Unify upstream board config defaults

- Upstream boards will not deactivate TPM DUK
- Upstream will not force BRAND_NAME which currently defaults to Heads
- Upstream will not deactivate Qr code on screen output on HOTP sealing
- Upstream will not offer OEM reset defaults (deprecated and now default anyway)

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
This commit is contained in:
Thierry Laurion 2023-12-19 13:05:46 -05:00
parent b8a06c5351
commit 61843d890b
No known key found for this signature in database
GPG Key ID: E7B4A71658E36A93
78 changed files with 0 additions and 101 deletions

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a kgpe-d16_server with whiptail, permitting usage of gui-init on console without FB graphic
# per https://www.raptorengineering.com/coreboot/kgpe-d16-bmc-port-status.php work, with patches merged into Heads
#

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a kgpe-d16_server
# per https://www.raptorengineering.com/coreboot/kgpe-d16-bmc-port-status.php work, with patches merged into Heads
#

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a kgpe-d16_workstation-usb_keyboard
# Linux configuration supporting Nvidia, AMD GPUs, enforcing post on nvidia.
# Please make sure jumper forces external GPU

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a kgpe-d16_workstation
# Linux configuration supporting Nvidia, AMD GPUs, enforcing post on nvidia.
# Please make sure jumper forces external GPU

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a Leopard OCP node
# and it uses LinuxBoot, not coreboot.
CONFIG_LINUXBOOT=y

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Inherit the rest from the base Asus P8Z77-M Pro config.
include $(pwd)/boards/UNTESTED_p8z77-m_pro-tpm1-maximized/UNTESTED_p8z77-m_pro-tpm1-maximized.config

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for Asus P8Z77-M Pro
#This board is a better choice over the P8H61 for a cost effective Heads + QubesOS desktop with ME neuter+disable compatibility.
#The P8H61 ecosystem was complex with multiple variants

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for emulating LinuxBoot+Heads with qemu
#
export CONFIG_LINUXBOOT=y

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a Dell R630
# flashrom doesn't work on this mainboard
# and it is NERF, not coreboot.

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a Intel S2600wf server mainboard
# and it is NERF, not coreboot.
#

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a T420 running Qubes 4.1 and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a T420 running Qubes 4.1 and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a t420 running Qubes 4.1 and other OS, X220 is identical to X230 on the Linux Side of things.
export CONFIG_COREBOOT=y
export CONFIG_COREBOOT_VERSION=4.19

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a t430 with HOTP (Nitrokey/Purism USB Security dongle enabled HOTP support)
# running Qubes 4.1 and other OSes.
#

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Minimal configuration for a t430 to support flashrom and USB
# This top SPI flash image needed to flash legacy board counterpart internally
# This image can be flashed through 1vyrain and skulls

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a t430 running Qubes 4.1 and other OSes
# STATIC_OPTION_TABLE is set inside of coreboot config
#

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a T520 running Qubes and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a T520 running Qubes and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a T530 running Qubes and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a T530 running Qubes and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a T530 running Qubes and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a T530 running Qubes and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a Tioga Pass (Wiwynn) OCP node
# and it uses LinuxBoot, not coreboot.
CONFIG_LINUXBOOT=y

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a W530 running Qubes and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a W530 running Qubes and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a W530 running Qubes and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a W530 running Qubes and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a W530 running Qubes and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a W530 running Qubes and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a Winterfell OCP node
# and it uses LinuxBoot, not coreboot.
CONFIG_LINUXBOOT=y

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
// Copyright 2012-2017 the u-root Authors. All rights reserved
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a x220 running Qubes 4.1 and other OS, X220 is identical to X230 on the Linux Side of things.
export CONFIG_COREBOOT=y
export CONFIG_COREBOOT_VERSION=4.19

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
#! /bin/bash
set -e -o pipefail
loadkeys /etc/librem_11.map

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
keymaps 0-2,4-5,8,12
# Use volume and power keys on tablet to navigate menus
keycode 114 = Up

