ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2024-12-21 22:07:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
a36aa2562d
heads/boards/librem_14/librem_14.config

44 lines
1.0 KiB
Makefile
Raw Normal View History

Add new board Purism Librem 14 Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2020-12-04 18:46:03 +00:00
# Configuration for a librem 14
librem_* (except L1UM): Linux 6.1, coreboot gfx init with efifb Update all Librems except L1UM (but including L1UM v2) to Linux 6.1.8. Use coreboot native graphics init. Raise maximum framebuffer size for laptops to 3840x2160 (desktops default to this, but laptops default to a lower value). Remove DRM modules from Linux 6.1.8 and add EFIFB. Remove Heads kernel command line options relating to IOMMU and i915, which are no longer needed. Remove OS kernel options relating to IOMMU. For Librem 13/15/14/Mini, this fixes issues booting with 4K displays attached, which were resulting in crashes due to the framebuffer memory not being reserved properly. memtest86+ now passes with a 4K display attached. For Librem L1UM v2, framebuffer boot now works. Librem L1UM remains on Linux 5.10 with Heads kernel graphic init (framebuffer boot still does not work). coreboot 4.11 has native graphics init for Aspeed, but only in text mode. Backporting the linear framebuffer support appears to be possible - the patch applied cleanly - but it did not work initially and will need more investigation. Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2023-08-29 18:01:27 +00:00
CONFIG_LINUX_CONFIG=config/linux-librem_common-6.1.8.config
Add new board Purism Librem 14 Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2020-12-04 18:46:03 +00:00
CONFIG_COREBOOT_CONFIG=config/coreboot-librem_14.config
export CONFIG_COREBOOT=y
board/librem_{13/14/15/mini}: Use Purism repo for coreboot Use Purism's repo for all Librem boards other than the Librem Server L1UM. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2021-03-29 19:41:19 +00:00
export CONFIG_COREBOOT_VERSION=purism
librem_* (except L1UM): Linux 6.1, coreboot gfx init with efifb Update all Librems except L1UM (but including L1UM v2) to Linux 6.1.8. Use coreboot native graphics init. Raise maximum framebuffer size for laptops to 3840x2160 (desktops default to this, but laptops default to a lower value). Remove DRM modules from Linux 6.1.8 and add EFIFB. Remove Heads kernel command line options relating to IOMMU and i915, which are no longer needed. Remove OS kernel options relating to IOMMU. For Librem 13/15/14/Mini, this fixes issues booting with 4K displays attached, which were resulting in crashes due to the framebuffer memory not being reserved properly. memtest86+ now passes with a 4K display attached. For Librem L1UM v2, framebuffer boot now works. Librem L1UM remains on Linux 5.10 with Heads kernel graphic init (framebuffer boot still does not work). coreboot 4.11 has native graphics init for Aspeed, but only in text mode. Backporting the linear framebuffer support appears to be possible - the patch applied cleanly - but it did not work initially and will need more investigation. Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2023-08-29 18:01:27 +00:00
export CONFIG_LINUX_VERSION=6.1.8
Add new board Purism Librem 14 Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2020-12-04 18:46:03 +00:00
board/librem_*: Switch to cryptsetup2 Required to decrypt some volumes encrypted via LUKS2 (eg, Qubes 4.1 dom0 / root partition) Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2022-01-27 19:26:26 +00:00
CONFIG_CRYPTSETUP2=y
flash.sh: FLASHROM_OPTIONS->FLASH_OPTIONS: require FLASH_OPTIONS to specify flash program in board configs - boards: switch flashrom->flashprog, FLASH_OPTIONS: flashprog memory --progress --programmer internal TODO: check, Might break: - xx20 : x220/t420/t520: used hwseq: verify compat - legacy : not sure --ifd bios are support: verify compat (and drop, future PR drop legacy boards anyway...) - talos: linux_mtd is used: verify compat Tested: - x230 works with awesome progress bar on read, erase and write. Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-09-01 19:02:42 +00:00
CONFIG_FLASHPROG=y
Add new board Purism Librem 14 Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2020-12-04 18:46:03 +00:00
CONFIG_FLASHTOOLS=y
CONFIG_GPG2=y
CONFIG_KEXEC=y
CONFIG_UTIL_LINUX=y
CONFIG_LVM2=y
CONFIG_MBEDTLS=y
CONFIG_PCIUTILS=y
CONFIG_POPT=y
