2018-09-15 09:42:42 +00:00
|
|
|
version: 2
|
|
|
|
jobs:
|
|
|
|
build:
|
|
|
|
docker:
|
2020-08-20 19:15:46 +00:00
|
|
|
- image: debian:10
|
2018-09-15 09:42:42 +00:00
|
|
|
steps:
|
2020-05-04 16:07:14 +00:00
|
|
|
- run:
|
|
|
|
name: Install dependencies
|
|
|
|
command: |
|
|
|
|
apt update
|
2020-12-03 00:37:34 +00:00
|
|
|
apt install -y build-essential zlib1g-dev uuid-dev libdigest-sha-perl libelf-dev bc bzip2 bison flex git gnupg iasl m4 nasm patch python python2 python3 wget gnat cpio ccache pkg-config cmake libusb-1.0-0-dev autoconf texinfo ncurses-dev doxygen graphviz udev libudev1 libudev-dev automake libtool rsync innoextract
|
2018-09-15 10:56:42 +00:00
|
|
|
- checkout
|
|
|
|
|
2018-09-18 16:08:16 +00:00
|
|
|
- run:
|
2020-05-04 16:07:14 +00:00
|
|
|
name: git reset
|
2018-09-18 16:08:16 +00:00
|
|
|
command: |
|
2020-05-04 16:07:14 +00:00
|
|
|
git reset --hard "$CIRCLE_SHA1" \
|
2018-09-18 16:08:16 +00:00
|
|
|
|
2020-08-11 20:38:26 +00:00
|
|
|
- run:
|
|
|
|
name: Creating all modules and patches digest
|
|
|
|
command: |
|
|
|
|
find ./patches/ ./modules/ -type f | sort -h |xargs sha256sum > /tmp/all_modules_and_patches.sha256sums \
|
|
|
|
|
|
|
|
- run:
|
|
|
|
name: Creating musl-cross-make and musl-cross-make patches digest
|
|
|
|
command: |
|
2020-10-16 19:26:59 +00:00
|
|
|
find modules/musl-cross* -type f | sort -h | xargs sha256sum > /tmp/musl-cross_module_and_patches.sha256sums \
|
2020-08-11 20:38:26 +00:00
|
|
|
|
|
|
|
|
|
|
|
- restore_cache:
|
|
|
|
keys:
|
|
|
|
#Restore existing cache for modules checksums validated to be exactly the same as in github current commit
|
2020-08-20 19:15:46 +00:00
|
|
|
- heads-modules-and-patches-{{ checksum "/tmp/all_modules_and_patches.sha256sums" }}{{ .Environment.CACHE_VERSION }}
|
2020-08-11 20:38:26 +00:00
|
|
|
#If precedent fails. Restore cache for musl-cross module checksum validated to be exactly the same as in github current commit
|
2020-08-20 19:15:46 +00:00
|
|
|
- heads-cross-musl-{{ checksum "/tmp/musl-cross_module_and_patches.sha256sums" }}{{ .Environment.CACHE_VERSION }}
|
2020-08-11 20:38:26 +00:00
|
|
|
|
2020-01-08 23:07:19 +00:00
|
|
|
# linuxboot steps need something to pass in the kernel header path
|
|
|
|
# skipping for now
|
|
|
|
# - run:
|
|
|
|
# name: qemu-linuxboot-edk2
|
|
|
|
# command: |
|
|
|
|
# ./build/make-4.2.1/make \
|
|
|
|
# CROSS=/cross/bin/x86_64-linux-musl- \
|
|
|
|
# BOARD=qemu-linuxboot \
|
|
|
|
# `/bin/pwd`/build/linuxboot-git/build/qemu/.configured \
|
|
|
|
# # Run first to avoid too many processes
|
|
|
|
#
|
|
|
|
# - run:
|
|
|
|
# name: qemu-linuxboot
|
|
|
|
# command: |
|
|
|
|
# ./build/make-4.2.1/make \
|
|
|
|
# CROSS=/cross/bin/x86_64-linux-musl- \
|
2020-09-25 19:56:27 +00:00
|
|
|
# CPUS=4 \
|
2020-01-08 23:07:19 +00:00
|
|
|
# V=1 \
|
|
|
|
# BOARD=qemu-linuxboot \
|
|
|
|
#
|
|
|
|
# - store-artifacts:
|
|
|
|
# path: build/qemu-linuxboot/linuxboot.rom
|
|
|
|
# - store-artifacts:
|
|
|
|
# path: build/qemu-linuxboot/hashes.txt
|
2018-09-18 11:14:39 +00:00
|
|
|
|
2020-10-18 18:48:25 +00:00
|
|
|
- run:
|
Activate dual console by default and restructure board config
Changing CONFIG_USB_BOOT_DEV to sdc1, adding back CONFIG_BOOT_STATIC_IP to 192.168.2.3, adding dual console to OpenBMC and tty0 in attempt to have QubesOS graphic installer which complains with no networking when attempting to start VNC
Adding dual console to OpenBmc and tty0
putting kgpe-d16-coreboot.conf in defconfig format
NO_HZ wasn't included in kernel config. Adding it.
Wasn't able to have both console firing up QubesOS gui installer, complaining about hvc1 console errors. Splitting up Workstation and server config. This one works for Worstation
Removing serial configuration and static IP stuff since we have a workstation here.
Seperate Workstation and Server board configurations until dual console truely works through QubesOS gui installation. kgpe-d16 board config removed until then.
