heads/patches/coreboot-4.8.1
tlaurion 36c04f19e4
Add xx30-maximized and xx30-hotp-maximized boards (11.5mb flashable BIOS regions, reproducible me.bin and generated gbe.bin and totally externally and internally flashable roms) (#703)
* xx30-*-maximized: update flashrom options removing --ifd bios option, keeping whole flash of rom internally. WARNING: ifd needs to be initially unlocked through ifdtool -u on 8mb bottom SPI backup. YOU CANNOT COME FROM 1VYRAIN. IF COMING FROM SKULLS, YOU MUST HAVE RAN OPTIONAL -u OPTION FROM SKULLS. PLEASE UPGRADE ONLY AFTER HAVING A PHYSICAL BACKUP OF BOTH SPI FLASH CHIPS. MORE INFORMATION UNDER https://github.com/osresearch/heads/pull/703. This will guarantee that future flash of produced rom will reflash the ROM totally, where heads make sure of adding users customizations (public key, /etc/config.user) when internally flashed. Unfortunately, if you flash externally, you will have to reinject your public key and readd /etc/config customizations.

* Adding generated bincfg coreboot 4.8.1 patch (merged under coreboot 4.13 and backported here to 4.8.1), resulting in gbe.bin under blobs/xx30/gbe.bin and instructions to replicate in README prior of automation (under repo). Note that MAC under gbe.bin is fixed to DE:AD:C0:FF:EE unless extract.sh script is ran on external backup to keep current user's MAC (Thanks to @Thrilleratplay's contribution!)

* xx30 blobs: add two blobs management scripts for xx30: extract from local backup/download+neuter ME
extract.sh: extract from external backup: gbe.bin, neuter under me.bin and maximize BIOS+reduce ME regions under unlocked ifd.bin. 
download_clean_me.sh: download and verify Lenovo latest ME version from website, and drop me.bin in place.
Note: me.bin is 98kb, containing only BUP and ROMP partitions which cannot be modified nor deleted else computer won't boot. As a result, BIOS region is maximized in ifd.bin to 11.5mb and coreboot config takes advantage of that freed space.

* CircleCI: xx30-*-maximized additional step to call download_clean_me.sh prior of building boards so that me.bin is dopped in place. This should be done by users prior of building xx30-*-maximized boards locally, which is imitated in CircleCI builds (look at .circleci/config.yaml for innoextract host added dependency and board buildings. Results on github for each commit).
2020-12-02 17:01:44 -05:00
..
0000-measuredboot.patch patches/coreboot-4.8.1: Measure firmware into PCR2 (#793) 2020-08-11 17:54:59 -04:00
0001-mb-purism-librem_skl-add-support-for-13v4-15v4-board.patch patches/coreboot: add support for librem 13v4/15v4 boards 2019-02-12 16:32:04 -06:00
0002-arch-x86-acpi-Add-DMAR-RMRR-helper-functions.patch patches/coreboot: add proper IOMMU/RMRR support 2019-02-12 17:09:56 -06:00
0003-soc-intel-skylake-Generate-ACPI-RMRR-table.patch patches/coreboot: add proper IOMMU/RMRR support 2019-02-12 17:09:56 -06:00
0007-intel-fsp-fsp2_0-Fix-FSP-2.0-headers-to-match-github.patch Update patches for librem boards 2018-10-27 11:02:23 -07:00
0009-Add-heads-TPM-measurements-to-Skylake-Kabylake.patch patches/coreboot-4.8.1: Measure firmware into PCR2 (#793) 2020-08-11 17:54:59 -04:00
0010-cross-compiler-support.patch musl-cross-make: replace all cross compilers with musl-cross-make 2020-01-08 17:08:15 +01:00
0020-kgpe-d16.patch Start updating to coreboot 4.8.1 2018-10-27 11:02:23 -07:00
0030-sandybridge.patch patches/coreboot-4.8.1: Measure firmware into PCR2 (#793) 2020-08-11 17:54:59 -04:00
0050-buildgcc-Do-not-try-to-install-GCC-if-build-failed.patch Add patches to update coreboot crossgcc to v1.52 2018-10-27 15:05:43 -07:00
0051-buildgcc-Update-IASL-to-20180531.patch Add patches to update coreboot crossgcc to v1.52 2018-10-27 15:05:43 -07:00
0052-crossgcc-Update-to-clang-6.0-cmake-3.11.3.patch Add patches to update coreboot crossgcc to v1.52 2018-10-27 15:05:43 -07:00
0053-src-Get-rid-of-unneeded-whitespace.patch Add patches to update coreboot crossgcc to v1.52 2018-10-27 15:05:43 -07:00
0054-util-crossgcc-Allow-building-a-new-gcc-against-new-b.patch Add patches to update coreboot crossgcc to v1.52 2018-10-27 15:05:43 -07:00
0055-crosgcc-patches-Add-make-patch-for-GLIBC-glob-interf.patch Add patches to update coreboot crossgcc to v1.52 2018-10-27 15:05:43 -07:00
0056-util-crossgcc-update-to-gcc-8.1.0-and-binutils-2.30.patch Add patches to update coreboot crossgcc to v1.52 2018-10-27 15:05:43 -07:00
0057-util-crosgcc-patches-update-make-4.2.1-patches.patch Add patches to update coreboot crossgcc to v1.52 2018-10-27 15:05:43 -07:00
0058-util-crosgcc-Fix-most-shellcheck-errors-in-buildgcc.patch Add patches to update coreboot crossgcc to v1.52 2018-10-27 15:05:43 -07:00
0059-util-Add-description.md-to-each-util.patch Add patches to update coreboot crossgcc to v1.52 2018-10-27 15:05:43 -07:00
0060-enable-tpm-on-t430.patch T430 TPM Backport 2020-05-15 18:51:49 +01:00
0061-bincfg-Intel_GBE_82579LM_set_and_spec.patch Add xx30-maximized and xx30-hotp-maximized boards (11.5mb flashable BIOS regions, reproducible me.bin and generated gbe.bin and totally externally and internally flashable roms) (#703) 2020-12-02 17:01:44 -05:00