418 Commits

Author SHA1 Message Date
gaspar-ilom
81151d94f6
add documentation for tb.bin Thunderbolt flashing on the T480
Signed-off-by: gaspar-ilom <gasparilom@riseup.net>
2025-02-28 12:05:55 +01:00
Thierry Laurion
557ccb6499
Merge remote-tracking branch 'osresearch/master' into poc_t480
Resolve conficts too

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-02-26 19:08:24 -05:00
Thierry Laurion
d9f4cbcfc3
t480 boards: disable tracing output as for all other boards
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-02-24 12:11:25 -05:00
gaspar-ilom
6f2e7cbefa
disable debugging on the T480
all remaining issues do not seem to be heads but coreboot related

no debugging needed anymore, issues should be reported upstream and fixed there

Signed-off-by: gaspar-ilom <gasparilom@riseup.net>
2025-02-24 14:24:03 +01:00
Filip Lewiński
4a24bba8b3
boards/novacustom-v540tu/novacustom-v540tu.config: add
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2025-02-19 10:30:58 +01:00
gaspar-ilom
9978aa6134
add some warning to the t480 board config about the TPM GPIO reset attack
https://mkukri.xyz/2024/06/01/tpm-gpio-fail.html
Signed-off-by: gaspar-ilom <gasparilom@riseup.net>
2025-02-18 21:30:47 +01:00
gaspar-ilom
820c38c15b
fix t480 board config comments
Signed-off-by: gaspar-ilom <gasparilom@riseup.net>
2025-02-15 00:36:52 +01:00
gaspar-ilom
acd6c859db
fix mac address in t480 config comments
Signed-off-by: gaspar-ilom <gasparilom@riseup.net>
2025-02-14 23:43:22 +01:00
Thierry Laurion
82cc4108d6
t480 board configs: add notes that MAC is forged in GBE provided in tree to proper MAC
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-02-14 12:14:18 -05:00
Thierry Laurion
0d53e8a385
rename coreboot-2412 to coreboot-24.12 for versioning consistency, move patches, point board configs to version change
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-02-14 12:11:57 -05:00
Thierry Laurion
b2637cec90
t480 boards and coreboot config: rename to maximized since ifd reuses ME neutered space, confirmed
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-02-14 11:49:33 -05:00
gaspar-ilom
073d244e23
remove resolved todo as config is now confirmed
Signed-off-by: gaspar-ilom <gasparilom@riseup.net>
2025-02-14 09:56:45 -05:00
Thierry Laurion
1391bf97f7
t480 board configs: revew vs nv41, unify between each other and enable TRACING
Debug that was missing:
CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=y

All of this is because we tried to adapt from t400p which is tpm1 instead of librem_14v3 which is really similar to this board.
Note that we currently use a duplicate of librem14v3 linux config.

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-02-13 20:43:55 -05:00
gaspar-ilom
296e7be363
try fixing tpm config for t480
Signed-off-by: gaspar-ilom <gasparilom@riseup.net>
2025-02-13 20:39:42 -05:00
Thierry Laurion
aff8e13a90
targets/t480_me_blobs.mk: remove leftover artifact of @notgivenby from cleaner merged/adapted work from @gaspar-ilom
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-02-12 13:33:15 -05:00
Thierry Laurion
8149c30c62
t480-maximized -> t480: we are not neutering ME anymore, therefore those are not maximized boards. We have to draw the line somewhere.
- Reuse good tweeks from gaspar-ilom's provided config/coreboot-t480-maximized.config
- move config/coreboot-t480-maximized.config to config/coreboot-t480.config, delete config/coreboot-t480-maximized.config
- rename boards/t480-hotp-maximized -> boards/t480-hotp, boards/t480-maximized/t480-maximized -> boards/t480-maximized/t480
- Adapt CircleCI board naming accordingly

TODO:
- discuss need of thunderbold firmware presence in fw, that were part of @notgivenby prior work and now gone. Should it be brought back?
- Tweaks of config/coreboot-t480.config against prior commit, outside of blobs paths having change.

