summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-12-18grub.cfg: bruteforce linux/initrd if no grub.cfgbtrfsvolsLeah Rowe
this is probably not safe, and neither is the current fall back code which is being removed from master. i already finished it before testing, but after realising the above, so i'll just stash it in this branch for now. Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-12-18grub.cfg: scan lvm volumes lastLeah Rowe
lvm/* is slow to resolve in grub, on some machines, because grub enumeration is very slow in general. however, many people will install distros with any number of lvm configurations, so we should try to support them. Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-12-18Revert "grub.cfg: try luks2/crypto-lvm before non-crypto"Leah Rowe
This reverts commit 20389655e42e62ebf6d96dd106c91fbe74282557. If the user actually has encryption, but has /boot unencrypted, this will considerably slow down the boot, so the patch has been reverted. The patch was originally meant to favour encrypted /boot setups, but the old behaviour also still works there.
2023-12-18Merge pull request 'Dell-flash-unlock README updates from upstream' (#168) ↵Leah Rowe
from nic3-14159/lbmk:dell-flash-unlock-updates into master Reviewed-on: https://codeberg.org/libreboot/lbmk/pulls/168
2023-12-18grub.cfg: try luks2/crypto-lvm before non-cryptoLeah Rowe
when the user sets up an encrypted machine, grub.cfg defaults to non-encrypted setups if found, first this patch reverses the order, deferring to non-encrypted installations only when encrypted ones are unavailable Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-12-17README.md: Add possibly not working systemsNicholas Chin
These systems have a report that the unlock utility does not work. Until there are multiple reports of failed unlocks and a technical determination of why it doesn't work, they will not be listed as explicitly unsupported.
2023-12-17README.md: Add E6500, E6420, and E6530 as supportedNicholas Chin
2023-12-17README.md: Add instructions for relaxing memory permissionsNicholas Chin
As this utility requires access to /dev/mem, the default protections of Linux and OpenBSD must be relaxed to allow this. Make a note of this in the instructions.
2023-12-17README.md: Add references to Open Security TrainingNicholas Chin
The old Open Security Training site had a course called Advanced x86: BIOS and SMM Internals, which had a set of slides outlining the method to supress SMIs by changing the GBL_SMI_EN bit. Add a reference to it as this is where I originally learned of this method.
2023-12-18Merge pull request 'master' (#165) from risapav/lbmk:master into masterLeah Rowe
Reviewed-on: https://codeberg.org/libreboot/lbmk/pulls/165
2023-12-18Merge pull request 'Update config/grub/config/grub.cfg' (#167) from ↵Leah Rowe
semigel/lbmk:semigel-btrfs-subvol-patch-1 into master Reviewed-on: https://codeberg.org/libreboot/lbmk/pulls/167
2023-12-18Update config/grub/config/grub.cfgsemigel
grub.cfg: add BTRFS subvol support
2023-12-17added x220edp_8mbrisapav
2023-12-17added x220edp_8mbrisapav
2023-12-17added x220edp_8mbrisapav
2023-12-16remove DEBUG handling in lbmk (not needed)Leah Rowe
all it did was set -v in the shell, which doesn't yield very useful results. this is a relic of very old design in the libreboot build system, that is no longer needed. Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-12-16fix several shellcheck warningsLeah Rowe
lbmk didn't quote certain arguments in commands, or used ! -z instead of -n, things like that. simple fixes. Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-12-11Merge pull request 'config/dependencies/debian: add unifont-bin & ↵Leah Rowe
xfonts-unifont' (#163) from Riku_V/lbmk:debgrub into master Reviewed-on: https://codeberg.org/libreboot/lbmk/pulls/163
2023-12-11config/dependencies/debian: add unifont-bin & xfonts-unifontRiku Viitanen
Signed-off-by: Riku Viitanen <riku.viitanen@protonmail.com>
2023-12-11handle errors on exits from subshellsLeah Rowe
most of these are probably redundant, and will never be called, but lbmk needs to be as safe as possible under fault conditions. fail early, fail hard. Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-12-11improved safety/error handling on multitree git-amLeah Rowe