Placing files in good directories
Corrrect flashrom options for kgpe-d16 server and workstation boards
kgpe-d16 linux: NO_HZ_IDLE instead of NO_HZ
kgpe-d16: seperate board for workstation to be AST and gui-init based, while kgpe-d16-> kgpe-d16_server
kgpe-d16_server: boots, shows ASpeed text on VGA, controllable through BMC via SSH.
kgpe-d16_workstation on ASpeed console. WIP. (Includes CIs configs to build server and workstation)
kgpe-d16_workstation in defconfig format
kgpe-d16 boards: pass from GPG to GPG2 board definitions
kgpe-d16_workstation : Adding Cairo and FbWhpitail in board config for gui-init to work in FB mode
kgpe-d16: removing plymouth.ignore-serial-consoles to fix server terminal output
kgpe-d16: bring par with staging branch https://gitlab.com/tlaurion/heads/commits/kgpe-d16_staging
kgpe-d16 : expressively export CONFIG_TPM=n
kgpe-d16_wokstation gui-init variables were missing
kgpe-d16 boards: add CONFIG_LINUX_USB_COMPANION_CONTROLLER so that usb is recognized
linux-kgpe-d16*: add support for Pike
kgpe-d16_workstation-usb_keyboard board support addition
kgpe-d16_server-whiptail: Add board and dependencies to have gui-init in whiptail (console mode, not FbWhiptail based
GitlabCI: kgpe-d16 fixes and upstream merge of change
kgpe-d16* board: add statement to fixate coreboot version to 4.8.1 for the moment
kgpe-d16: add missing config/linux-kgpe-d16_server-whiptail.config file
KGPE-D16: community work migration to coreboot 4.11 to fix issue #740
KGPE-D16 boards: Adding VBOOT+measured boot, musl-cross patch and 4.11 patch brought up per https://github.com/osresearch/heads/pull/709
kgpe-d16* boards: add VBOOT Kconfig patch per @miczyg1 recommendation under https://github.com/osresearch/heads/pull/795#issuecomment-671214637
KGPE-D16* coreboot configs: Add S3NV as a Runtime data whitelist (so that it is not measured at term) per @miczyg1 recommendation under https://github.com/osresearch/heads/pull/795#issuecomment-671214637
kgpe-d16 coreboot 4.11: add https://review.coreboot.org/c/coreboot/+/36908 patch
kgpe-d16 boards: add Linux kernel version where missing.
CircleCI: Add debug output on fail for kgpe-d16 board builds to bring par with upstream after rebasing on master
coreboot module: typo correction (tabs vs spaces)
CircleCI: trying to address "g++: fatal error: Killed signal terminated program cc1plus." happening under coreboot 4.11 and coreboot 4.12 builds
CircleCI: remove past addition to test recommendation from CircleCI: "resource_class: large"
CircleCi: Ok.... lets output dmesg content prior of other logs.... I'm out of ideas. Next step, ask CircleCI for support
At this stage:
- job's "make --load" is supposed to guarantee that the number of thread doesn't exhaust pass of a load of 2 (medium, free class, CircleCI has 32 cores so possibility of a load of 32)
- "--max_old_space_size=4096" in CircleCI environement is supposed to limit memory consumption to 4096Mb of memory, the max of a medium class free tier CircleCI node
CircleCI: remove verbose build (no more V=1), in case of failed build, find all logs modified in last minute and output each of them on console.
coreboot module: implement load average respect inside of problematic CI build for coreboot 4.11+ being killed in the action (32 cores with 4Gb ram get gcc OOM)
coreboot module: replace nproc by number of Gb actually available as number of CPUs, since each thread is expected to have 1Gb of ram.
CircleCI & coreboot config: fix merge conflict rebasing on master
coreboot 4.11 kgpe-d16 vboot patches addendum, credits goes to @Tonux599
Fix merge conflicts and make sure all boards are inside of CircleCI builds. PoC build for #867
2018-10-23 12:43:36 +00:00
|
|
|
name: kgpe-d16_workstation
|
|
|
|
command: |
|
|
|
|
rm -rf build/kgpe-d16_workstation/* build/log/* && \
|
|
|
|
make CPUS=4 V=1 BOARD=kgpe-d16_workstation || \
|
|
|
|
(find ./build/ -name "*.log" -type f -mmin -1 | while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log; done; exit 1) \
|
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
|
|
|
name: Ouput kgpe-d16_workstation hashes
|
|
|
|
command: |
|
|
|
|
cat build/kgpe-d16_workstation/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for kgpe-d16_workstation
|
|
|
|
command: |
|
|
|
|
tar zcvf build/kgpe-d16_workstation/logs.tar.gz build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/kgpe-d16_workstation
|
2020-12-03 00:37:34 +00:00
|
|
|
|
Activate dual console by default and restructure board config
Changing CONFIG_USB_BOOT_DEV to sdc1, adding back CONFIG_BOOT_STATIC_IP to 192.168.2.3, adding dual console to OpenBMC and tty0 in attempt to have QubesOS graphic installer which complains with no networking when attempting to start VNC
Adding dual console to OpenBmc and tty0
putting kgpe-d16-coreboot.conf in defconfig format
NO_HZ wasn't included in kernel config. Adding it.
Wasn't able to have both console firing up QubesOS gui installer, complaining about hvc1 console errors. Splitting up Workstation and server config. This one works for Worstation
Removing serial configuration and static IP stuff since we have a workstation here.
Seperate Workstation and Server board configurations until dual console truely works through QubesOS gui installation. kgpe-d16 board config removed until then.
Placing files in good directories
Corrrect flashrom options for kgpe-d16 server and workstation boards
kgpe-d16 linux: NO_HZ_IDLE instead of NO_HZ
kgpe-d16: seperate board for workstation to be AST and gui-init based, while kgpe-d16-> kgpe-d16_server
kgpe-d16_server: boots, shows ASpeed text on VGA, controllable through BMC via SSH.
kgpe-d16_workstation on ASpeed console. WIP. (Includes CIs configs to build server and workstation)
kgpe-d16_workstation in defconfig format
kgpe-d16 boards: pass from GPG to GPG2 board definitions
kgpe-d16_workstation : Adding Cairo and FbWhpitail in board config for gui-init to work in FB mode
kgpe-d16: removing plymouth.ignore-serial-consoles to fix server terminal output
kgpe-d16: bring par with staging branch https://gitlab.com/tlaurion/heads/commits/kgpe-d16_staging
kgpe-d16 : expressively export CONFIG_TPM=n
kgpe-d16_wokstation gui-init variables were missing
kgpe-d16 boards: add CONFIG_LINUX_USB_COMPANION_CONTROLLER so that usb is recognized
linux-kgpe-d16*: add support for Pike
kgpe-d16_workstation-usb_keyboard board support addition
kgpe-d16_server-whiptail: Add board and dependencies to have gui-init in whiptail (console mode, not FbWhiptail based
GitlabCI: kgpe-d16 fixes and upstream merge of change
kgpe-d16* board: add statement to fixate coreboot version to 4.8.1 for the moment
kgpe-d16: add missing config/linux-kgpe-d16_server-whiptail.config file
KGPE-D16: community work migration to coreboot 4.11 to fix issue #740
KGPE-D16 boards: Adding VBOOT+measured boot, musl-cross patch and 4.11 patch brought up per https://github.com/osresearch/heads/pull/709
kgpe-d16* boards: add VBOOT Kconfig patch per @miczyg1 recommendation under https://github.com/osresearch/heads/pull/795#issuecomment-671214637
KGPE-D16* coreboot configs: Add S3NV as a Runtime data whitelist (so that it is not measured at term) per @miczyg1 recommendation under https://github.com/osresearch/heads/pull/795#issuecomment-671214637
kgpe-d16 coreboot 4.11: add https://review.coreboot.org/c/coreboot/+/36908 patch
kgpe-d16 boards: add Linux kernel version where missing.