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-02-12 13:11:48 -05:00
Thierry Laurion
e6d6001e97
Merge remote-tracking branch 'gaspar-ilom/t480' into poc_t480
Resolve conflicts, enable TPM2 support into board configs that was missing sorry
- remove blobs/kabylake/fetch_split_fsp.sh since unneeded if depending on full FSP from tree
  - removed fsp.fd files placed in blobs and references to it in @gaspar-ilom branch
  - removed blobs/kabylake/* altogether since unneeded
- remove patches/coreboot-24.02.01/* since we use another fork (currently modules/coreboot: t480, might be renamed to coreboot release to be reused later)
- t480 boards depend on targets/xx80_me_blobs.mk now, next commit will cleanup prior work artifacts not needed; @gaspar-ilom approach cleaner

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-02-12 12:46:14 -05:00
Thierry Laurion
fd55341cf4
fix t480p-hotp-maximized -> t480-hotp-maximized; unify against x230; add the CircleCI
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-02-12 12:14:33 -05:00
gaspar-ilom
f75ddb81c3 add t480 board
Signed-off-by: gaspar-ilom <gasparilom@riseup.net>
2025-02-12 00:56:17 +01:00
Thierry Laurion
e8974daebb
boards/t480-maximized/t480-maximized.config: enable pr0 (impacts only after kexec call to final OS. Otherwise, problem with coreboot config)
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-02-11 17:17:26 -05:00
Thierry Laurion
5ce57053e6
boards/t480-maximized/t480-maximized.config: use t480 target that calls blobs scripts
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-02-11 11:26:20 -05:00
AK Unterkontrolle
effa9f63e3
Add board config for T480
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-02-11 11:25:39 -05:00
Thierry Laurion
8381ee3a86
novacustom_nv4x_adl -> novacustom-nv4x_adl consistent NovaCustom board naming scheme from now on
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-01-24 12:07:59 -05:00
Thierry Laurion
fef0326f55
nitropad/novacustom board configs: point to Dasharo docs for disassembly and recovery instructions
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-01-22 15:24:29 -05:00
Thierry Laurion
2872f44621
v560tu: unify board config, remove debug cmdline passed from coreboot to linux kernel
Note: qemu coreboot config still pass debug (non quiet, non prod board = debug)
config/coreboot-qemu-tpm1.config:173:CONFIG_LINUX_COMMAND_LINE="debug console=ttyS0,115200 console=tty"
config/coreboot-qemu-tpm2.config:170:CONFIG_LINUX_COMMAND_LINE="debug console=ttyS0,115200 console=tty"

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-01-16 11:23:40 -05:00
Thierry Laurion
392d4561f3
typo: s01x -> s0ix
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-01-15 21:58:30 -05:00
Thierry Laurion
bab46bc97b
novacustom-v560tu board config: set board to have quiet mode enabled by default
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-01-15 15:41:22 -05:00
Thierry Laurion
b1690ce473
Merge remote-tracking branch 'osresearch/master' into introduce_quiet_mode-diceware_STAGING 2025-01-15 15:35:53 -05:00
Thierry Laurion
eee5039cb3
Move ns50 to UNTESTED
Move https://github.com/linuxboot/heads/pull/1846 forward.

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-01-15 19:29:05 +01:00
Michał Kopeć
de79d2a853
boards/novacustom-v540tu: remove board
Support for V54 series is not added at this time.

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
2025-01-15 15:13:57 +01:00
Thierry Laurion
b8cb467dd3
novacustom boards: rename linux-nittropad-x.config -> linux-novacustom-common.config, switch back to kernel 6.1.8, save config in oldconfig
Input for https://github.com/linuxboot/heads/pull/1846

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2025-01-13 13:27:05 +01:00
Thierry Laurion
ff94d78c03
all maintained boards: add debug(n)+tracing(n)+pcap(n)+quiet(y) just prior of bootscript to unify to all boards
with exception of
- qemu boards not being *quiet: quiet=n
- qemu boards not being *prod* having pcap=y
- qemy boards not being *prod* have debug+tracing=y
- qemu tpm1 boards have '#pcap=n'

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-12-21 13:22:27 -05:00
Thierry Laurion
27b3e3a0a0
qemu-*-prod_quiet board configs: move debug(n)+tracing(n)+pcap(n)+quiet(y) just prior of gui-init to attempt to unify to all boards
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-12-21 13:22:21 -05:00
Thierry Laurion
574cd97a2f
Revert "TO REVERT BEFORE MERGE: enable quiet mode in all boards and revert for qemu so only prod_quiet boards have quiet upon revert"
This reverts commit 65d6fc48ee4f9e8b61bd59f102b60cd01f7a3a39.

