heads/boards/UNTESTED_x220/UNTESTED_x220.config

# Configuration for a x220 running Qubes 4.1 and other OS, X220 is identical to X230 on the Linux Side of things.
export CONFIG_COREBOOT=y
export CONFIG_COREBOOT_VERSION=4.19
export CONFIG_LINUX_VERSION=5.10.5

CONFIG_COREBOOT_CONFIG=config/coreboot-x220.config
CONFIG_LINUX_CONFIG=config/linux-x230-legacy.config

#Additional hardware support
CONFIG_LINUX_USB=y
CONFIG_LINUX_E1000E=y

CONFIG_CRYPTSETUP2=y
CONFIG_FLASHROM=y
CONFIG_FLASHTOOLS=y
CONFIG_GPG2=y
CONFIG_KEXEC=y
CONFIG_UTIL_LINUX=y
CONFIG_LVM2=y
CONFIG_MBEDTLS=y
CONFIG_PCIUTILS=y

#platform locking finalization (PR0)
CONFIG_IO386=y
export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y


#Remote attestation support
#TPM based requirements
export CONFIG_TPM=y
CONFIG_POPT=y
CONFIG_QRENCODE=y
CONFIG_TPMTOTP=y
#HOTP based remote attestation for supported USB Security dongle
#With/Without TPM support
#CONFIG_HOTPKEY=y

#Nitrokey Storage admin tool
CONFIG_NKSTORECLI=n

#GUI Support
#Console based Whiptail support(Console based, no FB):
#CONFIG_SLANG=y
#CONFIG_NEWT=y
#FBWhiptail based (Graphical):
CONFIG_CAIRO=y
CONFIG_FBWHIPTAIL=y

#Additional tools:
#SSH server (requires ethernet drivers, eg: CONFIG_LINUX_E1000E)
CONFIG_DROPBEAR=n

export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on intel_iommu=igfx_off"
export CONFIG_BOOT_KERNEL_REMOVE="quiet"
export CONFIG_BOOT_DEV="/dev/sda1"
export CONFIG_BOARD_NAME="ThinkPad X220"
export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=hwseq --ifd --image bios"
move all other boards (but KGPE-D16) to coreboot 4.13 - xx30 legacy boards (x230, x230-flash, t430, t430-flash) now rely also on coreboot 4.13 - DOWNSIDE: x230 and t430 legacy boards now rely on WHIPTAIL (NOT FBWhiptail) to have enough space to fit under 7mb) - xx20 boards moved to 4.13 (no need of xx20-flash boards here since single SPI boards with 7.5mb useable since blobs scripts are required) - DOWNSIDE: all xx20 boards now have dropbear deactivated, while still having ethernet driver in. - qemu-coreboot and qemu-coreboot-fbwhiptail switched to coreboot 4.13 WITHOUT TPM SUPPORT (with cryptsetup 2.x support) - DOWNSIDE: - coreboot-qemu board CBFS_SIZE=0x700000 -> 0x750000 - coreboot-qemu-fbwhiptail CBFS_SIZE=0x750000 -> 0x780000 - CircleCi build recipe removes 4.8.1 boards altogether - KGPE-D16 workstation is used as new base build to save workspace layer (we removed one workspace layer) - Removing one workspace layer will save approx 2 hours of build time on fresh builds - Removing one coreboot version will save us approx 2 hours of build time on fresh builds - KGPE-D16 will stay to coreboot 4.11 until forward notice. - All other board configs SHOULD be built on latest coreboot versions 2021-07-26 18:02:42 +00:00			`# Configuration for a x220 running Qubes 4.1 and other OS, X220 is identical to X230 on the Linux Side of things.`
Read and measure CBFS files into initrd during init 2018-03-12 01:27:19 +00:00			`export CONFIG_COREBOOT=y`
Pass all coreboot 4.13 boards to 4.19 - Add 4.19 under modules/coreboot - point all 4.13 boards to 4.19 - adapt x230 FHD/EDP patch under patches/coreboot-4.19/0001-x230-fhd-variant.patch (poked upstream to fix patch under https://review.coreboot.org/c/coreboot/+/28950) - correct versioning info under .circleci/config/yml 2023-02-15 16:47:30 +00:00			`export CONFIG_COREBOOT_VERSION=4.19`
boards: bump non-tpm qemu*, xx20 and xx30 boards to use linux kernel 5.10.5 2023-05-23 14:29:11 +00:00			`export CONFIG_LINUX_VERSION=5.10.5`
coreboot: 4.8.1 fixed in Makefile, coreboot module and board configs (coreboot_481) to facilitate newer coreboot version integration and testing without breaking old fixed boards 2020-07-10 13:44:01 +00:00
moved boards into boards/, removed old config files 2018-02-05 21:07:00 +00:00			`CONFIG_COREBOOT_CONFIG=config/coreboot-x220.config`
xx20 and xx30: split kernel configs to legacy and maximized and board configs point to them 2022-06-10 13:52:07 +00:00			`CONFIG_LINUX_CONFIG=config/linux-x230-legacy.config`
moved boards into boards/, removed old config files 2018-02-05 21:07:00 +00:00
x220 board: this is maximized coreboot config, legacy linux config 2023-08-11 13:57:23 +00:00			`#Additional hardware support`
			`CONFIG_LINUX_USB=y`
			`CONFIG_LINUX_E1000E=y`

