mirror of
https://github.com/linuxboot/heads.git
synced 2025-03-10 22:43:57 +00:00
4ea175838f
The bios regions of the 12M coreboot image is 7M: 4M and 3 of the 8M split image. The rest of the 8M image _generated_ with fake data and not usable on real systems! It's dangerous to create them and suggest flashing them externally. That's exactly why the x230-flash build target is there: To have a self-contained 4M image and enable easy unlocking of the 8M image using the _original_ data. the heads-wiki project is updated accordingly. Closes #307 Closes #302
39 lines
1.1 KiB
Plaintext
39 lines
1.1 KiB
Plaintext
# Configuration for a x230 running Qubes and other OSes
|
|
export CONFIG_COREBOOT=y
|
|
CONFIG_COREBOOT_CONFIG=config/coreboot-x230.config
|
|
CONFIG_LINUX_CONFIG=config/linux-x230.config
|
|
|
|
CONFIG_CRYPTSETUP=y
|
|
CONFIG_FLASHROM=y
|
|
CONFIG_FLASHTOOLS=y
|
|
CONFIG_GPG=y
|
|
CONFIG_KEXEC=y
|
|
CONFIG_UTIL_LINUX=y
|
|
CONFIG_LVM2=y
|
|
CONFIG_MBEDTLS=y
|
|
CONFIG_PCIUTILS=y
|
|
CONFIG_POPT=y
|
|
CONFIG_QRENCODE=y
|
|
CONFIG_TPMTOTP=y
|
|
CONFIG_DROPBEAR=y
|
|
|
|
CONFIG_LINUX_USB=y
|
|
CONFIG_LINUX_E1000E=y
|
|
|
|
export CONFIG_TPM=y
|
|
export CONFIG_BOOTSCRIPT=/bin/generic-init
|
|
export CONFIG_BOOT_REQ_HASH=n
|
|
export CONFIG_BOOT_REQ_ROLLBACK=n
|
|
export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on"
|
|
export CONFIG_BOOT_KERNEL_REMOVE="quiet"
|
|
export CONFIG_BOOT_DEV="/dev/sda1"
|
|
export CONFIG_USB_BOOT_DEV="/dev/sdb1"
|
|
|
|
# This board has two SPI flash chips, an 8 MB that holds the IFD,
|
|
# the ME image and part of the coreboot image, and a 4 MB one that
|
|
# has the rest of the coreboot and the reset vector.
|
|
#
|
|
# Only flashing to the bios region is safe to do. The easiest is to
|
|
# flash internally when the IFD is unlocked for writing, and x230-flash
|
|
# is installed first.
|