mirror of
https://github.com/linuxboot/heads.git
synced 2024-12-18 20:47:55 +00:00
xx20 boards and circleci: Have boards download extract and neuter me by board config
Fix https://github.com/linuxboot/heads/issues/1569 part of error linked to me not being available in blobs/xx20/me.bin Signed-off-by: Thierry Laurion <insurgo@riseup.net>
This commit is contained in:
parent
753aa39503
commit
197914b396
@ -90,10 +90,6 @@ jobs:
|
||||
#If precedent cache not found. Restore cache for musl-cross-make module digest (rarely modified).
|
||||
#Otherwise, we build cleanly.
|
||||
- heads-musl-cross-{{ checksum "./tmpDir/musl-cross.sha256sums" }}{{ .Environment.CACHE_VERSION }}
|
||||
- run:
|
||||
name: Download and neuter xx20 ME (keep generated GBE and extracted IFD in tree)
|
||||
command: |
|
||||
./blobs/xx20/download_parse_me.sh
|
||||
|
||||
- persist_to_workspace:
|
||||
root: ~/
|
||||
|
@ -29,7 +29,6 @@ CONFIG_PCIUTILS=y
|
||||
CONFIG_IO386=y
|
||||
export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y
|
||||
|
||||
|
||||
#Remote attestation support
|
||||
#TPM based requirements
|
||||
export CONFIG_TPM=y
|
||||
@ -67,3 +66,12 @@ export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=
|
||||
# xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin
|
||||
# - blobs/xx20/download_parse_me.sh
|
||||
# To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region.
|
||||
|
||||
# Make the Coreboot build depend on the following 3rd party blobs:
|
||||
$(build)/coreboot-$(CONFIG_COREBOOT_VERSION)/$(BOARD)/.build: \
|
||||
$(pwd)/blobs/xx20/me.bin
|
||||
|
||||
|
||||
$(pwd)/blobs/xx20/me.bin:
|
||||
COREBOOT_DIR="$(build)/$(coreboot_base_dir)" \
|
||||
$(pwd)/blobs/xx20/download_parse_me.sh
|
||||
|
@ -29,7 +29,6 @@ CONFIG_PCIUTILS=y
|
||||
CONFIG_IO386=y
|
||||
export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y
|
||||
|
||||
|
||||
#Remote attestation support
|
||||
#TPM based requirements
|
||||
export CONFIG_TPM=y
|
||||
@ -67,3 +66,12 @@ export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=
|
||||
# xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin
|
||||
# - blobs/xx20/download_parse_me.sh
|
||||
# To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region.
|
||||
|
||||
# Make the Coreboot build depend on the following 3rd party blobs:
|
||||
$(build)/coreboot-$(CONFIG_COREBOOT_VERSION)/$(BOARD)/.build: \
|
||||
$(pwd)/blobs/xx20/me.bin
|
||||
|
||||
|
||||
$(pwd)/blobs/xx20/me.bin:
|
||||
COREBOOT_DIR="$(build)/$(coreboot_base_dir)" \
|
||||
$(pwd)/blobs/xx20/download_parse_me.sh
|
||||
|
@ -33,7 +33,6 @@ CONFIG_PCIUTILS=y
|
||||
CONFIG_IO386=y
|
||||
export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y
|
||||
|
||||
|
||||
#Remote attestation support
|
||||
#TPM based requirements
|
||||
export CONFIG_TPM=y
|
||||
@ -71,3 +70,12 @@ export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=
|
||||
# xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin
|
||||
# - blobs/xx20/download_parse_me.sh
|
||||
# To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region.
|
||||
|
||||
# Make the Coreboot build depend on the following 3rd party blobs:
|
||||
$(build)/coreboot-$(CONFIG_COREBOOT_VERSION)/$(BOARD)/.build: \
|
||||
$(pwd)/blobs/xx20/me.bin
|
||||
|
||||
|
||||
$(pwd)/blobs/xx20/me.bin:
|
||||
COREBOOT_DIR="$(build)/$(coreboot_base_dir)" \
|
||||
$(pwd)/blobs/xx20/download_parse_me.sh
|
||||
|
@ -69,3 +69,12 @@ export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=
|
||||
# xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin
|
||||
# - blobs/xx20/download_parse_me.sh
|
||||
# To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region.
|
||||
|
||||
# Make the Coreboot build depend on the following 3rd party blobs:
|
||||
$(build)/coreboot-$(CONFIG_COREBOOT_VERSION)/$(BOARD)/.build: \
|
||||
$(pwd)/blobs/xx20/me.bin
|
||||
|
||||
|
||||
$(pwd)/blobs/xx20/me.bin:
|
||||
COREBOOT_DIR="$(build)/$(coreboot_base_dir)" \
|
||||
$(pwd)/blobs/xx20/download_parse_me.sh
|
||||
|
@ -33,7 +33,6 @@ CONFIG_PCIUTILS=y
|
||||
CONFIG_IO386=y
|
||||
export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y
|
||||
|
||||
|
||||
#Remote attestation support
|
||||
#TPM based requirements
|
||||
export CONFIG_TPM=y
|
||||
@ -71,3 +70,12 @@ export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=
|
||||
# xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin
|
||||
# - blobs/xx20/download_parse_me.sh
|
||||
# To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region.
|
||||
|
||||
# Make the Coreboot build depend on the following 3rd party blobs:
|
||||
$(build)/coreboot-$(CONFIG_COREBOOT_VERSION)/$(BOARD)/.build: \
|
||||
$(pwd)/blobs/xx20/me.bin
|
||||
|
||||
|
||||
$(pwd)/blobs/xx20/me.bin:
|
||||
COREBOOT_DIR="$(build)/$(coreboot_base_dir)" \
|
||||
$(pwd)/blobs/xx20/download_parse_me.sh
|
||||
|
@ -33,7 +33,6 @@ CONFIG_PCIUTILS=y
|
||||
CONFIG_IO386=y
|
||||
export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y
|
||||
|
||||
|
||||
#Remote attestation support
|
||||
#TPM based requirements
|
||||
export CONFIG_TPM=y
|
||||
@ -71,3 +70,12 @@ export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=
|
||||
# xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin
|
||||
# - blobs/xx20/download_parse_me.sh
|
||||
# To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region.
|
||||
|
||||
# Make the Coreboot build depend on the following 3rd party blobs:
|
||||
$(build)/coreboot-$(CONFIG_COREBOOT_VERSION)/$(BOARD)/.build: \
|
||||
$(pwd)/blobs/xx20/me.bin
|
||||
|
||||
|
||||
$(pwd)/blobs/xx20/me.bin:
|
||||
COREBOOT_DIR="$(build)/$(coreboot_base_dir)" \
|
||||
$(pwd)/blobs/xx20/download_parse_me.sh
|
||||
|
Loading…
Reference in New Issue
Block a user