CircleCI: Add debug output on fail for kgpe-d16 board builds to bring par with upstream after rebasing on master
coreboot module: typo correction (tabs vs spaces)
CircleCI: trying to address "g++: fatal error: Killed signal terminated program cc1plus." happening under coreboot 4.11 and coreboot 4.12 builds
CircleCI: remove past addition to test recommendation from CircleCI: "resource_class: large"
CircleCi: Ok.... lets output dmesg content prior of other logs.... I'm out of ideas. Next step, ask CircleCI for support
At this stage:
- job's "make --load" is supposed to guarantee that the number of thread doesn't exhaust pass of a load of 2 (medium, free class, CircleCI has 32 cores so possibility of a load of 32)
- "--max_old_space_size=4096" in CircleCI environement is supposed to limit memory consumption to 4096Mb of memory, the max of a medium class free tier CircleCI node
CircleCI: remove verbose build (no more V=1), in case of failed build, find all logs modified in last minute and output each of them on console.
coreboot module: implement load average respect inside of problematic CI build for coreboot 4.11+ being killed in the action (32 cores with 4Gb ram get gcc OOM)
coreboot module: replace nproc by number of Gb actually available as number of CPUs, since each thread is expected to have 1Gb of ram.
CircleCI & coreboot config: fix merge conflict rebasing on master
coreboot 4.11 kgpe-d16 vboot patches addendum, credits goes to @Tonux599
Fix merge conflicts and make sure all boards are inside of CircleCI builds. PoC build for #867
2018-10-23 12:43:36 +00:00
|
|
|
- run:
|
|
|
|
name: kgpe-d16_workstation-usb_keyboard
|
|
|
|
command: |
|
|
|
|
rm -rf build/kgpe-d16_workstation-usb_keyboard/* build/log/* && \
|
|
|
|
make CPUS=4 V=1 BOARD=kgpe-d16_workstation-usb_keyboard || \
|
|
|
|
(find ./build/ -name "*.log" -type f -mmin -1 | while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log; done; exit 1) \
|
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
|
|
|
name: Ouput kgpe-d16_workstation-usb_keyboard hashes
|
|
|
|
command: |
|
|
|
|
cat build/kgpe-d16_workstation-usb_keyboard/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for kgpe-d16_workstation-usb_keyboard
|
|
|
|
command: |
|
|
|
|
tar zcvf build/kgpe-d16_workstation-usb_keyboard/logs.tar.gz build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/kgpe-d16_workstation-usb_keyboard
|
|
|
|
|
|
|
|
- run:
|
|
|
|
name: kgpe-d16_server
|
|
|
|
command: |
|
|
|
|
rm -rf build/kgpe-d16_server/* build/log/* && \
|
|
|
|
make CPUS=4 V=1 BOARD=kgpe-d16_server || \
|
|
|
|
(find ./build/ -name "*.log" -type f -mmin -1 | while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log; done; exit 1) \
|
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
|
|
|
name: Ouput kgpe-d16_server hashes
|
|
|
|
command: |
|
|
|
|
cat build/kgpe-d16_server/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for kgpe-d16_server
|
|
|
|
command: |
|
|
|
|
tar zcvf build/kgpe-d16_server/logs.tar.gz build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/kgpe-d16_server
|
|
|
|
|
|
|
|
- run:
|
|
|
|
name: kgpe-d16_server-whiptail
|
|
|
|
command: |
|
|
|
|
rm -rf build/kgpe-d16_server-whiptail/* build/log/* && \
|
|
|
|
make CPUS=4 V=1 BOARD=kgpe-d16_server-whiptail || \
|
|
|
|
(find ./build/ -name "*.log" -type f -mmin -1 | while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log; done; exit 1) \
|
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
|
|
|
name: Ouput kgpe-d16_server-whiptail hashes
|
|
|
|
command: |
|
|
|
|
cat build/kgpe-d16_server-whiptail/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for kgpe-d16_server-whiptail
|
|
|
|
command: |
|
|
|
|
tar zcvf build/kgpe-d16_server-whiptail/logs.tar.gz build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/kgpe-d16_server-whiptail
|
2020-10-18 18:48:25 +00:00
|
|
|
- run:
|
|
|
|
name: librem_l1um
|
|
|
|
command: |
|
2020-11-02 22:41:36 +00:00
|
|
|
rm -rf build/librem_l1um/* build/log/* && make CPUS=4 V=1 BOARD=librem_l1um || touch /tmp/failed_build
|
2020-10-18 18:48:25 +00:00
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
2020-12-03 00:37:34 +00:00
|
|
|
name: Output build failing logs
|
2020-11-02 22:41:36 +00:00
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi \
|
|
|
|
- run:
|
|
|
|
name: Output librem_l1um hashes
|
2020-10-18 18:48:25 +00:00
|
|
|
command: |
|
|
|
|
cat build/librem_l1um/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for librem_l1um
|
|
|
|
command: |
|
|
|
|
tar zcvf build/librem_l1um/logs.tar.gz build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/librem_l1um
|
|
|
|
|
2020-09-25 20:00:07 +00:00
|
|
|
- run:
|
2020-09-30 20:13:15 +00:00
|
|
|
name: librem_mini
|
2020-09-25 20:00:07 +00:00
|
|
|
command: |
|
2020-11-02 22:41:36 +00:00
|
|
|
rm -rf build/librem_mini/* build/log/* && make CPUS=4 V=1 BOARD=librem_mini || touch /tmp/failed_build
|
2020-09-25 20:00:07 +00:00
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
2020-11-02 22:41:36 +00:00
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output librem_mini hashes
|
2020-09-25 20:00:07 +00:00
|
|
|
command: |
|
2020-09-30 20:13:15 +00:00
|
|
|
cat build/librem_mini/hashes.txt \
|
2020-09-25 20:00:07 +00:00
|
|
|
- run:
|
2020-09-30 20:13:15 +00:00
|
|
|
name: Archiving build logs for librem_mini
|
2020-09-25 20:00:07 +00:00