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-12-21 13:22:15 -05:00
Thierry Laurion
bcd364c280
TO REVERT BEFORE MERGE: enable quiet mode in all boards and revert for qemu so only prod_quiet boards have quiet upon revert
repro
user@localhost:~/heads$ sed -i 's|export CONFIG_BOOTSCRIPT=/bin/gui-init|#Enable quiet mode: technical information logged under /tmp/debug.log\nexport CONFIG_QUIET_MODE=y\nexport CONFIG_BOOTSCRIPT=/bin/gui-init|' boards/*/*.config
user@localhost:~/heads$ git restore boards/*qemu*/*.config

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-12-21 13:21:04 -05:00
Thierry Laurion
494ba09270
novacustom-nv4x board config: revert quiet mode enablement
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-12-21 13:20:58 -05:00
Thierry Laurion
71d4260045
novacustom_nv4x_adl/novacustom_nv4x_adl.config : add quiet mode for real hardware recording in PR, will comment and generalize in next commit to all maintained boards, leaving this to be overriden by branding downstream for downstream releases exercice and choice
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-12-21 13:20:41 -05:00
Thierry Laurion
19fd98df2d
WiP: staging changes (TPM1 regression fixes for LOG/DEBUG on quiet mode)
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-12-21 13:19:01 -05:00
Thierry Laurion
496d93031e
qemu-coreboot-fbwhiptail-tpm2-hotp-prod_quiet board: addition of board containing 'export CONFIG_QUIET_MODE=y' for output comparison between debug, prod and quiet mode
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-12-21 13:13:07 -05:00
Thierry Laurion
b98492377c
v560tu/v540tu board configs: adapt FLASH_OPTIONS to not overwrite GBE region, document S3/S01x/Hibernation limitation which is lackking from https://github.com/linuxboot/heads/pull/1846
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-12-18 14:10:29 +01:00
Thierry Laurion
fffc3a88c4
v540tu/v560tu: remove MSRTOOL, reuse proposed changes not taken from https://github.com/linuxboot/heads/pull/1871 for https://github.com/linuxboot/heads/pull/1846
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-12-18 14:10:29 +01:00
Michał Kopeć
1d7b442668
novacustom-v560tu: sync to v540tu
Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
2024-12-10 12:41:39 +01:00
Michał Kopeć
6174b63a12
novacustom-v540tu: enable PR0 lockdown in SMM
Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
2024-12-09 16:21:45 +01:00
Michał Kopeć
0f339496a7
Add NovaCustom V560TU
as a copy of V540TU

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
2024-12-04 13:51:55 +01:00
Michał Kopeć
4a3667b78c
boards/novacustom-v540tu/novacustom-v540tu.config: remove unneeded debug options
Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
2024-12-04 12:46:37 +01:00
Thierry Laurion
4394052b72
modules/linux: add Linux 6.11.9
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-12-04 12:46:37 +01:00
Michał Kopeć
ce2b051a48
Add NovaCustom V540TU board
Co-authored-by: Michał Kopeć <michal.kopec@3mdeb.com>
Co-authored-by: Thierry Laurion <insurgo@riseup.net>
Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-12-04 12:46:35 +01:00
Thierry Laurion
99157f2291
Merge pull request #1802 from tlaurion/talos_2-kernel_version_bump_to_6.6.16
talos-2: kernel version bump to 6.6.16
2024-11-29 14:19:25 -05:00
Thierry Laurion
d7ff890c78
WiP: talos-2: kernel version bump to 6.6.16
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-11-29 12:38:05 -05:00
Thierry Laurion
f8b03b3087
nitropad-ns50: remove PR0 until tested and readded in seperate PR
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-11-29 11:17:02 -05:00