summaryrefslogtreecommitdiff
path: root/config/git/deguard
AgeCommit message (Collapse)Author
18 hoursxbmk: make all projects multi-treeLeah Rowe
we currently distinguish, by virtue of logic, multi- and single-tree projects. this introduces a lot of complexity, so the following patch has removed this distinction. all single-tree projects are now multi tree, but with only one tree. other design changes: config/git removed. rev/tree now handled with mkhelper and target configs. this allows per-tree remote handling, so we could (for example) add the mrchromebox coreboot fork easily, for specific chromebook models. config/project is now config/module/project. this cleans up the main config/ directory. cfgname variable: .config no longer hardcoded when doing configs in projects. it is configurable with this variable. if unset, the previous .cfg is used noconfig variable: set this in target/mkhelper configs, and config/module/project/tree/config/ is unused; instead, make is called without config copying. a "noconfig" placeholder is used. this enables cleaner usage of previously single-tree projects in the new multi-tree-only structure. cfgvars: variables reinitialised in project config are cleaned more reliably. in particular, several variables e.g. autogenargs were not being reset between projects, although the autogenargs variable is currently unused. general cleanup has been conducted across the build system, as part of this redesign. several parts of the build system more over-engineered as a result of the previous design, and the new design enabled a severe reduction in sloccount (75 lines reduced in lbmk). yes, this change *adds features* but there are fewer lines of code than before. this is the best kind of change. way better than the 3-line-diff. yes. rev= and tree= are set more centrally in configs. the mkhelper config can be used to set url/url_bkup, but individual trees can override them. configs have been cleaned up, with several variables now much more heavily centralised. config/git/ was used before to first download the bare repository, and then the real clone was made with patches. this allows git repositories to be cached for future re-builds. with config/git/ gone, the download logic for projects is more centrally implemented. a separate call to ./mk -f is no longer performed, and in fact ./mk -f never needs to be used anymore as a result. ./mk -f now is basically the same thing as -b, just without any action performed. this change will allow rapid expansion of the libreboot project. i want to add hundreds of chromebooks to the project, using mrchromebox, but the previous design did not permit this. this change means that i can easily have unlimited upstreams per project. coreboot will, in some follow-up changes, have the following upstreams: coreboot/default: coreboot.org coreboot/fam15h: 15h.org fork coreboot/chromebook: mrchromebox fork this can now be done freely without massive changes to the build system. under the previous design, i worked on a now-abandoned patch to do N remotes per project, reading repo links from a file. this meant that i'd have coreboot.org first (main and backup), then mrchromebox. this meant that lbmk would failover through to mrchromebox, wasting time for the user. this new design is much cleaner, and will enable the project to be maintained much more easily. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-12-19update deguardLeah Rowe
this adds the recent kaby thinkpads Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-10-16git: don't use review.coreboot.org as mainLeah Rowe
where backup links are available, use those as main instead. this is because of the new XBMK_CACHE_MIRROR variable, which makes --mirror be used when performed on review.coreboot.org, this also pulls down all changes from gerrit code review; the github backups for example only contain the official branches, but gerrit creates a new ref per merge request. a user can still run ./mk -F to force pulling all repos, including the coreboot.org ones, but use of -f will skip the coreboot.org ones if the backup links worked and contain the local commit needed, by a given project used in xbmk. this patch won't change any real-world behaviour for xbmk users, but it is done as a courtesy to the coreboot project, in that it largely avoids a sudden surge in coreboot.org's traffic if lots of users start doing XBMK_CACHE_MIRROR=y if XBMK_CACHE_MIRROR is not set, or set to anything other than y, a regular clone is performed, saving cached sources to cache/clone/ - otherwise, cache/mirror/ is used. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-07-06deguard: bump to rev 0ed3e4fLeah Rowe
There really isn't anything functionally different. However, this means one less patch is needed in lbmk. Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-27add spdx headers to various config filesLeah Rowe
Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-01vendor.sh: Use the new deguard for 3050microLeah Rowe
I'm adding ThinkPad T480 support next, which requires the new revision of deguard. Mate Kukri changed the way deguard is used, in a rewrite of the project, so lbmk has to change too. Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-09-24Add Mate Kukri's deguard utilityLeah Rowe
This program disables the Intel Boot Guard on Dell OptiPlex 3050 Micro, via Intel ME modification. Using this hack, you can run unsigned code on the ME. Mate disabled BootGuard this way. This will be used to add Dell OptiPlex 3050 Micro support in Libreboot. Signed-off-by: Leah Rowe <leah@libreboot.org>