|
|
|
command: |
|
2020-09-30 20:13:15 +00:00
|
|
|
tar zcvf build/librem_mini/logs.tar.gz build/log/*
|
2020-09-25 20:00:07 +00:00
|
|
|
- store-artifacts:
|
2020-09-30 20:13:15 +00:00
|
|
|
path: build/librem_mini
|
2020-09-25 20:00:07 +00:00
|
|
|
|
2020-10-16 21:57:49 +00:00
|
|
|
- run:
|
|
|
|
name: librem_mini_v2
|
|
|
|
command: |
|
|
|
|
rm -rf build/librem_mini_v2/* build/log/* && make CPUS=4 V=1 BOARD=librem_mini_v2 || touch /tmp/failed_build
|
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output librem_mini_v2 hashes
|
|
|
|
command: |
|
|
|
|
cat build/librem_mini_v2/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for librem_mini_v2
|
|
|
|
command: |
|
|
|
|
tar zcvf build/librem_mini_v2/logs.tar.gz build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/librem_mini_v2
|
|
|
|
|
2020-12-03 00:37:34 +00:00
|
|
|
- run:
|
|
|
|
name: Download and neuter xx20 ME (keep generated GBE and extracted IFD in tree)
|
|
|
|
command: |
|
|
|
|
./blobs/xx20/download_parse_me.sh
|
|
|
|
- run:
|
|
|
|
name: x220-maximized
|
|
|
|
command: |
|
|
|
|
rm -rf build/x220-maximized/* build/log/* && make CPUS=4 V=1 BOARD=x220-maximized || touch /tmp/failed_build
|
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi \
|
|
|
|
- run:
|
|
|
|
name: Output x220-maximized hashes
|
|
|
|
command: |
|
|
|
|
cat build/x220-maximized/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for x220-maximized
|
|
|
|
command: |
|
|
|
|
tar zcvf build/x220-maximized/logs.tar.gz ./build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/x220-maximized
|
|
|
|
|
|
|
|
- run:
|
|
|
|
name: Download and neuter xx20 ME (keep generated GBE and extracted IFD in tree)
|
|
|
|
command: |
|
|
|
|
./blobs/xx20/download_parse_me.sh
|
|
|
|
- run:
|
|
|
|
name: t420-maximized
|
|
|
|
command: |
|
|
|
|
rm -rf build/t420-maximized/* build/log/* && make CPUS=4 V=1 BOARD=t420-maximized || touch /tmp/failed_build
|
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output t420-maximized hashes
|
|
|
|
command: |
|
|
|
|
cat build/t420-maximized/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for t420-maximized
|
|
|
|
command: |
|
|
|
|
tar zcvf build/t420-maximized/logs.tar.gz ./build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/t420-maximized
|
|
|
|
|
2020-06-06 16:35:13 +00:00
|
|
|
- run:
|
|
|
|
name: x230-flash
|
|
|
|
command: |
|
2020-11-02 22:41:36 +00:00
|
|
|
rm -rf build/x230-flash/* build/log/* && make CPUS=4 V=1 BOARD=x230-flash || touch /tmp/failed_build
|
2020-06-06 16:35:13 +00:00
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
2020-11-02 22:41:36 +00:00
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output x230-flash hashes
|
2020-06-06 16:35:13 +00:00
|
|
|
command: |
|
|
|
|
cat build/x230-flash/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for x230-flash
|
|
|
|
command: |
|
|
|
|
tar zcvf build/x230-flash/logs.tar.gz build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/x230-flash
|
2018-09-18 17:07:14 +00:00
|
|
|
|
2020-01-08 21:45:39 +00:00
|
|
|
- run:
|
2020-06-06 16:35:13 +00:00
|
|
|
name: t430-flash
|
2020-01-08 21:45:39 +00:00
|
|
|
command: |
|
2020-11-02 22:41:36 +00:00
|
|
|
rm -rf build/t430-flash/* build/log/* && make CPUS=4 V=1 BOARD=t430-flash || touch /tmp/failed_build
|
2020-05-04 16:07:14 +00:00
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
2020-11-02 22:41:36 +00:00
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output t430-flash hashes
|
2020-05-04 16:07:14 +00:00
|
|
|
command: |
|
2020-06-06 16:35:13 +00:00
|
|
|
cat build/t430-flash/hashes.txt \
|
2020-05-24 21:12:13 +00:00
|
|
|
- run:
|
2020-06-06 16:35:13 +00:00
|
|
|
name: Archiving build logs for t430-flash
|
2020-05-24 21:12:13 +00:00
|
|
|
command: |
|
2020-06-06 16:35:13 +00:00
|
|
|
tar zcvf build/t430-flash/logs.tar.gz build/log/*
|
2020-01-08 21:45:39 +00:00
|
|
|
- store-artifacts:
|
2020-06-06 16:35:13 +00:00
|
|
|
path: build/t430-flash
|
2020-05-24 21:12:13 +00:00
|
|
|
|
2020-05-04 16:07:14 +00:00
|
|
|
- run:
|
2020-06-06 16:35:13 +00:00
|
|
|
name: t430
|
2020-05-04 16:07:14 +00:00
|
|
|
command: |
|
2020-11-02 22:41:36 +00:00
|
|
|
rm -rf build/t430/* build/log/* && make CPUS=4 V=1 BOARD=t430 || touch /tmp/failed_build
|
2020-05-04 16:07:14 +00:00
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
2020-11-02 22:41:36 +00:00
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output t430 hashes
|
2020-05-04 16:07:14 +00:00
|
|
|
command: |
|
2020-06-06 16:35:13 +00:00
|
|
|
cat build/t430/hashes.txt \
|
2020-05-24 21:12:13 +00:00
|
|
|
- run:
|
2020-06-06 16:35:13 +00:00
|
|
|
name: Archiving build logs for t430
|
2020-05-24 21:12:13 +00:00
|
|
|
command: |
|
2020-06-06 16:35:13 +00:00
|
|
|
tar zcvf build/t430/logs.tar.gz build/log/*
|
2020-05-24 21:12:13 +00:00
|
|
|
- store-artifacts:
|
2020-06-06 16:35:13 +00:00
|
|
|
path: build/t430
|
2020-05-24 21:12:13 +00:00
|
|
|
|
2018-09-18 17:07:14 +00:00
|
|
|
- run:
|
|
|
|
name: x230
|
|
|
|
command: |
|
2020-11-02 22:41:36 +00:00
|
|
|
rm -rf build/x230/* build/log/* && make CPUS=4 V=1 BOARD=x230 || touch /tmp/failed_build
|
2020-05-04 16:07:14 +00:00
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
2020-11-02 22:41:36 +00:00
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output x230 hashes
|
2020-05-04 16:07:14 +00:00
|
|
|
command: |
|
|
|
|
