xx20 boards and circleci: Have boards download extract and neuter me by board config

Fix https://github.com/linuxboot/heads/issues/1569 part of error linked to me not being available in blobs/xx20/me.bin

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
This commit is contained in:
Thierry Laurion 2024-01-02 13:23:33 -05:00
parent 753aa39503
commit 197914b396
No known key found for this signature in database
GPG Key ID: 9A53E1BB3FF00461
7 changed files with 54 additions and 9 deletions

View File

@ -90,10 +90,6 @@ jobs:
#If precedent cache not found. Restore cache for musl-cross-make module digest (rarely modified). #If precedent cache not found. Restore cache for musl-cross-make module digest (rarely modified).
#Otherwise, we build cleanly. #Otherwise, we build cleanly.
- heads-musl-cross-{{ checksum "./tmpDir/musl-cross.sha256sums" }}{{ .Environment.CACHE_VERSION }} - heads-musl-cross-{{ checksum "./tmpDir/musl-cross.sha256sums" }}{{ .Environment.CACHE_VERSION }}
- run:
name: Download and neuter xx20 ME (keep generated GBE and extracted IFD in tree)
command: |
./blobs/xx20/download_parse_me.sh
- persist_to_workspace: - persist_to_workspace:
root: ~/ root: ~/

View File

@ -29,7 +29,6 @@ CONFIG_PCIUTILS=y
CONFIG_IO386=y CONFIG_IO386=y
export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y
#Remote attestation support #Remote attestation support
#TPM based requirements #TPM based requirements
export CONFIG_TPM=y export CONFIG_TPM=y
@ -67,3 +66,12 @@ export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=
# xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin # xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin
# - blobs/xx20/download_parse_me.sh # - blobs/xx20/download_parse_me.sh
# To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region. # To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region.
# Make the Coreboot build depend on the following 3rd party blobs:
$(build)/coreboot-$(CONFIG_COREBOOT_VERSION)/$(BOARD)/.build: \
$(pwd)/blobs/xx20/me.bin
$(pwd)/blobs/xx20/me.bin:
COREBOOT_DIR="$(build)/$(coreboot_base_dir)" \
$(pwd)/blobs/xx20/download_parse_me.sh

View File

@ -29,7 +29,6 @@ CONFIG_PCIUTILS=y
CONFIG_IO386=y CONFIG_IO386=y
export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y
#Remote attestation support #Remote attestation support
#TPM based requirements #TPM based requirements
export CONFIG_TPM=y export CONFIG_TPM=y
@ -67,3 +66,12 @@ export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=
# xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin # xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin
# - blobs/xx20/download_parse_me.sh # - blobs/xx20/download_parse_me.sh
# To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region. # To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region.
# Make the Coreboot build depend on the following 3rd party blobs:
$(build)/coreboot-$(CONFIG_COREBOOT_VERSION)/$(BOARD)/.build: \
$(pwd)/blobs/xx20/me.bin
$(pwd)/blobs/xx20/me.bin:
COREBOOT_DIR="$(build)/$(coreboot_base_dir)" \
$(pwd)/blobs/xx20/download_parse_me.sh

View File

@ -33,7 +33,6 @@ CONFIG_PCIUTILS=y
CONFIG_IO386=y CONFIG_IO386=y
export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y
#Remote attestation support #Remote attestation support
#TPM based requirements #TPM based requirements
export CONFIG_TPM=y export CONFIG_TPM=y
@ -71,3 +70,12 @@ export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=
# xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin # xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin
# - blobs/xx20/download_parse_me.sh # - blobs/xx20/download_parse_me.sh
# To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region. # To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region.
# Make the Coreboot build depend on the following 3rd party blobs:
$(build)/coreboot-$(CONFIG_COREBOOT_VERSION)/$(BOARD)/.build: \
$(pwd)/blobs/xx20/me.bin
$(pwd)/blobs/xx20/me.bin:
COREBOOT_DIR="$(build)/$(coreboot_base_dir)" \
$(pwd)/blobs/xx20/download_parse_me.sh

View File

@ -69,3 +69,12 @@ export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=
# xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin # xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin
# - blobs/xx20/download_parse_me.sh # - blobs/xx20/download_parse_me.sh
# To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region. # To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region.
# Make the Coreboot build depend on the following 3rd party blobs:
$(build)/coreboot-$(CONFIG_COREBOOT_VERSION)/$(BOARD)/.build: \
$(pwd)/blobs/xx20/me.bin
$(pwd)/blobs/xx20/me.bin:
COREBOOT_DIR="$(build)/$(coreboot_base_dir)" \
$(pwd)/blobs/xx20/download_parse_me.sh

View File

@ -33,7 +33,6 @@ CONFIG_PCIUTILS=y
CONFIG_IO386=y CONFIG_IO386=y
export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y
#Remote attestation support #Remote attestation support
#TPM based requirements #TPM based requirements
export CONFIG_TPM=y export CONFIG_TPM=y
@ -71,3 +70,12 @@ export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=
# xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin # xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin
# - blobs/xx20/download_parse_me.sh # - blobs/xx20/download_parse_me.sh
# To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region. # To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region.
# Make the Coreboot build depend on the following 3rd party blobs:
$(build)/coreboot-$(CONFIG_COREBOOT_VERSION)/$(BOARD)/.build: \
$(pwd)/blobs/xx20/me.bin
$(pwd)/blobs/xx20/me.bin:
COREBOOT_DIR="$(build)/$(coreboot_base_dir)" \
$(pwd)/blobs/xx20/download_parse_me.sh

View File

@ -33,7 +33,6 @@ CONFIG_PCIUTILS=y
CONFIG_IO386=y CONFIG_IO386=y
export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y export CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE=y
#Remote attestation support #Remote attestation support
#TPM based requirements #TPM based requirements
export CONFIG_TPM=y export CONFIG_TPM=y
@ -71,3 +70,12 @@ export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:ich_spi_mode=
# xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin # xx20 boards require of you initially call one of the following to habe gbe.bin ifd.bin and me.bin
# - blobs/xx20/download_parse_me.sh # - blobs/xx20/download_parse_me.sh
# To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region. # To download Lenovo update ME binary, neuter+deactivate ME, produce reduced IFD ME region and expended BIOS IFD region.
# Make the Coreboot build depend on the following 3rd party blobs:
$(build)/coreboot-$(CONFIG_COREBOOT_VERSION)/$(BOARD)/.build: \
$(pwd)/blobs/xx20/me.bin
$(pwd)/blobs/xx20/me.bin:
COREBOOT_DIR="$(build)/$(coreboot_base_dir)" \
$(pwd)/blobs/xx20/download_parse_me.sh