move all other boards (but KGPE-D16) to coreboot 4.13 - xx30 legacy boards (x230, x230-flash, t430, t430-flash) now rely also on coreboot 4.13 - DOWNSIDE: x230 and t430 legacy boards now rely on WHIPTAIL (NOT FBWhiptail) to have enough space to fit under 7mb) - xx20 boards moved to 4.13 (no need of xx20-flash boards here since single SPI boards with 7.5mb useable since blobs scripts are required) - DOWNSIDE: all xx20 boards now have dropbear deactivated, while still having ethernet driver in. - qemu-coreboot and qemu-coreboot-fbwhiptail switched to coreboot 4.13 WITHOUT TPM SUPPORT (with cryptsetup 2.x support) - DOWNSIDE: - coreboot-qemu board CBFS_SIZE=0x700000 -> 0x750000 - coreboot-qemu-fbwhiptail CBFS_SIZE=0x750000 -> 0x780000 - CircleCi build recipe removes 4.8.1 boards altogether - KGPE-D16 workstation is used as new base build to save workspace layer (we removed one workspace layer) - Removing one workspace layer will save approx 2 hours of build time on fresh builds - Removing one coreboot version will save us approx 2 hours of build time on fresh builds - KGPE-D16 will stay to coreboot 4.11 until forward notice. - All other board configs SHOULD be built on latest coreboot versions 2021-07-26 18:02:42 +00:00			`CONFIG_CRYPTSETUP2=y`
Inital test of a lenovo x220 port. Uses hardcoded paths for the blobs required. Uses a stripped ME blob. 2017-04-18 19:24:55 +00:00			`CONFIG_FLASHROM=y`
T420 initial support + X220 FBWhiptail Support (#578) * Add support for the Lenovo ThinkPad T420 and X220. * Fix the autodetection of ifdtool and me_cleaner. * Enable FBWhiptail mode for X220 and T420 * Decreased CBFS size to fix 50 seconds boot delay problems 2020-02-19 17:51:03 +00:00			`CONFIG_FLASHTOOLS=y`
			`CONFIG_GPG2=y`
Inital test of a lenovo x220 port. Uses hardcoded paths for the blobs required. Uses a stripped ME blob. 2017-04-18 19:24:55 +00:00			`CONFIG_KEXEC=y`
			`CONFIG_UTIL_LINUX=y`
			`CONFIG_LVM2=y`
			`CONFIG_MBEDTLS=y`
			`CONFIG_PCIUTILS=y`
x220 board: this is maximized coreboot config, legacy linux config 2023-08-11 13:57:23 +00:00
			`#platform locking finalization (PR0)`
			`CONFIG_IO386=y`
			`export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y`