cat build/x230/hashes.txt \
|
2020-05-24 21:12:13 +00:00
|
|
|
- run:
|
|
|
|
name: Archiving build logs for x230
|
|
|
|
command: |
|
|
|
|
tar zcvf build/x230/logs.tar.gz build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/x230
|
|
|
|
|
2020-05-16 17:38:14 +00:00
|
|
|
- run:
|
|
|
|
name: x230-hotp-verification
|
|
|
|
command: |
|
2020-11-02 22:41:36 +00:00
|
|
|
rm -rf build/x230-hotp-verification/* build/log/* && make CPUS=4 V=1 BOARD=x230-hotp-verification || touch /tmp/failed_build
|
2020-05-16 17:38:14 +00:00
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
2020-11-02 22:41:36 +00:00
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output x230-hotp-verification hashes
|
2020-05-16 17:38:14 +00:00
|
|
|
command: |
|
|
|
|
cat build/x230-hotp-verification/hashes.txt \
|
2020-05-04 16:07:14 +00:00
|
|
|
- run:
|
2020-05-24 21:12:13 +00:00
|
|
|
name: Archiving build logs for x230-hotp-verification
|
2020-05-04 16:07:14 +00:00
|
|
|
command: |
|
2020-05-24 21:12:13 +00:00
|
|
|
tar zcvf build/x230-hotp-verification/logs.tar.gz build/log/*
|
2020-05-04 16:07:14 +00:00
|
|
|
- store-artifacts:
|
2020-05-24 21:12:13 +00:00
|
|
|
path: build/x230-hotp-verification
|
2018-09-18 17:07:14 +00:00
|
|
|
|
2020-10-19 14:47:22 +00:00
|
|
|
- run:
|
|
|
|
name: x230-nkstorecli
|
|
|
|
command: |
|
2020-11-02 22:41:36 +00:00
|
|
|
rm -rf build/x230-nkstorecli/* build/log/* && make CPUS=4 V=1 BOARD=x230-nkstorecli || touch /tmp/failed_build
|
2020-10-19 14:47:22 +00:00
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
2020-11-02 22:41:36 +00:00
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output x230-nkstorecli hashes
|
2020-10-19 14:47:22 +00:00
|
|
|
command: |
|
|
|
|
cat build/x230-nkstorecli/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for x230-nkstorecli
|
|
|
|
command: |
|
|
|
|
tar zcvf build/x230-nkstorecli/logs.tar.gz build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/x230-nkstorecli
|
|
|
|
|
Add xx30-maximized and xx30-hotp-maximized boards (11.5mb flashable BIOS regions, reproducible me.bin and generated gbe.bin and totally externally and internally flashable roms) (#703)
* xx30-*-maximized: update flashrom options removing --ifd bios option, keeping whole flash of rom internally. WARNING: ifd needs to be initially unlocked through ifdtool -u on 8mb bottom SPI backup. YOU CANNOT COME FROM 1VYRAIN. IF COMING FROM SKULLS, YOU MUST HAVE RAN OPTIONAL -u OPTION FROM SKULLS. PLEASE UPGRADE ONLY AFTER HAVING A PHYSICAL BACKUP OF BOTH SPI FLASH CHIPS. MORE INFORMATION UNDER https://github.com/osresearch/heads/pull/703. This will guarantee that future flash of produced rom will reflash the ROM totally, where heads make sure of adding users customizations (public key, /etc/config.user) when internally flashed. Unfortunately, if you flash externally, you will have to reinject your public key and readd /etc/config customizations.
* Adding generated bincfg coreboot 4.8.1 patch (merged under coreboot 4.13 and backported here to 4.8.1), resulting in gbe.bin under blobs/xx30/gbe.bin and instructions to replicate in README prior of automation (under repo). Note that MAC under gbe.bin is fixed to DE:AD:C0:FF:EE unless extract.sh script is ran on external backup to keep current user's MAC (Thanks to @Thrilleratplay's contribution!)
* xx30 blobs: add two blobs management scripts for xx30: extract from local backup/download+neuter ME
extract.sh: extract from external backup: gbe.bin, neuter under me.bin and maximize BIOS+reduce ME regions under unlocked ifd.bin.
download_clean_me.sh: download and verify Lenovo latest ME version from website, and drop me.bin in place.
Note: me.bin is 98kb, containing only BUP and ROMP partitions which cannot be modified nor deleted else computer won't boot. As a result, BIOS region is maximized in ifd.bin to 11.5mb and coreboot config takes advantage of that freed space.
* CircleCI: xx30-*-maximized additional step to call download_clean_me.sh prior of building boards so that me.bin is dopped in place. This should be done by users prior of building xx30-*-maximized boards locally, which is imitated in CircleCI builds (look at .circleci/config.yaml for innoextract host added dependency and board buildings. Results on github for each commit).
2020-12-02 22:01:44 +00:00
|
|
|
- run:
|
2020-12-03 00:37:34 +00:00
|
|
|
name: Download and neuter xx30 ME (keep generated GBE and extracted IFD in tree)
|
Add xx30-maximized and xx30-hotp-maximized boards (11.5mb flashable BIOS regions, reproducible me.bin and generated gbe.bin and totally externally and internally flashable roms) (#703)
* xx30-*-maximized: update flashrom options removing --ifd bios option, keeping whole flash of rom internally. WARNING: ifd needs to be initially unlocked through ifdtool -u on 8mb bottom SPI backup. YOU CANNOT COME FROM 1VYRAIN. IF COMING FROM SKULLS, YOU MUST HAVE RAN OPTIONAL -u OPTION FROM SKULLS. PLEASE UPGRADE ONLY AFTER HAVING A PHYSICAL BACKUP OF BOTH SPI FLASH CHIPS. MORE INFORMATION UNDER https://github.com/osresearch/heads/pull/703. This will guarantee that future flash of produced rom will reflash the ROM totally, where heads make sure of adding users customizations (public key, /etc/config.user) when internally flashed. Unfortunately, if you flash externally, you will have to reinject your public key and readd /etc/config customizations.