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for librem_11
CONFIG_LINUX_CONFIG=config/linux-librem_common-6.1.8.config
CONFIG_COREBOOT_CONFIG=config/coreboot-librem_11.config
@ -29,9 +28,6 @@ CONFIG_HOTPKEY=y
CONFIG_LINUX_USB=y
export CONFIG_TPM=n
export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=n
export CONFIG_TOTP_SKIP_QRCODE=n
export CONFIG_OEMRESET_OFFER_DEFAULTS=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a librem_13v2
CONFIG_LINUX_CONFIG=config/linux-librem_common-6.1.8.config
CONFIG_COREBOOT_CONFIG=config/coreboot-librem_13v2.config
@ -29,8 +28,6 @@ CONFIG_HOTPKEY=y
CONFIG_LINUX_USB=y
export CONFIG_TPM=y
export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=n
export CONFIG_TOTP_SKIP_QRCODE=n
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a librem_13v4
CONFIG_LINUX_CONFIG=config/linux-librem_common-6.1.8.config
CONFIG_COREBOOT_CONFIG=config/coreboot-librem_13v4.config
@ -29,8 +28,6 @@ CONFIG_HOTPKEY=y
CONFIG_LINUX_USB=y
export CONFIG_TPM=y
export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=n
export CONFIG_TOTP_SKIP_QRCODE=n
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a librem 14
CONFIG_LINUX_CONFIG=config/linux-librem_common-6.1.8.config
CONFIG_COREBOOT_CONFIG=config/coreboot-librem_14.config
@ -27,8 +26,6 @@ CONFIG_HOTPKEY=y
CONFIG_LINUX_USB=y
export CONFIG_TPM=y
export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=n
export CONFIG_TOTP_SKIP_QRCODE=n
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a librem_15v3
CONFIG_LINUX_CONFIG=config/linux-librem_common-6.1.8.config
CONFIG_COREBOOT_CONFIG=config/coreboot-librem_15v3.config
@ -29,8 +28,6 @@ CONFIG_HOTPKEY=y
CONFIG_LINUX_USB=y
export CONFIG_TPM=y
export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=n
export CONFIG_TOTP_SKIP_QRCODE=n
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a librem_15v4
CONFIG_LINUX_CONFIG=config/linux-librem_common-6.1.8.config
CONFIG_COREBOOT_CONFIG=config/coreboot-librem_15v4.config
@ -30,8 +29,6 @@ CONFIG_HOTPKEY=y
CONFIG_LINUX_USB=y
export CONFIG_TPM=y
export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=n
export CONFIG_TOTP_SKIP_QRCODE=n
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a librem_l1um
CONFIG_LINUX_CONFIG=config/linux-librem_common.config
CONFIG_COREBOOT_CONFIG=config/coreboot-librem_l1um.config
@ -28,8 +27,6 @@ CONFIG_HOTPKEY=y
CONFIG_LINUX_USB=y
export CONFIG_TPM=y
export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=n
export CONFIG_TOTP_SKIP_QRCODE=n
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for librem_l1um_v2
CONFIG_LINUX_CONFIG=config/linux-librem_common-6.1.8.config
CONFIG_COREBOOT_CONFIG=config/coreboot-librem_l1um_v2.config
@ -31,8 +30,6 @@ export CONFIG_TPM2_TOOLS=y
CONFIG_TPM2_TSS=y
CONFIG_OPENSSL=y
CONFIG_PRIMARY_KEY_TYPE=ecc
export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=n
export CONFIG_TOTP_SKIP_QRCODE=n
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
#!/bin/bash
set -o pipefail

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
#!/bin/bash
# Set the EC BRAM setting for automatic power-on.

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a librem mini
CONFIG_LINUX_CONFIG=config/linux-librem_common-6.1.8.config
CONFIG_COREBOOT_CONFIG=config/coreboot-librem_mini.config
@ -29,8 +28,6 @@ CONFIG_HOTPKEY=y
CONFIG_LINUX_USB=y
export CONFIG_TPM=n
export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=n
export CONFIG_TOTP_SKIP_QRCODE=n
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
#!/bin/bash
set -o pipefail

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
#!/bin/bash
# Set the EC BRAM setting for automatic power-on.