			`#Remote attestation support`
			`#TPM based requirements`
			`export CONFIG_TPM=y`
Inital test of a lenovo x220 port. Uses hardcoded paths for the blobs required. Uses a stripped ME blob. 2017-04-18 19:24:55 +00:00			`CONFIG_POPT=y`
			`CONFIG_QRENCODE=y`
			`CONFIG_TPMTOTP=y`
x220 board: this is maximized coreboot config, legacy linux config 2023-08-11 13:57:23 +00:00			`#HOTP based remote attestation for supported USB Security dongle`
			`#With/Without TPM support`
			`#CONFIG_HOTPKEY=y`

			`#Nitrokey Storage admin tool`
			`CONFIG_NKSTORECLI=n`
Inital test of a lenovo x220 port. Uses hardcoded paths for the blobs required. Uses a stripped ME blob. 2017-04-18 19:24:55 +00:00
x220 board: this is maximized coreboot config, legacy linux config 2023-08-11 13:57:23 +00:00			`#GUI Support`
			`#Console based Whiptail support(Console based, no FB):`
			`#CONFIG_SLANG=y`
			`#CONFIG_NEWT=y`
			`#FBWhiptail based (Graphical):`
T420 initial support + X220 FBWhiptail Support (#578) * Add support for the Lenovo ThinkPad T420 and X220. * Fix the autodetection of ifdtool and me_cleaner. * Enable FBWhiptail mode for X220 and T420 * Decreased CBFS size to fix 50 seconds boot delay problems 2020-02-19 17:51:03 +00:00			`CONFIG_CAIRO=y`
			`CONFIG_FBWHIPTAIL=y`

x220 board: this is maximized coreboot config, legacy linux config 2023-08-11 13:57:23 +00:00			`#Additional tools:`
			`#SSH server (requires ethernet drivers, eg: CONFIG_LINUX_E1000E)`
			`CONFIG_DROPBEAR=n`
Inital test of a lenovo x220 port. Uses hardcoded paths for the blobs required. Uses a stripped ME blob. 2017-04-18 19:24:55 +00:00
T420 initial support + X220 FBWhiptail Support (#578) * Add support for the Lenovo ThinkPad T420 and X220. * Fix the autodetection of ifdtool and me_cleaner. * Enable FBWhiptail mode for X220 and T420 * Decreased CBFS size to fix 50 seconds boot delay problems 2020-02-19 17:51:03 +00:00			`export CONFIG_BOOTSCRIPT=/bin/gui-init`
generate /etc/config from exported configuration variables 2018-02-28 19:57:46 +00:00			`export CONFIG_BOOT_REQ_HASH=n`
			`export CONFIG_BOOT_REQ_ROLLBACK=n`
T420 initial support + X220 FBWhiptail Support (#578) * Add support for the Lenovo ThinkPad T420 and X220. * Fix the autodetection of ifdtool and me_cleaner. * Enable FBWhiptail mode for X220 and T420 * Decreased CBFS size to fix 50 seconds boot delay problems 2020-02-19 17:51:03 +00:00			`export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on intel_iommu=igfx_off"`
generate /etc/config from exported configuration variables 2018-02-28 19:57:46 +00:00			`export CONFIG_BOOT_KERNEL_REMOVE="quiet"`
			`export CONFIG_BOOT_DEV="/dev/sda1"`
Specify 'friendly' board name vs overriding CONFIG_BOOT_GUI_MENU_NAME This will allow it to be used elsewhere within the UI. Rename CONFIG_BOOT_GUI_MENU_NAME to better indicate use/function. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> 2020-10-23 22:18:20 +00:00			`export CONFIG_BOARD_NAME="ThinkPad X220"`
boards/x220: update flashrom parameters Force use of hardware sequencing for internal flashing to avoid needing to specify the chip to be flashed. Addresses #870 Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> 2020-10-26 15:51:13 +00:00			`export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=hwseq --ifd --image bios"`