CONFIG_QRENCODE=y
CONFIG_TPMTOTP=y
CONFIG_CAIRO=y
CONFIG_FBWHIPTAIL=y
CONFIG_HOTPKEY=y
CONFIG_LINUX_USB=y
boards/librem*, config/linux-librem*: Enable mobile tethering Enable mobile tethering on all Librem boards. Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2024-02-22 15:11:21 +00:00
CONFIG_MOBILE_TETHERING=y
Add new board Purism Librem 14 Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2020-12-04 18:46:03 +00:00
export CONFIG_TPM=y
Allow laptops to include optional USB keyboard support Laptops can include optional USB keyboard support (default off unless the board also sets the default to 'y'). The setting is in the configuration GUI. CONFIG_USER_USB_KEYBOARD is now the user-controlled setting on those boards. 'CONFIG_USB_KEYBOARD' is no longer used to avoid any conflict with prior releases that expect this to be a compile-time setting only (conflicts risk total lock out requiring hardware flash, so some caution is justified IMO). Boards previously exporting CONFIG_USB_KEYBOARD now export CONFIG_USB_KEYBOARD_REQUIRED. Those boards don't have built-in keyboards, USB keyboard is always enabled. (librem_mini, librem_mini_v2, librem_11, librem_l1um, librem_l1um_v2, talos-2, kgpe-d16_workstation-usb_keyboard, x230-hotp-maximized_usb-kb). Librem laptops now export CONFIG_SUPPORT_USB_KEYBOARD to enable optional support. The default is still 'off'. Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2024-01-09 14:43:28 +00:00
export CONFIG_SUPPORT_USB_KEYBOARD=y
Add new board Purism Librem 14 Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2020-12-04 18:46:03 +00:00
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
librem_* (except L1UM): Linux 6.1, coreboot gfx init with efifb Update all Librems except L1UM (but including L1UM v2) to Linux 6.1.8. Use coreboot native graphics init. Raise maximum framebuffer size for laptops to 3840x2160 (desktops default to this, but laptops default to a lower value). Remove DRM modules from Linux 6.1.8 and add EFIFB. Remove Heads kernel command line options relating to IOMMU and i915, which are no longer needed. Remove OS kernel options relating to IOMMU. For Librem 13/15/14/Mini, this fixes issues booting with 4K displays attached, which were resulting in crashes due to the framebuffer memory not being reserved properly. memtest86+ now passes with a 4K display attached. For Librem L1UM v2, framebuffer boot now works. Librem L1UM remains on Linux 5.10 with Heads kernel graphic init (framebuffer boot still does not work). coreboot 4.11 has native graphics init for Aspeed, but only in text mode. Backporting the linear framebuffer support appears to be possible - the patch applied cleanly - but it did not work initially and will need more investigation. Signed-off-by: Jonathon Hall <jonathon.hall@puri.sm>
2023-08-29 18:01:27 +00:00
export CONFIG_BOOT_KERNEL_ADD=""
export CONFIG_BOOT_KERNEL_REMOVE=""
Add new board Purism Librem 14 Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2020-12-04 18:46:03 +00:00
export CONFIG_BOARD_NAME="Librem 14"
boards FLASH_OPTIONS: remove --noverify/--noverify-all for now Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-09-01 22:38:01 +00:00
export CONFIG_FLASH_OPTIONS="flashprog memory --progress --programmer internal"
Add new board Purism Librem 14 Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2020-12-04 18:46:03 +00:00
export CONFIG_AUTO_BOOT_TIMEOUT=5
Add Root file hash feature Currently Heads will check files in /boot for tampering before booting into a system. It would be nice if you could use the trusted environment within Heads and extend this to check files in / itself. This new script adds that functionality, however due to the length of time it takes to perform these kinds of checks, it doesn't run automatically (yet). This feature can be configured from the config GUI - the root device/ directories to check can be set, and it can be configured to run during boot. To make this a bit easier to use, I added a feature to detect whether the hash file exists and if not, to display a more limited menu to the user guiding them to create the initial hash file. Otherwise it will display the date the file was last modified, which can be useful to determine how stale it is.
2021-09-03 21:20:46 +00:00
export CONFIG_ROOT_DEV="/dev/nvme0n1p2"
export CONFIG_ROOT_DIRLIST="bin boot lib sbin usr"
export CONFIG_ROOT_CHECK_AT_BOOT="n"
Reference in New Issue Copy Permalink