mirror of
https://github.com/linuxboot/heads.git
synced 2024-12-24 07:06:42 +00:00
36c04f19e4
* xx30-*-maximized: update flashrom options removing --ifd bios option, keeping whole flash of rom internally. WARNING: ifd needs to be initially unlocked through ifdtool -u on 8mb bottom SPI backup. YOU CANNOT COME FROM 1VYRAIN. IF COMING FROM SKULLS, YOU MUST HAVE RAN OPTIONAL -u OPTION FROM SKULLS. PLEASE UPGRADE ONLY AFTER HAVING A PHYSICAL BACKUP OF BOTH SPI FLASH CHIPS. MORE INFORMATION UNDER https://github.com/osresearch/heads/pull/703. This will guarantee that future flash of produced rom will reflash the ROM totally, where heads make sure of adding users customizations (public key, /etc/config.user) when internally flashed. Unfortunately, if you flash externally, you will have to reinject your public key and readd /etc/config customizations. * Adding generated bincfg coreboot 4.8.1 patch (merged under coreboot 4.13 and backported here to 4.8.1), resulting in gbe.bin under blobs/xx30/gbe.bin and instructions to replicate in README prior of automation (under repo). Note that MAC under gbe.bin is fixed to DE:AD:C0:FF:EE unless extract.sh script is ran on external backup to keep current user's MAC (Thanks to @Thrilleratplay's contribution!) * xx30 blobs: add two blobs management scripts for xx30: extract from local backup/download+neuter ME extract.sh: extract from external backup: gbe.bin, neuter under me.bin and maximize BIOS+reduce ME regions under unlocked ifd.bin. download_clean_me.sh: download and verify Lenovo latest ME version from website, and drop me.bin in place. Note: me.bin is 98kb, containing only BUP and ROMP partitions which cannot be modified nor deleted else computer won't boot. As a result, BIOS region is maximized in ifd.bin to 11.5mb and coreboot config takes advantage of that freed space. * CircleCI: xx30-*-maximized additional step to call download_clean_me.sh prior of building boards so that me.bin is dopped in place. This should be done by users prior of building xx30-*-maximized boards locally, which is imitated in CircleCI builds (look at .circleci/config.yaml for innoextract host added dependency and board buildings. Results on github for each commit).
23 lines
751 B
Plaintext
23 lines
751 B
Plaintext
CONFIG_ANY_TOOLCHAIN=y
|
|
CONFIG_MEASURED_BOOT=y
|
|
CONFIG_VENDOR_LENOVO=y
|
|
CONFIG_CBFS_SIZE=0xB80000
|
|
CONFIG_HAVE_IFD_BIN=y
|
|
CONFIG_HAVE_ME_BIN=y
|
|
CONFIG_HAVE_GBE_BIN=y
|
|
CONFIG_IFD_BIN_PATH="../../blobs/xx30/ifd.bin"
|
|
CONFIG_ME_BIN_PATH="../../blobs/xx30/me.bin"
|
|
CONFIG_GBE_BIN_PATH="../../blobs/xx30/gbe.bin"
|
|
CONFIG_BOARD_LENOVO_THINKPAD_T430=y
|
|
CONFIG_NO_POST=y
|
|
CONFIG_UART_PCI_ADDR=0
|
|
# CONFIG_CONSOLE_SERIAL is not set
|
|
CONFIG_CONSOLE_CBMEM_BUFFER_SIZE=0x80000
|
|
CONFIG_DEFAULT_CONSOLE_LOGLEVEL_5=y
|
|
CONFIG_PAYLOAD_LINUX=y
|
|
CONFIG_PAYLOAD_FILE="../../build/t430-hotp-maximized/bzImage"
|
|
CONFIG_LINUX_COMMAND_LINE="intel_iommu=igfx_off quiet"
|
|
CONFIG_LINUX_INITRD="../../build/t430-hotp-maximized/initrd.cpio.xz"
|
|
CONFIG_USE_OPTION_TABLE=y
|
|
CONFIG_STATIC_OPTION_TABLE=y
|