heads/config
tlaurion 36c04f19e4
Add xx30-maximized and xx30-hotp-maximized boards (11.5mb flashable BIOS regions, reproducible me.bin and generated gbe.bin and totally externally and internally flashable roms) (#703)
* xx30-*-maximized: update flashrom options removing --ifd bios option, keeping whole flash of rom internally. WARNING: ifd needs to be initially unlocked through ifdtool -u on 8mb bottom SPI backup. YOU CANNOT COME FROM 1VYRAIN. IF COMING FROM SKULLS, YOU MUST HAVE RAN OPTIONAL -u OPTION FROM SKULLS. PLEASE UPGRADE ONLY AFTER HAVING A PHYSICAL BACKUP OF BOTH SPI FLASH CHIPS. MORE INFORMATION UNDER https://github.com/osresearch/heads/pull/703. This will guarantee that future flash of produced rom will reflash the ROM totally, where heads make sure of adding users customizations (public key, /etc/config.user) when internally flashed. Unfortunately, if you flash externally, you will have to reinject your public key and readd /etc/config customizations.

* Adding generated bincfg coreboot 4.8.1 patch (merged under coreboot 4.13 and backported here to 4.8.1), resulting in gbe.bin under blobs/xx30/gbe.bin and instructions to replicate in README prior of automation (under repo). Note that MAC under gbe.bin is fixed to DE:AD:C0:FF:EE unless extract.sh script is ran on external backup to keep current user's MAC (Thanks to @Thrilleratplay's contribution!)

* xx30 blobs: add two blobs management scripts for xx30: extract from local backup/download+neuter ME
extract.sh: extract from external backup: gbe.bin, neuter under me.bin and maximize BIOS+reduce ME regions under unlocked ifd.bin. 
download_clean_me.sh: download and verify Lenovo latest ME version from website, and drop me.bin in place.
Note: me.bin is 98kb, containing only BUP and ROMP partitions which cannot be modified nor deleted else computer won't boot. As a result, BIOS region is maximized in ifd.bin to 11.5mb and coreboot config takes advantage of that freed space.

* CircleCI: xx30-*-maximized additional step to call download_clean_me.sh prior of building boards so that me.bin is dopped in place. This should be done by users prior of building xx30-*-maximized boards locally, which is imitated in CircleCI builds (look at .circleci/config.yaml for innoextract host added dependency and board buildings. Results on github for each commit).
2020-12-02 17:01:44 -05:00
..
busybox.config configs/busybox: include 'fold' utility 2020-07-21 09:47:51 -05:00
coreboot-kgpe-d16.config Inject Heads version string into coreboot LOCALVERSION... (#859) 2020-10-21 11:04:27 -04:00
coreboot-librem_13v2.config Inject Heads version string into coreboot LOCALVERSION... (#859) 2020-10-21 11:04:27 -04:00
coreboot-librem_13v4.config Inject Heads version string into coreboot LOCALVERSION... (#859) 2020-10-21 11:04:27 -04:00
coreboot-librem_15v3.config Inject Heads version string into coreboot LOCALVERSION... (#859) 2020-10-21 11:04:27 -04:00
coreboot-librem_15v4.config Inject Heads version string into coreboot LOCALVERSION... (#859) 2020-10-21 11:04:27 -04:00
coreboot-librem_l1um.config configs/coreboot-librem_l1um: drop CONFIG_LOCALVERSION (#866) 2020-10-21 18:06:03 -04:00
coreboot-librem_mini_v2.config Add new board: Purism Librem Mini v2 2020-11-19 15:39:44 -05:00
coreboot-librem_mini.config configs/coreboot-librem_mini: update blob paths 2020-11-19 15:39:44 -05:00
coreboot-qemu-fbwhiptail.config qemu-coreboot-fbwhiptail board: coreboot config CBFS region upgraded to 7.5mb to not fail CI 2020-11-05 18:14:42 -05:00
coreboot-qemu.config Inject Heads version string into coreboot LOCALVERSION... (#859) 2020-10-21 11:04:27 -04:00
coreboot-t420.config Inject Heads version string into coreboot LOCALVERSION... (#859) 2020-10-21 11:04:27 -04:00
coreboot-t430-flash.config Inject Heads version string into coreboot LOCALVERSION... (#859) 2020-10-21 11:04:27 -04:00
coreboot-t430-hotp-maximized.config Add xx30-maximized and xx30-hotp-maximized boards (11.5mb flashable BIOS regions, reproducible me.bin and generated gbe.bin and totally externally and internally flashable roms) (#703) 2020-12-02 17:01:44 -05:00
coreboot-t430-maximized.config Add xx30-maximized and xx30-hotp-maximized boards (11.5mb flashable BIOS regions, reproducible me.bin and generated gbe.bin and totally externally and internally flashable roms) (#703) 2020-12-02 17:01:44 -05:00
coreboot-t430.config Inject Heads version string into coreboot LOCALVERSION... (#859) 2020-10-21 11:04:27 -04:00
coreboot-x220.config Inject Heads version string into coreboot LOCALVERSION... (#859) 2020-10-21 11:04:27 -04:00
coreboot-x230-flash.config Inject Heads version string into coreboot LOCALVERSION... (#859) 2020-10-21 11:04:27 -04:00
coreboot-x230-hotp-maximized.config Add xx30-maximized and xx30-hotp-maximized boards (11.5mb flashable BIOS regions, reproducible me.bin and generated gbe.bin and totally externally and internally flashable roms) (#703) 2020-12-02 17:01:44 -05:00
coreboot-x230-hotp-verification.config Inject Heads version string into coreboot LOCALVERSION... (#859) 2020-10-21 11:04:27 -04:00
coreboot-x230-maximized.config Add xx30-maximized and xx30-hotp-maximized boards (11.5mb flashable BIOS regions, reproducible me.bin and generated gbe.bin and totally externally and internally flashable roms) (#703) 2020-12-02 17:01:44 -05:00
coreboot-x230-nkstorecli.config coreboot configs: remove CONFIG_LOCALVERSION artifacts in conformity of bd7a945bbb 2020-11-06 15:24:13 -05:00
coreboot-x230.config Inject Heads version string into coreboot LOCALVERSION... (#859) 2020-10-21 11:04:27 -04:00
linux-kgpe-d16.config Disable EXT2 standard driver (replaced by EXT4 driver) 2019-02-19 21:16:52 +00:00
linux-librem_common.config modules/linux: add support for building with kernel 5.4.69 (#854) 2020-10-25 01:26:08 -04:00
linux-linuxboot.config Merge pull request #461 from osresearch/debug-linux 2019-11-28 10:53:29 -05:00
linux-qemu.config Disable EXT2 standard driver (replaced by EXT4 driver) 2019-02-19 21:16:52 +00:00
linux-x230-flash.config x230-flash depends on independent and minimal linux-x230-flash.config. ash_history content replaced with usefull commands. Everything is there to generate keys from Yubikey/Nitrokey, export armored versions to external media and cbfs them into reproducible rom and flash resulting rom with flashrom-x230.sh. 2018-05-07 16:45:47 -04:00
linux-x230.config config/linux-x230: remove debug symbols 2019-05-20 13:47:20 +02:00