heads/boards/x230.config

# Configuration for a x230 running Qubes and other OSes
CONFIG_COREBOOT=y
CONFIG_COREBOOT_CONFIG=config/coreboot-x230.config
CONFIG_LINUX_CONFIG=config/linux-x230.config

CONFIG_CRYPTSETUP=y
CONFIG_FLASHROM=y
CONFIG_GPG=y
CONFIG_KEXEC=y
CONFIG_UTIL_LINUX=y
CONFIG_LVM2=y
CONFIG_MBEDTLS=y
CONFIG_PCIUTILS=y
CONFIG_POPT=y
CONFIG_QRENCODE=y
CONFIG_TPMTOTP=y
CONFIG_XEN=y
CONFIG_XEN_VERSION=4.8
CONFIG_DROPBEAR=y

CONFIG_LINUX_USB=y
CONFIG_LINUX_E1000E=y

CONFIG_BOOTSCRIPT=/bin/generic-init

CONFIG_BOOT_REQ_HASH=n
CONFIG_BOOT_REQ_ROLLBACK=n
CONFIG_BOOT_KERNEL_ADD="intel_iommu=on"
CONFIG_BOOT_KERNEL_REMOVE="quiet"
CONFIG_BOOT_DEV="/dev/sda1"
CONFIG_USB_BOOT_DEV="/dev/sdb1"
moved boards into boards/, removed old config files 2018-02-05 16:07:00 -05:00			`# Configuration for a x230 running Qubes and other OSes`
make coreboot an optional dependency (issue #265) 2017-09-22 16:17:05 -04:00			`CONFIG_COREBOOT=y`
cleanup configuration options to all have the same CONFIG_MODULE_OPTION naming scheme 2018-02-05 15:59:26 -05:00			`CONFIG_COREBOOT_CONFIG=config/coreboot-x230.config`
moved boards into boards/, removed old config files 2018-02-05 16:07:00 -05:00			`CONFIG_LINUX_CONFIG=config/linux-x230.config`
x230 build works on the NERF tree (#305) Fix FAST=1 builds to actually be fast. 2018-02-05 11:56:15 -05:00
Added a generic boot config and persistent params Refactored boot parsing code and applied that in local-init to scan /boot for grub options and allow the user to unsafely boot anything. This goes a long way to addressing #196. Optionally the user can customize those boot parameters or enforce arbitrary hashes on the boot device by creating and signing config files in /boot/ or /media/ or /media/kexec_iso/ISO_FILENAME/. 2017-07-02 23:01:04 -04:00			`CONFIG_CRYPTSETUP=y`
			`CONFIG_FLASHROM=y`
			`CONFIG_GPG=y`
			`CONFIG_KEXEC=y`
			`CONFIG_UTIL_LINUX=y`
			`CONFIG_LVM2=y`
			`CONFIG_MBEDTLS=y`
			`CONFIG_PCIUTILS=y`
			`CONFIG_POPT=y`
			`CONFIG_QRENCODE=y`
			`CONFIG_TPMTOTP=y`
			`CONFIG_XEN=y`
Added configurable xen version for Qubes 4 support also addresses issue #238 2017-09-13 22:10:46 -04:00			`CONFIG_XEN_VERSION=4.8`
Added a generic boot config and persistent params Refactored boot parsing code and applied that in local-init to scan /boot for grub options and allow the user to unsafely boot anything. This goes a long way to addressing #196. Optionally the user can customize those boot parameters or enforce arbitrary hashes on the boot device by creating and signing config files in /boot/ or /media/ or /media/kexec_iso/ISO_FILENAME/. 2017-07-02 23:01:04 -04:00			`CONFIG_DROPBEAR=y`

			`CONFIG_LINUX_USB=y`
			`CONFIG_LINUX_E1000E=y`

Added TPM secret management to generic boot Also cleaned up error handling and boot parsing edge cases 2017-07-12 00:17:45 -04:00			`CONFIG_BOOTSCRIPT=/bin/generic-init`
Added a generic boot config and persistent params Refactored boot parsing code and applied that in local-init to scan /boot for grub options and allow the user to unsafely boot anything. This goes a long way to addressing #196. Optionally the user can customize those boot parameters or enforce arbitrary hashes on the boot device by creating and signing config files in /boot/ or /media/ or /media/kexec_iso/ISO_FILENAME/. 2017-07-02 23:01:04 -04:00
Added the ability to persist a default boot option Similar to qubes-update, it will save then verify the hashes of the kexec files. Once TOTP is verified, a normal boot will verify that the file hashes and all the kexec params match and if successful, boot directly to OS. Also added a config option to require hash verification for non-recovery boots, failing to recovery not met. 2017-07-04 19:49:14 -04:00			`CONFIG_BOOT_REQ_HASH=n`
Added rollback protection to generic boot Changed the checking of required hashes or required rollback state to be right before boot, allowing the user to sign/set defaults in interactive mode. Also cleaned up usages of recovery and fixed iso parameter regression. 2017-07-08 16:59:37 -04:00			`CONFIG_BOOT_REQ_ROLLBACK=n`
Moved kernel command line parameters to config 2017-07-30 17:33:26 -04:00			`CONFIG_BOOT_KERNEL_ADD="intel_iommu=on"`
			`CONFIG_BOOT_KERNEL_REMOVE="quiet"`
Added a generic boot config and persistent params Refactored boot parsing code and applied that in local-init to scan /boot for grub options and allow the user to unsafely boot anything. This goes a long way to addressing #196. Optionally the user can customize those boot parameters or enforce arbitrary hashes on the boot device by creating and signing config files in /boot/ or /media/ or /media/kexec_iso/ISO_FILENAME/. 2017-07-02 23:01:04 -04:00			`CONFIG_BOOT_DEV="/dev/sda1"`
			`CONFIG_USB_BOOT_DEV="/dev/sdb1"`