readback failure in the bootloader #134
## 2020-05-26 USB MSD updates - BETA
* Resolve: USB boot fails if the GPT contains no basic data or EFI partitions #130
* Resolve: Fix default BOOT_ORDER in mass storage beta #129
* Resolve: Add support for booting from a "superfloppy" disk #120
* Resolve: USB MSD timeout message - incorrect units #131
* Resolve: Recognize efi partition (0xef) as a valid boot #126
* The HDMI diagnostics screen now displays the most significant bytes
of the SHA-256 of the config.txt file.
## 2020-05-26 rpi-eeprom-update
* Mark USE_FLASHROM as deprecated.
* Resolve: Unnecessary check for '*.elf' in BOOTFS #92
* Update help for FIRMWARE_RELEASE_STATUS.
## 2020-05-15 Add pieeprom-2020-05-15 beta with USB boot
* USB mass storage boot will NOT work without the updated firmware
start.elf binaries. These will probably be released via rpi-update
in a few days’ time.
This release simply helps to validate if there are regressions in
the current SD and Network boot modes.
* SELF_UPDATE and bootloader_update are now enabled by default.
## 2020-05-11 Garbage collect old binaries
* Now that 2020-04-16 is has been released as the default production
release move the old binaries to an old (deprecated) directory.
These can be removed for the APT package to reduce disk space.
## Promote 2020-04-16 EEPROM release critical
* Make this the default release for all users. This supports network
boot, configurable boot order and HDMI diagnostics screen.
## 2020-04-16 Promote to stable
* The PLL analog changes in the beta release never made it to stable.
Skip straight 2020-04-16 to synchronize releases.
## 2020-04-16 Revert PLL analog changes
* This seems to cause problems on some firmware releases if enable_tvout
is set due to different behaviour in PLL management.
## 2020-04-12 Update beta+stable recovery.bin
* If the VL805 image was updated but the bootloader was not then
recovery.bin would incorrectly switch to infinite flashing activity
LED pattern used in the rescue image to prevent infinite reboots.
Fix recovery.bin to reboot in this case. The current 'critical'
release does not have this problem.
* Fix uart_2ndstage logging in beta/stable recovery image.
* Change recovery.bin to reboot instead of displaying an error pattern
if there are no EEPROM images. The Raspberry Pi Image makes it very
difficult to create a broken rescue image but a stray recovery.bin
could stop Raspbian from booting.
* Fix detection of VL805 EEPROM in recovery.bin
N.B. These recovery.bin file used for critical updates and the rescue
image does not suffer from these bugs.
## 2020-04-09 Add 2020-04-09 beta firmware.
* Experimental tweaks for PLL analog setup to reduced jitter and
improve PCIe reliability on slower silicon.
## 2020-04-07 Promote 2020-03-19 beta firmware to stable.
* No major bugs reported. Promote this to stable as a step
towards getting HDMI diagnostics into the default firmware
via a critical update.
## 2020-03-19 Add 2020-03-19 beta firmware
* Minor mods for manufacture test.
## 2020-03-16 Add 2020-03-16 beta firmware
* Fix DHCP Option97 GUID generation. The MAC LSB portion was previously
always zero.
## 2020-03-11 Add 2020-03-04 beta firmware recovery
* Support static IP address configuration. The following fields may be
set manually using dotted decimal address. If set, then DHCP if skipped.
* CLIENT_IP
* SUBNET
* GATEWAY
* TFTP_IP
* If a fatal bootloader error occurs then an HDMI diagnostics screen is
displayed at VGA/DVI resolution on both outputs for two minutes.
This may be disabled by setting DISABLE_HDMI=1 in the EEPROM
configuration OR setting display_splash=1 in config.txt.
* Allow the PXE menu option to match a custom string specified by
PXE_OPTION43. The default is still "Raspberry Pi Boot"
* DHCP_OPTION97 - The default GUID has now changed to
RPI4+BOARD_ID+ETH_MAC_LSB+SERIAL in order to make it easier to
automatically identify Raspberry Pi computers. The old behaviour
is enabled by setting DHCP_OPTION97=0 which simply repeats the serial
number 4 times.
* SELF_UPDATE. If SELF_UPDATE is set to 1 in the EEPROM configuration AND
config.txt contains bootloader_update=1 then the bootloader will be looking
for pieeprom.upd and vl805.bin and apply these firmware files if
they are different to the current image, before doing a watchdog reset.
This should make it easier to update the bootloader for network
booted setups because an SD card is not required for recovery.bin.