* Adding generated bincfg coreboot 4.8.1 patch (merged under coreboot 4.13 and backported here to 4.8.1), resulting in gbe.bin under blobs/xx30/gbe.bin and instructions to replicate in README prior of automation (under repo). Note that MAC under gbe.bin is fixed to DE:AD:C0:FF:EE unless extract.sh script is ran on external backup to keep current user's MAC (Thanks to @Thrilleratplay's contribution!)
* xx30 blobs: add two blobs management scripts for xx30: extract from local backup/download+neuter ME
extract.sh: extract from external backup: gbe.bin, neuter under me.bin and maximize BIOS+reduce ME regions under unlocked ifd.bin.
download_clean_me.sh: download and verify Lenovo latest ME version from website, and drop me.bin in place.
Note: me.bin is 98kb, containing only BUP and ROMP partitions which cannot be modified nor deleted else computer won't boot. As a result, BIOS region is maximized in ifd.bin to 11.5mb and coreboot config takes advantage of that freed space.
* CircleCI: xx30-*-maximized additional step to call download_clean_me.sh prior of building boards so that me.bin is dopped in place. This should be done by users prior of building xx30-*-maximized boards locally, which is imitated in CircleCI builds (look at .circleci/config.yaml for innoextract host added dependency and board buildings. Results on github for each commit).
2020-12-02 22:01:44 +00:00
|
|
|
command: |
|
|
|
|
./blobs/xx30/download_clean_me.sh
|
|
|
|
- run:
|
|
|
|
name: x230-maximized
|
|
|
|
command: |
|
|
|
|
rm -rf build/x230-maximized/* build/log/* && make CPUS=4 V=1 BOARD=x230-maximized || touch /tmp/failed_build
|
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output x230-maximized hashes
|
|
|
|
command: |
|
|
|
|
cat build/x230-maximized/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for x230-maximized
|
|
|
|
command: |
|
|
|
|
tar zcvf build/x230-maximized/logs.tar.gz ./build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/x230-maximized
|
|
|
|
|
|
|
|
- run:
|
2020-12-03 00:37:34 +00:00
|
|
|
name: Download and neuter xx30 ME (keep generated GBE and extracted IFD in tree)
|
Add xx30-maximized and xx30-hotp-maximized boards (11.5mb flashable BIOS regions, reproducible me.bin and generated gbe.bin and totally externally and internally flashable roms) (#703)
* xx30-*-maximized: update flashrom options removing --ifd bios option, keeping whole flash of rom internally. WARNING: ifd needs to be initially unlocked through ifdtool -u on 8mb bottom SPI backup. YOU CANNOT COME FROM 1VYRAIN. IF COMING FROM SKULLS, YOU MUST HAVE RAN OPTIONAL -u OPTION FROM SKULLS. PLEASE UPGRADE ONLY AFTER HAVING A PHYSICAL BACKUP OF BOTH SPI FLASH CHIPS. MORE INFORMATION UNDER https://github.com/osresearch/heads/pull/703. This will guarantee that future flash of produced rom will reflash the ROM totally, where heads make sure of adding users customizations (public key, /etc/config.user) when internally flashed. Unfortunately, if you flash externally, you will have to reinject your public key and readd /etc/config customizations.
* Adding generated bincfg coreboot 4.8.1 patch (merged under coreboot 4.13 and backported here to 4.8.1), resulting in gbe.bin under blobs/xx30/gbe.bin and instructions to replicate in README prior of automation (under repo). Note that MAC under gbe.bin is fixed to DE:AD:C0:FF:EE unless extract.sh script is ran on external backup to keep current user's MAC (Thanks to @Thrilleratplay's contribution!)
* xx30 blobs: add two blobs management scripts for xx30: extract from local backup/download+neuter ME
extract.sh: extract from external backup: gbe.bin, neuter under me.bin and maximize BIOS+reduce ME regions under unlocked ifd.bin.
download_clean_me.sh: download and verify Lenovo latest ME version from website, and drop me.bin in place.
Note: me.bin is 98kb, containing only BUP and ROMP partitions which cannot be modified nor deleted else computer won't boot. As a result, BIOS region is maximized in ifd.bin to 11.5mb and coreboot config takes advantage of that freed space.
* CircleCI: xx30-*-maximized additional step to call download_clean_me.sh prior of building boards so that me.bin is dopped in place. This should be done by users prior of building xx30-*-maximized boards locally, which is imitated in CircleCI builds (look at .circleci/config.yaml for innoextract host added dependency and board buildings. Results on github for each commit).
2020-12-02 22:01:44 +00:00
|
|
|
command: |
|
|
|
|
./blobs/xx30/download_clean_me.sh
|
|
|
|
- run:
|
|
|
|
name: t430-hotp-maximized
|
|
|
|
command: |
|
|
|
|
rm -rf build/t430-hotp-maximized/* build/log/* && make CPUS=4 V=1 BOARD=t430-hotp-maximized || touch /tmp/failed_build
|
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output t430-hotp-maximized hashes
|
|
|
|
command: |
|
|
|
|
cat build/t430-hotp-maximized/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for t430-hotp-maximized
|
|
|
|
command: |
|
|
|
|
tar zcvf build/t430-hotp-maximized/logs.tar.gz ./build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/t430-hotp-maximized
|
|
|
|
|
|
|
|
- run:
|
2020-12-03 00:37:34 +00:00
|
|
|
name: Download and neuter xx30 ME (keep generated GBE and extracted IFD in tree)
|
Add xx30-maximized and xx30-hotp-maximized boards (11.5mb flashable BIOS regions, reproducible me.bin and generated gbe.bin and totally externally and internally flashable roms) (#703)
* xx30-*-maximized: update flashrom options removing --ifd bios option, keeping whole flash of rom internally. WARNING: ifd needs to be initially unlocked through ifdtool -u on 8mb bottom SPI backup. YOU CANNOT COME FROM 1VYRAIN. IF COMING FROM SKULLS, YOU MUST HAVE RAN OPTIONAL -u OPTION FROM SKULLS. PLEASE UPGRADE ONLY AFTER HAVING A PHYSICAL BACKUP OF BOTH SPI FLASH CHIPS. MORE INFORMATION UNDER https://github.com/osresearch/heads/pull/703. This will guarantee that future flash of produced rom will reflash the ROM totally, where heads make sure of adding users customizations (public key, /etc/config.user) when internally flashed. Unfortunately, if you flash externally, you will have to reinject your public key and readd /etc/config customizations.
