heads/boards/librem13v2/librem13v2.config

# Configuration for a librem13v2
CONFIG_LINUX_CONFIG=config/linux-librem13v2.config
CONFIG_COREBOOT_CONFIG=config/coreboot-librem13v2.config

export CONFIG_COREBOOT=y
CONFIG_CRYPTSETUP=y
CONFIG_FLASHROM=y
CONFIG_FLASHTOOLS=y
CONFIG_GPG2=y
CONFIG_KEXEC=y
CONFIG_UTIL_LINUX=y
CONFIG_LVM2=y
CONFIG_MBEDTLS=y
CONFIG_PCIUTILS=y
CONFIG_POPT=y
CONFIG_QRENCODE=y
CONFIG_TPMTOTP=y

#CONFIG_SLANG=y
#CONFIG_NEWT=y
CONFIG_CAIRO=y
CONFIG_FBWHIPTAIL=y
CONFIG_LIBREMKEY=y

CONFIG_LINUX_USB=y

export CONFIG_TPM=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on"
export CONFIG_BOOT_KERNEL_REMOVE=""
export CONFIG_BOOT_DEV="/dev/nvme0n1p1"
export CONFIG_BOOT_GUI_MENU_NAME="Purism Librem 13v2 Heads Boot Menu"
export CONFIG_WARNING_BG_COLOR="--background-gradient 0 0 0 150 125 0"
export CONFIG_ERROR_BG_COLOR="--background-gradient 0 0 0 150 0 0"
export CONFIG_FLASHROM_OPTIONS="-p internal"
Add board and Linux kernel config for Purism Librem 13v2 2018-02-14 19:44:18 +00:00			`# Configuration for a librem13v2`
			`CONFIG_LINUX_CONFIG=config/linux-librem13v2.config`
Merge branch 'librem13v2_blobs_config' of https://github.com/kakaroto/heads 2018-03-12 17:56:11 +00:00			`CONFIG_COREBOOT_CONFIG=config/coreboot-librem13v2.config`
Add board and Linux kernel config for Purism Librem 13v2 2018-02-14 19:44:18 +00:00
Read and measure CBFS files into initrd during init 2018-03-12 01:27:19 +00:00			`export CONFIG_COREBOOT=y`
Add board and Linux kernel config for Purism Librem 13v2 2018-02-14 19:44:18 +00:00			`CONFIG_CRYPTSETUP=y`
			`CONFIG_FLASHROM=y`
Add flashtool to all coreboot-based boards 2018-04-22 01:29:52 +00:00			`CONFIG_FLASHTOOLS=y`
Enabled GPG2 in the Librem board config 2019-01-04 07:21:44 +00:00			`CONFIG_GPG2=y`
Add board and Linux kernel config for Purism Librem 13v2 2018-02-14 19:44:18 +00:00			`CONFIG_KEXEC=y`
			`CONFIG_UTIL_LINUX=y`
			`CONFIG_LVM2=y`
			`CONFIG_MBEDTLS=y`
			`CONFIG_PCIUTILS=y`
			`CONFIG_POPT=y`
			`CONFIG_QRENCODE=y`
			`CONFIG_TPMTOTP=y`

Add Cairo/FBWhiptail to the build process Enable it by default for the Librem 13 v2 2018-03-06 19:57:00 +00:00			`#CONFIG_SLANG=y`
			`#CONFIG_NEWT=y`
			`CONFIG_CAIRO=y`
			`CONFIG_FBWHIPTAIL=y`
Add Librem Key support to Heads The Librem Key is a custom device USB-based security token Nitrokey is producing for Purism and among other things it has custom firmware created for use with Heads. In particular, when a board is configured with CONFIG_LIBREMKEY, this custom firmware allows Heads to use the sealed TOTP secret to also send an HOTP authentication to the Librem Key. If the HOTP code is successful, the Librem Key will blink a green LED, if unsuccessful it will blink red, thereby informing the user that Heads has been tampered with without requiring them to use a phone to validate the TOTP secret. Heads will still use and show the TOTP secret, in case the user wants to validate both codes (in case the Librem Key was lost or is no longer trusted). It will also show the result of the HOTP verification (but not the code itself), even though the user should trust only what the Librem Key displays, so the user can confirm that both the device and Heads are in sync. If HOTP is enabled, Heads will maintain a new TPM counter separate from the Heads TPM counter that will increment each time HOTP codes are checked. This change also modifies the routines that update TOTP so that if the Librem Key executables are present it will also update HOTP codes and synchronize them with a Librem Key. 2018-06-19 19:27:27 +00:00			`CONFIG_LIBREMKEY=y`
Add Cairo/FBWhiptail to the build process Enable it by default for the Librem 13 v2 2018-03-06 19:57:00 +00:00
Add board and Linux kernel config for Purism Librem 13v2 2018-02-14 19:44:18 +00:00			`CONFIG_LINUX_USB=y`