update/trees wasn't correctly returning non-zero status, even though it was printing an error message, when git-am failed. this is due to the way subshells work, and it was overlooked in previous auditing. additionally: don't directly copy trees to the destination, instead patch/reset first, then copy only under normal condition, just as with single-tree projects. when running build/roms, the script would continue after a bad git-am, without exit. this patch fixes it in the most paranoid way possible. i'm now fairly confident that lbmk will fail gracefully and efficiently, under error conditions. this should prevent bad image builds. Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-12-03Merge pull request 'fix void dependencies: openssl-devel' (#161) from ↵Leah Rowe
Riku_V/lbmk:fixvoid into master Reviewed-on: https://codeberg.org/libreboot/lbmk/pulls/161
2023-12-02fix void dependencies: openssl-develRiku Viitanen
Signed-off-by: Riku Viitanen <riku.viitanen@protonmail.com>
2023-12-02Merge pull request 'fix void dependencies: freetype-devel' (#160) from ↵Leah Rowe
Riku_V/lbmk:fixvoid into master Reviewed-on: https://codeberg.org/libreboot/lbmk/pulls/160
2023-12-02fix void dependencies: freetype-develRiku Viitanen
Signed-off-by: Riku Viitanen <riku.viitanen@protonmail.com>
2023-12-02Merge pull request 'fix void dependencies typo' (#159) from ↵Leah Rowe
Riku_V/lbmk:fivoid into master Reviewed-on: https://codeberg.org/libreboot/lbmk/pulls/159
2023-12-02fix void dependencies typoRiku Viitanen
Signed-off-by: Riku Viitanen <riku.viitanen@protonmail.com>
2023-11-22revert flashrom back to version 1.2Leah Rowe
Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-11-15dependencies/debian: fix libfreetype-devLeah Rowe
install libfreetype-dev, instead of libfreetype6-dev this still works in debian stable (currently 12.2) but fixes debian sid, as of 15 November 2023. my test machine with debian sid could not install libfreetype6-dev, but could install libfreetype-dev Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-11-13grub: re-add fat/nt file system modulesLeah Rowe
apparently some people use fat file systems for /boot on linux systems this is apparently a thing it's ridiculous, but also a thing a user reported they could not boot their t400 because of those, because they have such a distro installed on their machine apparently it was a gentoo user i don't really care. re-add 1980s dos file system support. Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-11-09Bump GRUB revision to 8 November 2023 revisionLeah Rowe
Now the revision is: 64e3cee72ab8f5876abfebb263b5e6cf7c4a9a4e The old revision was: e58b870ff926415e23fc386af41ff81b2f588763 With this new revision update, the following patches have been imported from the upstream GRUB project: * 64e3cee72 gpt: Add compile time asserts for guid and gpt_partentry sizes * 7de6fe963 types: Split aligned and packed guids * 5fc985bfd gpt_partition: Mark grub_gpt_partentry as having natural alignment * 7ad30299d efi: Deduplicate configuration table search function * c6cf807fc lsefi: Add missing static qualifier * a964e359b types: Fix typo * 3f79e3b15 util/grub-mount: Check file path sanity * 85e40b36e configure: Make the DJVU_FONT_SOURCE configurable with --with-dejavufont=FILE * 2d6631d2a configure: Make the Unifont FONT_SOURCE configurable with --with-unifont=FILE * 07318ee7e fs/xfs: Fix XFS directory extent parsing * ad7fb8e2e fs/xfs: Incorrect short form directory data boundary check * 4e10213de Revert "zfsinfo: Correct a check for error allocating memory" * 4266fd2bb disk/i386/pc/biosdisk: Read up to 63 sectors in LBA mode * cab04dcda kern/i386/pc/init: Flush cache only on VIA C3 and earlier * 3c7e84257 fs/btrfs: Zero file data not backed by extents * 4bcf6f747 kern/ieee1275/init: Restrict high memory in presence of fadump on ppc64 * cf58eca2a tests/util/grub-shell: Enable RNG device to better test stack smashing * c3bdf263f kern/efi/init: Disable stack smashing protection on grub_efi_init() * 95963d97f disk/cryptodisk: Add support for LUKS2 in (proc)/luks_script * 016f14257 disk/cryptodisk: Optimize luks_script_get() * f7a663c00 term/serial: Ensure proper NULL termination after grub_strncpy() * a19e47ca4 commands/efi/lsefisystab: Print the UEFI specification revision in human readable form Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-11-09fix typo in help textLeah Rowe