* Adding generated bincfg coreboot 4.8.1 patch (merged under coreboot 4.13 and backported here to 4.8.1), resulting in gbe.bin under blobs/xx30/gbe.bin and instructions to replicate in README prior of automation (under repo). Note that MAC under gbe.bin is fixed to DE:AD:C0:FF:EE unless extract.sh script is ran on external backup to keep current user's MAC (Thanks to @Thrilleratplay's contribution!)
* xx30 blobs: add two blobs management scripts for xx30: extract from local backup/download+neuter ME
extract.sh: extract from external backup: gbe.bin, neuter under me.bin and maximize BIOS+reduce ME regions under unlocked ifd.bin.
download_clean_me.sh: download and verify Lenovo latest ME version from website, and drop me.bin in place.
Note: me.bin is 98kb, containing only BUP and ROMP partitions which cannot be modified nor deleted else computer won't boot. As a result, BIOS region is maximized in ifd.bin to 11.5mb and coreboot config takes advantage of that freed space.
* CircleCI: xx30-*-maximized additional step to call download_clean_me.sh prior of building boards so that me.bin is dopped in place. This should be done by users prior of building xx30-*-maximized boards locally, which is imitated in CircleCI builds (look at .circleci/config.yaml for innoextract host added dependency and board buildings. Results on github for each commit).
2020-12-02 22:01:44 +00:00
|
|
|
command: |
|
|
|
|
./blobs/xx30/download_clean_me.sh
|
|
|
|
- run:
|
|
|
|
name: x230-maximized
|
|
|
|
command: |
|
|
|
|
rm -rf build/x230-maximized/* build/log/* && make CPUS=4 V=1 BOARD=x230-maximized || touch /tmp/failed_build
|
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output x230-maximized hashes
|
|
|
|
command: |
|
|
|
|
cat build/x230-maximized/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for x230-maximized
|
|
|
|
command: |
|
|
|
|
tar zcvf build/x230-maximized/logs.tar.gz ./build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/x230-maximized
|
|
|
|
|
|
|
|
- run:
|
2020-12-03 00:37:34 +00:00
|
|
|
name: Download and neuter xx30 ME (keep generated GBE and extracted IFD in tree)
|
Add xx30-maximized and xx30-hotp-maximized boards (11.5mb flashable BIOS regions, reproducible me.bin and generated gbe.bin and totally externally and internally flashable roms) (#703)
* xx30-*-maximized: update flashrom options removing --ifd bios option, keeping whole flash of rom internally. WARNING: ifd needs to be initially unlocked through ifdtool -u on 8mb bottom SPI backup. YOU CANNOT COME FROM 1VYRAIN. IF COMING FROM SKULLS, YOU MUST HAVE RAN OPTIONAL -u OPTION FROM SKULLS. PLEASE UPGRADE ONLY AFTER HAVING A PHYSICAL BACKUP OF BOTH SPI FLASH CHIPS. MORE INFORMATION UNDER https://github.com/osresearch/heads/pull/703. This will guarantee that future flash of produced rom will reflash the ROM totally, where heads make sure of adding users customizations (public key, /etc/config.user) when internally flashed. Unfortunately, if you flash externally, you will have to reinject your public key and readd /etc/config customizations.
* Adding generated bincfg coreboot 4.8.1 patch (merged under coreboot 4.13 and backported here to 4.8.1), resulting in gbe.bin under blobs/xx30/gbe.bin and instructions to replicate in README prior of automation (under repo). Note that MAC under gbe.bin is fixed to DE:AD:C0:FF:EE unless extract.sh script is ran on external backup to keep current user's MAC (Thanks to @Thrilleratplay's contribution!)
* xx30 blobs: add two blobs management scripts for xx30: extract from local backup/download+neuter ME
extract.sh: extract from external backup: gbe.bin, neuter under me.bin and maximize BIOS+reduce ME regions under unlocked ifd.bin.
download_clean_me.sh: download and verify Lenovo latest ME version from website, and drop me.bin in place.
Note: me.bin is 98kb, containing only BUP and ROMP partitions which cannot be modified nor deleted else computer won't boot. As a result, BIOS region is maximized in ifd.bin to 11.5mb and coreboot config takes advantage of that freed space.
* CircleCI: xx30-*-maximized additional step to call download_clean_me.sh prior of building boards so that me.bin is dopped in place. This should be done by users prior of building xx30-*-maximized boards locally, which is imitated in CircleCI builds (look at .circleci/config.yaml for innoextract host added dependency and board buildings. Results on github for each commit).
2020-12-02 22:01:44 +00:00
|
|
|
command: |
|
|
|
|
./blobs/xx30/download_clean_me.sh
|
|
|
|
- run:
|
|
|
|
name: x230-hotp-maximized
|
|
|
|
command: |
|
|
|
|
rm -rf build/x230-hotp-maximized/* build/log/* && make CPUS=4 V=1 BOARD=x230-hotp-maximized || touch /tmp/failed_build
|
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output x230-hotp-maximized hashes
|
|
|
|
command: |
|
|
|
|
cat build/x230-hotp-maximized/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for x230-hotp-maximized
|
|
|
|
command: |
|
|
|
|
tar zcvf build/x230-hotp-maximized/logs.tar.gz ./build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/x230-hotp-maximized
|
|
|
|
|
|
|
|
|
|
|
|
- run:
|
2020-12-03 00:37:34 +00:00
|
|
|
name: Download and neuter xx30 ME (keep generated GBE and extracted IFD in tree)
|
Add xx30-maximized and xx30-hotp-maximized boards (11.5mb flashable BIOS regions, reproducible me.bin and generated gbe.bin and totally externally and internally flashable roms) (#703)
* xx30-*-maximized: update flashrom options removing --ifd bios option, keeping whole flash of rom internally. WARNING: ifd needs to be initially unlocked through ifdtool -u on 8mb bottom SPI backup. YOU CANNOT COME FROM 1VYRAIN. IF COMING FROM SKULLS, YOU MUST HAVE RAN OPTIONAL -u OPTION FROM SKULLS. PLEASE UPGRADE ONLY AFTER HAVING A PHYSICAL BACKUP OF BOTH SPI FLASH CHIPS. MORE INFORMATION UNDER https://github.com/osresearch/heads/pull/703. This will guarantee that future flash of produced rom will reflash the ROM totally, where heads make sure of adding users customizations (public key, /etc/config.user) when internally flashed. Unfortunately, if you flash externally, you will have to reinject your public key and readd /etc/config customizations.