generate /etc/config from exported configuration variables 2018-02-28 19:57:46 +00:00			`export CONFIG_TPM=y`
Merge branch 'add_gui_init' of https://github.com/kylerankin/heads into kylerankin-add_gui_init 2018-02-28 20:06:06 +00:00			`export CONFIG_BOOTSCRIPT=/bin/gui-init`
generate /etc/config from exported configuration variables 2018-02-28 19:57:46 +00:00			`export CONFIG_BOOT_REQ_HASH=n`
			`export CONFIG_BOOT_REQ_ROLLBACK=n`
boards/librem*: replace iommu=pt with intel_iommu=on With addition of IOMMU/RMRR patches, passthru is no longer needed for proper IOMMU functionality Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> 2019-01-31 05:35:50 +00:00			`export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on"`
Librem13v2: Enable IOMMU and Pass-through mode By enabling Pass-through iommu, it fixes the GPU glitching issues we've had with IOMMU, and it also allows us to boot a target kernel without having to give it intel_iommu=igfx_off as argument. 2018-04-03 22:04:03 +00:00			`export CONFIG_BOOT_KERNEL_REMOVE=""`
board/librem.config: set default boot device to NVMe Automatic /boot detection will fall back to /dev/sd Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> 2019-08-28 15:59:43 +00:00			`export CONFIG_BOOT_DEV="/dev/nvme0n1p1"`
Merge branch 'add_gui_init' of https://github.com/kylerankin/heads into kylerankin-add_gui_init 2018-02-28 20:06:06 +00:00			`export CONFIG_BOOT_GUI_MENU_NAME="Purism Librem 13v2 Heads Boot Menu"`
Colorize warning and error messages in fbwhiptail Since fbwhiptail allows us to customize the background colors, we should colorize warnings and error messages to provide a user with an additional subtle cue that there might be a problem. I have added two additional configuration options: CONFIG_WARNING_BG_COLOR CONFIG_ERROR_BG_COLOR and in the librem13v2.config file you can see an example for how to set them to be yellow and red gradients, respectively. I've also updated the main two scripts that use whiptail to include those background colors. If you decide to use regular whiptail, just don't set these config options and it should behave as expected. 2018-04-25 20:21:56 +00:00			`export CONFIG_WARNING_BG_COLOR="--background-gradient 0 0 0 150 125 0"`
			`export CONFIG_ERROR_BG_COLOR="--background-gradient 0 0 0 150 0 0"`
modules/flashrom: update to v1.2 release - Update flashrom module to v1.2. - Drop Thinkpad x220 patch as it's now properly supported. - Drop 'laptop=force_I_want_a_brick' from board FLASHROM_OPTIONS since it's no longer needed. - Migrate kgpe-d16 patch. The kgpe-d16 patch needed a complete overhaul when rebased against flashrom v1.2, and needs close inspection/testing as a result. The following changes were made from the previous patch: - dropped addition of 4-byte addressing (4BA), since now supported - dropped addtiion of Macronix MX25L256 and MX66L512 chips, since now supported - added 4BA erase commands for Winbond W25Q256 chip - dropped code to show progress indicator, since another PR already adds that Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> 2019-07-31 02:46:34 +00:00			`export CONFIG_FLASHROM_OPTIONS="-p internal"`