LoongFire Blog LoongFire 博客
Technical write-ups, porting notes, and field reports from the LoongFire team.
来自 LoongFire 团队的技术文章、移植笔记与实战报告。
-
LoongFire v2.29 (core205) Release Notes LoongFire v2.29（core205）发布说明
A milestone release: official LoongArch64 support, GCC 16.1.0 / glibc 2.44 / binutils 2.47.0, kernel 7.3.1, dracut 112, the Loongson 3A6000 EFI filename fix, an XDP-based CVE-2026-98432 mitigation, and a large rootfile unification across architectures.
里程碑版本：正式支持 LoongArch64，GCC 16.1.0 / glibc 2.44 / binutils 2.47.0，内核 7.3.1，dracut 112，龙芯 3A6000 的 EFI 文件名修复，基于 XDP 的 CVE-2026-98432 缓解，以及跨架构的大规模 rootfile 统一。
-
LoongFire Upgrade Policy: Backup, Fresh Install, Restore LoongFire 升级策略：备份、全新安装、恢复
LoongFire does not support in-place upgrades. The supported path is backup → fresh install → restore. This post explains the resource constraints behind that decision, the recommended procedure, an optional staged rollout with a spare device, and an honest accounting of the trade-offs.
LoongFire 不支持原地升级，支持路径是备份 → 全新安装 → 恢复。本文说明这一决策背后的资源约束、推荐流程、可选的备用设备分阶段实施方案，以及对这些取舍的诚实梳理。
-
A Letter Case Mystery: IPFire Boot Failure on Loongson 3A6000 一个字母的大小写：IPFire 在龙芯 3A6000 上的启动谜案
An IPFire ISO written to USB with dd refused to boot on a Loongson 3A6000 — the machine sat on the boot menu as if the stick didn't exist. The cause turned out to be a single letter's case: Loongson firmware reads ISO 9660 case-sensitively and only accepts the all-uppercase EFI/BOOT/BOOTLOONGARCH64.EFI.
用 dd 写入 U 盘的 IPFire ISO 在龙芯 3A6000 上无法启动——机器停留在启动菜单，仿佛 U 盘根本不存在。根源竟然是一个字母的大小写：龙芯固件按大小写敏感方式读取 ISO 9660，只接受全大写的 EFI/BOOT/BOOTLOONGARCH64.EFI。
-
LoongFire XDP SYNPROXY: An Efficient Stopgap for CVE-2026-98432 LoongFire XDP SYNPROXY：针对 CVE-2026-98432 的高效临时缓解方案
CVE-2026-98432 is a use-after-free in the kernel's IPv4 TCP handling. While the kernel patch is the real fix, LoongFire's XDP SYNPROXY can drop packets with IP options at ingress — before the vulnerable code path is ever reached — covering both local and forwarded traffic with a single check.
CVE-2026-98432 是内核 IPv4 TCP 处理中的释放后使用漏洞。内核补丁才是真正的修复，但 LoongFire 的 XDP SYNPROXY 可以在入口处丢弃带 IP 选项的报文——早于漏洞代码路径被触达——只需一处检查即可同时覆盖本机与转发流量。
-
"LoongArch Has Arrived Around Us" — IPFire Officially Supports LoongArch "龙架构已来到我们身边"——IPFire 正式支持龙架构
IPFire maintainer Michael Tremer has announced official LoongArch support — making LoongArch the 4th architecture IPFire supports, after x86, ARM, and RISC-V. This is an English translation of the original article by Loongson Technology, with a link back to the original Chinese post.
IPFire 维护者 Michael Tremer 已宣布正式支持龙架构——龙架构成为继 x86、ARM、RISC-V 之后 IPFire 支持的第 4 种架构。本文为龙芯中科原文的英文译本，并附中文原文链接。
-
The Bug That Broke the Boot: How a glibc Update Silently Crippled dracut 一个让启动失败的 Bug：glibc 更新如何悄然瘫痪了 dracut
A single glibc 2.44 change to the
ftsimplementation silently broke dracut's module discovery, causing the LoongFire installer to fail to find its own USB medium. This is the story of bisecting 550 commits, discovering the bug was architecture-independent, and the near-miss for IPFire Core Update 205.glibc 2.44 对
fts实现的一次变更悄然破坏了 dracut 的模块发现，导致 LoongFire 安装程序找不到自己的 U 盘介质。这是一个关于二分查找 550 个提交、发现该 bug 与架构无关，以及 IPFire Core Update 205 惊险躲过一劫的故事。