-
-
Notifications
You must be signed in to change notification settings - Fork 187
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add new board: Purism Librem Server L1UM #858
Conversation
Port patches from coreboot 4.8.1 to 4.11: * 0000-measure-boot -> 0001 * 0010-cross-compiler-support All other patches for coreboot 4.8.1 have either already been integrated, or are for platforms which do not need to be migrated to coreboot 4.11 (they will move to 4.12 or newer). Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
Add a patch for FSP Broadwell-DE to make use of Heads' measured boot. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
Will be used by multiple Librem boards. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
Add board config, coreboot config, kernel config files. Add conditional purism-blobs dependency to coreboot-4.11 module. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
Add support for persisting PCIe config via PCHSTRP9 in flash descriptor. This is needed to support multiple variants of the L1UM server which use the same firmware but differ in PCIe lane configuration via the PCH straps configuration in the flash descriptor. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
Cherry-picked from upstream coreboot (post-4.11), fixes compilation issue. Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
@MrChromebox @tlaurion I really think there needs to be a discussion here. What do theses measured boot patches measure that vboot's doesn't? |
@Tonux599 you are questionning 7d8cdba#diff-d5759d1bcdfe5d4b89192dc06d8778657c930c2298b9bc770535d05cefc5535a ? My understanding here is that this patch permits to activate Measuredboot without VBOOT. where my understanding of coreboot not being large enough makes me realize that a lot of things were not present inside of Kconfig (LOCAL_VERSION) including ANY_TOOLCHAIN, which means that even if those options were specified under coreboot config, they were not retained as valid confiuration options and returned to default prior of KGPE-D16 coreboot compilation. I will get back at doing my homeworks on understanding what options are actually kept when doing @Tonux599 maybe point those questionning under KGPE-d16 WIP branch to document and question there? Else @MrChromebox has a lot more experience with coreboot then I have. Have to upgrade those skills. |
@MrChromebox : please add this board inside of CircleCI configuration so we at least know that the builds is a success.
|
Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
PR linuxboot#859 should have included this after linuxboot#858 was merged, but was missed Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
Add new board: Purism Librem Server L1UM
Signed-off-by: Matt DeVillier matt.devillier@puri.sm