* Adding generated bincfg coreboot 4.8.1 patch (merged under coreboot 4.13 and backported here to 4.8.1), resulting in gbe.bin under blobs/xx30/gbe.bin and instructions to replicate in README prior of automation (under repo). Note that MAC under gbe.bin is fixed to DE:AD:C0:FF:EE unless extract.sh script is ran on external backup to keep current user's MAC (Thanks to @Thrilleratplay's contribution!)
* xx30 blobs: add two blobs management scripts for xx30: extract from local backup/download+neuter ME
extract.sh: extract from external backup: gbe.bin, neuter under me.bin and maximize BIOS+reduce ME regions under unlocked ifd.bin.
download_clean_me.sh: download and verify Lenovo latest ME version from website, and drop me.bin in place.
Note: me.bin is 98kb, containing only BUP and ROMP partitions which cannot be modified nor deleted else computer won't boot. As a result, BIOS region is maximized in ifd.bin to 11.5mb and coreboot config takes advantage of that freed space.
* CircleCI: xx30-*-maximized additional step to call download_clean_me.sh prior of building boards so that me.bin is dopped in place. This should be done by users prior of building xx30-*-maximized boards locally, which is imitated in CircleCI builds (look at .circleci/config.yaml for innoextract host added dependency and board buildings. Results on github for each commit).
2020-12-02 22:01:44 +00:00
|
|
|
command: |
|
|
|
|
./blobs/xx30/download_clean_me.sh
|
|
|
|
- run:
|
|
|
|
name: t430-maximized
|
|
|
|
command: |
|
|
|
|
rm -rf build/t430-maximized/* build/log/* && make CPUS=4 V=1 BOARD=t430-maximized || touch /tmp/failed_build
|
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output t430-maximized hashes
|
|
|
|
command: |
|
|
|
|
cat build/t430-maximized/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for t430-maximized
|
|
|
|
command: |
|
|
|
|
tar zcvf build/t430-maximized/logs.tar.gz ./build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/t430-maximized
|
|
|
|
|
2020-06-06 16:35:13 +00:00
|
|
|
- run:
|
|
|
|
name: qemu-coreboot
|
|
|
|
command: |
|
2020-11-02 22:41:36 +00:00
|
|
|
rm -rf build/qemu-coreboot/* build/log/* && make CPUS=4 V=1 BOARD=qemu-coreboot || touch /tmp/failed_build
|
2020-06-06 16:35:13 +00:00
|
|
|
no_output_timeout: 3h
|
2020-11-02 22:41:36 +00:00
|
|
|
- run:
|
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
2020-06-06 16:35:13 +00:00
|
|
|
- run:
|
|
|
|
name: Output qemu-coreboot hashes
|
|
|
|
command: |
|
|
|
|
cat build/qemu-coreboot/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for qemu-coreboot
|
|
|
|
command: |
|
|
|
|
tar zcvf build/qemu-coreboot/logs.tar.gz build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/qemu-coreboot
|
|
|
|
|
2020-11-02 22:41:36 +00:00
|
|
|
- run:
|
|
|
|
name: qemu-coreboot-fbwhiptail
|
|
|
|
command: |
|
|
|
|
rm -rf build/qemu-coreboot-fbwhiptail/* build/log/* && make CPUS=4 V=1 BOARD=qemu-coreboot-fbwhiptail || touch /tmp/failed_build
|
|
|
|
no_output_timeout: 3h
|
|
|
|
- run:
|
|
|
|
name: Output build failing logs
|
|
|
|
command: |
|
|
|
|
if [[ -f /tmp/failed_build ]]; then find ./build/ -name "*.log" -type f -mmin -1|while read log; do echo ""; echo '==>' "$log" '<=='; echo ""; cat $log;done; exit 1;else echo "Not failing. Continuing..."; fi
|
|
|
|
- run:
|
|
|
|
name: Output qemu-coreboot-fbwhiptail hashes
|
|
|
|
command: |
|
|
|
|
cat build/qemu-coreboot-fbwhiptail/hashes.txt \
|
|
|
|
- run:
|
|
|
|
name: Archiving build logs for qemu-coreboot-fbwhiptail
|
|
|
|
command: |
|
|
|
|
tar zcvf build/qemu-coreboot-fbwhiptail/logs.tar.gz build/log/*
|
|
|
|
- store-artifacts:
|
|
|
|
path: build/qemu-coreboot-fbwhiptail
|
|
|
|
|
2020-05-04 16:07:14 +00:00
|
|
|
- save_cache:
|
2020-08-11 20:38:26 +00:00
|
|
|
#Generate cache for the same musl-cross module definition if hash is not previously existing
|
2020-08-20 19:15:46 +00:00
|
|
|
key: heads-cross-musl-{{ checksum "/tmp/musl-cross_module_and_patches.sha256sums" }}{{ .Environment.CACHE_VERSION }}
|
2020-08-11 20:38:26 +00:00
|
|
|
paths:
|
|
|
|
- crossgcc
|
|
|
|
- build/musl-cross-*
|
|
|
|
|
|
|
|
- save_cache:
|
|
|
|
#Generate cache for the exact same modules definitions if hash is not previously existing
|
2020-08-20 19:15:46 +00:00
|
|
|
key: heads-modules-and-patches-{{ checksum "/tmp/all_modules_and_patches.sha256sums" }}{{ .Environment.CACHE_VERSION }}
|
2020-05-04 16:07:14 +00:00
|
|
|
paths:
|
|
|
|
- packages
|
|
|
|
- crossgcc
|
|
|
|
- build
|
2020-10-26 14:19:57 +00:00
|
|
|
|
2018-09-15 09:42:42 +00:00
|
|
|
workflows:
|
|
|
|
version: 2
|
|
|
|
build_and_test:
|
|
|
|
jobs:
|
|
|
|
- build
|