ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2024-12-20 13:33:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
9e0491e9db
heads/boards/librem_15v3/librem_15v3.config

45 lines
1.1 KiB
Makefile
Raw Normal View History

Add new board: Purism Librem Mini (#806) * patches/coreboot-4.12: Add patch for Cannonlake ME status Add patch print ME status regardless of enablement state Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> * modules: add purism-blobs module Rather than require users to manually run a script to download the required blobs to build Purism Librem boards, automate it so the correct version is automatically downloaded/extracted. Restrict to coreboot 4.12 for now since 4.8.1 still needs FSP blobs, which are not in module. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> * configs/linux-librem13v2: unset CONFIG_RETPOLINE Fixes compilation issue with newer kernels, ignored by older ones which don't need it Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> * Add new board: Librem Mini Add Librem Mini board patch for coreboot 4.12, board config and coreboot config. Continue reusing existing librem13v2 Linux config, same as all other Librem boards currently. Use new purism-blobs module. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> * board/librem*: rename for consistency Use 'librem_<board>' notation for consistency across all models. Rename linux config file since used by multiple Librem models. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> * CircleCI: add librem_mini board to test Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2020-09-02 18:39:37 +00:00
# Configuration for a librem_15v3
librem_* (except L1UM): Linux 6.1, coreboot gfx init with efifb Update all Librems except L1UM (but including L1UM v2) to Linux 6.1.8. Use coreboot native graphics init. Raise maximum framebuffer size for laptops to 3840x2160 (desktops default to this, but laptops default to a lower value). Remove DRM modules from Linux 6.1.8 and add EFIFB. Remove Heads kernel command line options relating to IOMMU and i915, which are no longer needed. Remove OS kernel options relating to IOMMU. For Librem 13/15/14/Mini, this fixes issues booting with 4K displays attached, which were resulting in crashes due to the framebuffer memory not being reserved properly. memtest86+ now passes with a 4K display attached. For Librem L1UM v2, framebuffer boot now works. Librem L1UM remains on Linux 5.10 with Heads kernel graphic init (framebuffer boot still does not work). coreboot 4.11 has native graphics init for Aspeed, but only in text mode. Backporting the linear framebuffer support appears to be possible - the patch applied cleanly - but it did not work initially and will need more investigation. Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2023-08-29 18:01:27 +00:00
CONFIG_LINUX_CONFIG=config/linux-librem_common-6.1.8.config
Add new board: Purism Librem Mini (#806) * patches/coreboot-4.12: Add patch for Cannonlake ME status Add patch print ME status regardless of enablement state Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> * modules: add purism-blobs module Rather than require users to manually run a script to download the required blobs to build Purism Librem boards, automate it so the correct version is automatically downloaded/extracted. Restrict to coreboot 4.12 for now since 4.8.1 still needs FSP blobs, which are not in module. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> * configs/linux-librem13v2: unset CONFIG_RETPOLINE Fixes compilation issue with newer kernels, ignored by older ones which don't need it Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> * Add new board: Librem Mini Add Librem Mini board patch for coreboot 4.12, board config and coreboot config. Continue reusing existing librem13v2 Linux config, same as all other Librem boards currently. Use new purism-blobs module. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> * board/librem*: rename for consistency Use 'librem_<board>' notation for consistency across all models. Rename linux config file since used by multiple Librem models. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm> * CircleCI: add librem_mini board to test Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2020-09-02 18:39:37 +00:00
CONFIG_COREBOOT_CONFIG=config/coreboot-librem_15v3.config
librem15v3: Add board and coreboot config files for Librem 15 v3
2018-04-20 21:49:30 +00:00
export CONFIG_COREBOOT=y
board/librem_{13/14/15/mini}: Use Purism repo for coreboot Use Purism's repo for all Librem boards other than the Librem Server L1UM. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2021-03-29 19:41:19 +00:00
export CONFIG_COREBOOT_VERSION=purism
librem_* (except L1UM): Linux 6.1, coreboot gfx init with efifb Update all Librems except L1UM (but including L1UM v2) to Linux 6.1.8. Use coreboot native graphics init. Raise maximum framebuffer size for laptops to 3840x2160 (desktops default to this, but laptops default to a lower value). Remove DRM modules from Linux 6.1.8 and add EFIFB. Remove Heads kernel command line options relating to IOMMU and i915, which are no longer needed. Remove OS kernel options relating to IOMMU. For Librem 13/15/14/Mini, this fixes issues booting with 4K displays attached, which were resulting in crashes due to the framebuffer memory not being reserved properly. memtest86+ now passes with a 4K display attached. For Librem L1UM v2, framebuffer boot now works. Librem L1UM remains on Linux 5.10 with Heads kernel graphic init (framebuffer boot still does not work). coreboot 4.11 has native graphics init for Aspeed, but only in text mode. Backporting the linear framebuffer support appears to be possible - the patch applied cleanly - but it did not work initially and will need more investigation. Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2023-08-29 18:01:27 +00:00
export CONFIG_LINUX_VERSION=6.1.8