As usual, TFTP should only be used on private networks because the
protocol is not secure against spoofing.
* recovery.bin. The beta recovery.bin will now display a green screen
via HDMI if successful or red if a failure occurs.
## 2020-02-27 rpi-eeprom-update & firmware
* Remove the dependency check for the vl805 utility. This is deprecated
and there is no 64-bit version. The file is still available in Github
for anyone who wants to continue using USE_FLASHROM or create their
own scripts.
* Add a stable firmware directory based on the latest beta release.
Stable should be interpreted as feature-freeze releases. In this
case the core network boot is stable enough for most scenarios
and this de-risks adding new more experimental features in the
beta folder.
## 2020-01-22 - vl805 00137ad
* Set the default/critical vl805 version to be 00137ad. This has the
same power savings as 0137ab but with fixes for USB webcams.
## 2020-01-17 - Git 5e86aac5f (BETA) RC4
* Handle DHCP option 0 - padding
* Fix SD card voltage detection
## 2020-01-14 - rpi-eeprom-config
* Fix padding calculation
## 2020-01-09 - Git df0ff18c (BETA) RC3
* Fix parsing of multiple menu entries in PXE options.
* Fix regression in IP address parsing
## 2019-12-03 - Git f0d7269d4 (BETA) RC2
* Fix handling of multiple menu options with TFTP Option43
* Ignore unsupported modes in BOOT_ORDER instead of stopping.
## 2019-11-18 - Git b6a7593d6 (BETA) RC1
First release candidate before this beta is moved to a stable release series.
* Avoid resetting TFTP prefix after retries or if start4.elf is not found.
* Add MAC_ADDRESS option which allows the OTP Ethernet MAC address to be
overridden. A VideoCore firmware update will propagate this forced
mac address to device-tree/cmdline in the near future.
* Various internal refactorings to prepare for USB MSD storage boot in
the next beta-series.
* Enable high-speed mode for EMMC cards.
## 2019-10-17 - rpi-eeprom-update + recovery.bin
* New beta recovery.bin which can update the VLI EEPROM before
start.elf is loaded. This is the recommended and default method
because no USB devices will be in use at this stage.
* Extend the USE_FLASHROM configuration to use the vl805 tool
to program the VL805 directly.
* Generate SHA256 checksums in .sig files for the bootloader and
and VL805 images. This is required by the new recovery.bin to
guard against corrupted files being flashed to the EEPROM(s).
* Various variable renames to distinguish between the bootloader
and the VL805 images.
## 2019-10-16 - Git 18472066 (BETA)
* Ignore trailing characters when parsing in PXE boot menu option.
* Improve error handling with unformatted sd-cards.
## 2019-10-08 - Git 26dd3686c (BETA)
* TFTP now uses RFC2348 blksize option to get 1024 byte blocks if the server supports it.
* Fix DHCP handling of SI_ADDR
* TFTP_PREFIX and TFTP_PREFIX_STR options for mac-address or string literal prefix.
* Improved support for standard capacity and SDv1 cards.
## 2019-09-25 - Git 4d9824321 (BETA)
* Increase TFTP timeout to 30s as default & bootconf.txt
* Fix intermittent boot freeze/slowdown issue after loading start.elf
* Don't load start.elf during network boot if start4.elf exists but the download times out.
## 2019-09-23 - Git c67e8bb3 (BETA)
* Add support for network boot
* Configurable ordering for boot modes (BOOT_ORDER and SD/NET_BOOT retries)
## 2019-09-10 - Git f626c772
* Configure ethernet RGMII pins at power on. This is a minor change which
which may improve reliability of ethernet for some users.
## 2019-09-05 - Git d8189ed4 - (BETA)
* Update SDRAM setup to reduce power consumption.
## 2019-07-15 - Git 514670a2
* Turn green LED activity off on halt.
* Pad embedded config file with spaces for easier editing by end users.
* Halt now behaves the same as earlier Pi models to improve power behavior at halt for HATs.
* WAKE_ON_GPIO now defaults to 1 in the EEPROM config file.
* POWER_OFF_ON_HALT setting added defaulting to zero. Set this to 1 to restore the behavior where 'sudo halt' powers off all PMIC output.
* If WAKE_ON_GPIO=1 then POWER_OFF_ON_HALT is ignored.
* Load start4db.elf / fixup4db.dat in preference to start_db.elf / fixup_db.dat on Pi4.
* Embed BUILD_TIMESTAMP in the EEPROM image to assist version checking.
## 2019-05-10 - Git d2402c53 (RC2.1)
* First production version.