Abstract: Systems and methods for booting a machine are provided. In some aspect, a system includes a boot manager configured to manage the initialization of at least one hardware component of the machine based on an execution path. The system also includes a file system including open-source modules and proprietary modules. The boot manager is further configured to select a first one of the open-source modules or a first one of the proprietary modules to be executed based on the execution path. The boot manager is further configured to make a second selection of a second one of the open-source modules or a second one of the proprietary modules to be executed based on the execution path. The execution path includes execution of at least one open-source module and at least one proprietary module.

Abstract: A computer-implemented method for updating firmware in a computer is disclosed according to an aspect of the subject technology. The method comprises writing new firmware to a non-volatile memory of the computer and setting a boot count to a non-zero value. The method also comprises a) decrementing the boot count and b) attempting to boot the computer using the new firmware in the non-volatile memory. The method further comprises, if the computer fails to boot using the new firmware and the boot count is greater than zero, then repeating steps a) and b).

Abstract: Systems, methods, and machine-readable media for indicating that a system has booted an untrusted image are provided. The system may be configured to receive instructions to boot up an image and determine whether the image to be booted up is untrusted. If the image is untrusted, the system may set an indicator to indicate that the system has booted from an untrusted image and booting the image.