coreboot: 4.8.1 fixed in Makefile, coreboot module and board configs (coreboot_481) to facilitate newer coreboot version integration and testing without breaking old fixed boards
2020-07-10 13:44:01 +00:00
board/librem_*: Switch to cryptsetup2 Required to decrypt some volumes encrypted via LUKS2 (eg, Qubes 4.1 dom0 / root partition) Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2022-01-27 19:26:26 +00:00
CONFIG_CRYPTSETUP2=y
librem15v3: Add board and coreboot config files for Librem 15 v3
2018-04-20 21:49:30 +00:00
CONFIG_FLASHROM=y
CONFIG_FLASHTOOLS=y
Enabled GPG2 in the Librem board config
2019-01-04 07:21:44 +00:00
CONFIG_GPG2=y
librem15v3: Add board and coreboot config files for Librem 15 v3
2018-04-20 21:49:30 +00:00
CONFIG_KEXEC=y
CONFIG_UTIL_LINUX=y
CONFIG_LVM2=y
CONFIG_MBEDTLS=y
CONFIG_PCIUTILS=y
CONFIG_POPT=y
CONFIG_QRENCODE=y
CONFIG_TPMTOTP=y
#CONFIG_SLANG=y
#CONFIG_NEWT=y
CONFIG_CAIRO=y
CONFIG_FBWHIPTAIL=y
Rename CONFIG_LIBREMKEY to CONFIG_HOTPKEY
2020-06-11 13:29:51 +00:00
CONFIG_HOTPKEY=y
librem15v3: Add board and coreboot config files for Librem 15 v3
2018-04-20 21:49:30 +00:00
CONFIG_LINUX_USB=y
export CONFIG_TPM=y
kexec-save-default: guard TPM LUKS usage with config option Add CONFIG_TPM_NO_LUKS_DISK_UNLOCK to allow Librem boards to opt out of using TPM to store LUKS key, and use it to guard the user option to add the disk encryption key to the TPM. Select this option for all Librem boards; all other boards which select CONFIG_TPM=y will have no change in functionality. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2019-11-21 22:01:50 +00:00
export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=y
gui-init: Opt into skipping QR code scan for Librem boards only Introduce CONFIG_TOTP_SKIP_QRCODE to skip this step and enable it on Librem boards. Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2023-06-23 12:18:59 +00:00
export CONFIG_TOTP_SKIP_QRCODE=y
librem15v3: Add board and coreboot config files for Librem 15 v3
2018-04-20 21:49:30 +00:00
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
librem_* (except L1UM): Linux 6.1, coreboot gfx init with efifb Update all Librems except L1UM (but including L1UM v2) to Linux 6.1.8. Use coreboot native graphics init. Raise maximum framebuffer size for laptops to 3840x2160 (desktops default to this, but laptops default to a lower value). Remove DRM modules from Linux 6.1.8 and add EFIFB. Remove Heads kernel command line options relating to IOMMU and i915, which are no longer needed. Remove OS kernel options relating to IOMMU. For Librem 13/15/14/Mini, this fixes issues booting with 4K displays attached, which were resulting in crashes due to the framebuffer memory not being reserved properly. memtest86+ now passes with a 4K display attached. For Librem L1UM v2, framebuffer boot now works. Librem L1UM remains on Linux 5.10 with Heads kernel graphic init (framebuffer boot still does not work). coreboot 4.11 has native graphics init for Aspeed, but only in text mode. Backporting the linear framebuffer support appears to be possible - the patch applied cleanly - but it did not work initially and will need more investigation. Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2023-08-29 18:01:27 +00:00
export CONFIG_BOOT_KERNEL_ADD=""
export CONFIG_BOOT_KERNEL_REMOVE=""
board/librem*.config: set default boot device to NVMe Automatic /boot detection will fall back to /dev/sd* Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2019-08-28 15:59:43 +00:00
export CONFIG_BOOT_DEV="/dev/nvme0n1p1"
Specify 'friendly' board name vs overriding CONFIG_BOOT_GUI_MENU_NAME This will allow it to be used elsewhere within the UI. Rename CONFIG_BOOT_GUI_MENU_NAME to better indicate use/function. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2020-10-23 22:18:20 +00:00
export CONFIG_BOARD_NAME="Librem 15 v3"
modules/flashrom: update to v1.2 release - Update flashrom module to v1.2. - Drop Thinkpad x220 patch as it's now properly supported. - Drop 'laptop=force_I_want_a_brick' from board FLASHROM_OPTIONS since it's no longer needed. - Migrate kgpe-d16 patch. The kgpe-d16 patch needed a complete overhaul when rebased against flashrom v1.2, and needs close inspection/testing as a result. The following changes were made from the previous patch: - dropped addition of 4-byte addressing (4BA), since now supported - dropped addtiion of Macronix MX25L256 and MX66L512 chips, since now supported - added 4BA erase commands for Winbond W25Q256 chip - dropped code to show progress indicator, since another PR already adds that Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2019-07-31 02:46:34 +00:00
export CONFIG_FLASHROM_OPTIONS="-p internal"
boards/librem*: enable automatic booting Add CONFIG_AUTO_BOOT_TIMEOUT=5 to Librem board configs, to enable automatic booting of default boot target after successful HOTP verifcation via a Librem Key Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2020-01-22 23:34:39 +00:00
export CONFIG_AUTO_BOOT_TIMEOUT=5
Add Root file hash feature Currently Heads will check files in /boot for tampering before booting into a system. It would be nice if you could use the trusted environment within Heads and extend this to check files in / itself. This new script adds that functionality, however due to the length of time it takes to perform these kinds of checks, it doesn't run automatically (yet). This feature can be configured from the config GUI - the root device/ directories to check can be set, and it can be configured to run during boot. To make this a bit easier to use, I added a feature to detect whether the hash file exists and if not, to display a more limited menu to the user guiding them to create the initial hash file. Otherwise it will display the date the file was last modified, which can be useful to determine how stale it is.
2021-09-03 21:20:46 +00:00
export CONFIG_ROOT_DEV="/dev/nvme0n1p2"
export CONFIG_ROOT_DIRLIST="bin boot lib sbin usr"
export CONFIG_ROOT_CHECK_AT_BOOT="n"
Reference in New Issue Copy Permalink