say whot? Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-11-09build: set --author when running git initLeah Rowe
set it to a generic name: lbmk <lbmk@libreboot.org> Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-11-08lbmk: don't use status for unconditional returnsLeah Rowe
in cases where lbmk must always return from a function, there are some cases where it relies on non-zero exit status, which in practise is always the case, but may change in the future if the relevant part is modified e.g. do_something && return 0 the proper form is: do_something return 0 also do this for unconditional exits Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-11-08lbmk: support showing the revision in help textLeah Rowe
Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-11-08build: don't generate version/versiondate as rootLeah Rowe
don't run it directly at the bottom of err.sh, because otherwise the version and versiondate files will be generated when running "./build dependencies distroname" which would then create these files, but as root because the user runs that specific command as root. the rest of lbmk, for any other command, prevents use of the root account, so running check_project during "./build dependencies distroname" will cause the build system to fail (because as non-root user, the user will run lbmk and it will try to update those files, and fail because it can't, due to lack of permissions) this patch fixes the issue, by only generating those files if the user is *not* root Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-11-06add grub mods: diskfilter,hashsum,loadenv,setjmpLeah Rowe
Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-11-06re-add grub modules: f2fs, json, read, scsi, sleepLeah Rowe
Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-11-06Merge pull request 'Dell Latitude E6530 support' (#151) from ↵Leah Rowe
nic3-14159/lbmk:e6530 into master Reviewed-on: https://codeberg.org/libreboot/lbmk/pulls/151
2023-11-06Merge pull request 'config/coreboot/e6430_12mb: Fix configs' (#150) from ↵Leah Rowe
nic3-14159/lbmk:e6430-config-fixes into master Reviewed-on: https://codeberg.org/libreboot/lbmk/pulls/150
2023-11-06Merge pull request 'nvmhelp' (#152) from Riku_V/lbmk:nvmhelp into masterLeah Rowe
Reviewed-on: https://codeberg.org/libreboot/lbmk/pulls/152
2023-11-06nvmutil: print usageRiku Viitanen
Signed-off-by: Riku Viitanen <riku.viitanen@protonmail.com>
2023-11-06nvmutil: fix makefileRiku Viitanen
Signed-off-by: Riku Viitanen <riku.viitanen@protonmail.com>
2023-11-05config/coreboot/e6430_12mb: Fix configsNicholas Chin
Fix a few issues with the E6430 configs to make it consistent with configs for other boards and function as intended. - Add VBT to CBFS: Although the VBT was enabled at the board level Kconfig in a previous commit (CONFIG_INTEL_GMA_HAVE_VBT), the config to actually add the VBT to CBFS was still unset. - Enable the static option table: The old config would always use the fallback values hard coded in the coreboot tree, rather than the settings in the cmos.default file - Enable DRAM clear on boot: This was not set previously, even though most other boards set this for security. Signed-off-by: Nicholas Chin <nic.c3.14@gmail.com>
2023-11-05Add Dell Latitude E6530 supportNicholas Chin
This is pretty much the same as the E6430 Signed-off-by: Nicholas Chin <nic.c3.14@gmail.com>
2023-11-05config/ifd: Rename e6430 to dell_ivybridgeNicholas Chin
This is to support future patches for other Ivy Bridge Dell Latitudes. Signed-off-by: Nicholas Chin <nic.c3.14@gmail.com>
2023-11-06Libreboot 2023110620231106Leah Rowe
Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-11-06put docs under docs/ in releases (not src/docs/)Leah Rowe
Signed-off-by: Leah Rowe <leah@libreboot.org>
2023-11-06Merge pull request 'nvmutil: make install' (#149) from Riku_V/lbmk:nvmins ↵Leah Rowe
into master Reviewed-on: https://codeberg.org/libreboot/lbmk/pulls/149
2023-11-05include untitledssg docs in releasesLeah Rowe
now the docs are complete, in releases. they contain the libreboot site, libreboot images, the untitled static site generator and untitled static site generator documentation. Signed-off-by: Leah Rowe <leah@libreboot.org>