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a librem mini v2
CONFIG_LINUX_CONFIG=config/linux-librem_common-6.1.8.config
CONFIG_COREBOOT_CONFIG=config/coreboot-librem_mini_v2.config
@ -29,8 +28,6 @@ CONFIG_HOTPKEY=y
CONFIG_LINUX_USB=y
export CONFIG_TPM=n
export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=n
export CONFIG_TOTP_SKIP_QRCODE=n
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Nitrokey Nitropad NS51 board configuration
export CONFIG_COREBOOT=y
@ -48,7 +47,6 @@ export CONFIG_PRIMARY_KEY_TYPE=ecc
CONFIG_TPM2_TSS=y
CONFIG_OPENSSL=y
export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=n
export CONFIG_BOOT_DEV="/dev/nvme0n1"
export CONFIG_BOARD_NAME="Nitropad NS50"

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Nitrokey Nitropad NV41 board configuration
export CONFIG_COREBOOT=y
@ -48,7 +47,6 @@ export CONFIG_PRIMARY_KEY_TYPE=ecc
CONFIG_TPM2_TSS=y
CONFIG_OPENSSL=y
export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=n
export CONFIG_BOOT_DEV="/dev/nvme0n1"
export CONFIG_BOARD_NAME="Nitropad NV41"

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for building a coreboot ROM that works in
# the qemu emulator in console mode thanks to Whiptail
#

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
qemu-coreboot-(fb)whiptail-tpm[1,2](-hotp) boards
===

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for building a coreboot ROM that works in
# the qemu emulator in console mode thanks to Whiptail
#

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for building a coreboot ROM that works in
# the qemu emulator in graphical mode thanks to FBWhiptail
# This version requires a supported HOTP Security dongle (Nitrokey Pro/Storage or Librem Key)

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for building a coreboot ROM that works in
# the qemu emulator in graphical mode thanks to FBWhiptail
#

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for building a coreboot ROM that works in
# the qemu emulator in console mode thanks to Whiptail
#

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for building a coreboot ROM that works in
# the qemu emulator in console mode thanks to Whiptail
#

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for building a coreboot ROM that works in
# the qemu emulator in console mode thanks to Whiptail
# This version requires a supported HOTP Security dongle (Nitrokey Pro/Storage or Librem Key)

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for building a coreboot ROM that works in
# the qemu emulator in console mode thanks to Whiptail
#

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a T430 running Qubes 4.1 and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a T430 running Qubes 4.1 and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Inherit the rest from the base T440p config.
include $(pwd)/boards/t440p-maximized/t440p-maximized.config

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a ThinkPad T440p.
CONFIG_COREBOOT_CONFIG=config/coreboot-t440p.config
# TODO: Make a ThinkPad-common Linux config file.

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a Talos 2 running Qubes and other OSes
# The board uses BE coreboot and LE Linux kernel and initrd
CONFIG_TARGET_ARCH=ppc64

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Inherit the rest from the base W541 config.
include $(pwd)/boards/w541-maximized/w541-maximized.config

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a ThinkPad W541.
CONFIG_COREBOOT_CONFIG=config/coreboot-w541.config
# TODO: Make a ThinkPad-common Linux config file.

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a X220 running Qubes 4.1 and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a X220 running Qubes 4.1 and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a x230 with HOTP (Nitrokey/Purism USB Security dongle enabled HOTP support)
# running Qubes 4.1 and other OSes.
#

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a X230 running Qubes 4.1 and other Linux Based OSes (through kexec)
#
# Based on https://review.coreboot.org/c/coreboot/+/28950 for FHD mod

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a X230 running Qubes 4.1 and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a X230 running Qubes 4.1 and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Minimal configuration for a x230 to support flashrom and USB
# This top SPI flash image needed to flash legacy board counterpart internally
# This image can be flashed through 1vyrain and skulls

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a X230 running Qubes 4.1 and other Linux Based OSes (through kexec)
#
# Deactivated to fit in coreboot's CONFIG_CBFS_SIZE=0x700000 :

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a X230 running Qubes 4.1 and other Linux Based OSes (through kexec)
#
# Based on https://review.coreboot.org/c/coreboot/+/28950 for FHD mod

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for a X230 running Qubes 4.1 and other Linux Based OSes (through kexec)
#
# Includes

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Inherit the rest from the base Z220 CMT config.
include $(pwd)/boards/z220-cmt-maximized/z220-cmt-maximized.config

View File

@ -1,4 +1,3 @@
BRAND_NAME=Heads
# Configuration for HP Z220 CMT
#
#The board supports Intel LGA1155, which allows for ME removal (both neuter+disable as claimed by me_cleaner),