How to Contact or Get Involved with the coreboot Project

Updated

coreboot is an open source firmware platform, and the project offers several public channels for contact, participation, and support. If you want to ask a general question, the mailing list at [email protected] is the stated route. If you need to report a security issue privately, use [email protected] instead of a public channel. The project also lists social and code-hosting links (Mastodon, LinkedIn, GitHub, YouTube, Twitch, Reddit) and accepts donations through PayPal, by check, or by wire transfer.

Contact channels at a glance

Purpose Channel
General inquiries [email protected] (mailing list)
Private security reports [email protected]
Social / community updates Mastodon, LinkedIn, Reddit
Code and development GitHub
Video / streams YouTube, Twitch
Donations PayPal, check, or wire transfer

The project describes itself as a member of the Software Freedom Conservancy, and its donation options are listed on the site.

Who each channel is for

The site organizes its audience into three groups: end users, developers, and OEMs/ODMs. That framing is useful when deciding where to start:

  • End users — if you have a question about running coreboot on supported hardware, the general mailing list is the stated contact point.
  • Developers — if you want to contribute code or discuss development, the GitHub presence and mailing list are the relevant entry points.
  • OEMs/ODMs — if you are evaluating coreboot for a product, the site presents a dedicated path for this audience, with general inquiries going to the mailing list.

How to report a security issue

Security reports are handled separately from general discussion. The site explicitly asks that security issues be reported privately by emailing [email protected], rather than posting them to the public mailing list or social channels. Use this address when the issue could expose users before a fix is available.

How to support the project financially

Donations are accepted through three methods named on the site:

  1. PayPal
  2. Check
  3. Wire transfer

coreboot is a member of the Software Freedom Conservancy, which is relevant if you need to confirm the project's organizational home before donating or coordinating with an employer.

Practical notes

  • The mailing list address is also the general inquiries address, so a single message to [email protected] covers most non-security questions.
  • The site does not publish response-time guarantees or support-level commitments, so treat these as community channels rather than a commercial support desk.
  • Social links are best for following announcements; for anything that needs a record or a decision, email is the stated route.