summaryrefslogtreecommitdiff
path: root/config
AgeCommit message (Collapse)Author
2025-04-29u-boot: arm64: Add new upstream defconfigsAlper Nebi Yasak
Copy over the new upstream defconfigs from the refreshed U-Boot trees, so we can fold our modifications into them. Manually done, but like: do_defconfig() { ours="$1" theirs="$2" tree="$3" cp src/u-boot/${tree}/configs/${theirs}_defconfig \ config/u-boot/${ours}/config/default } do_defconfig amd64coreboot coreboot64 x86_64 do_defconfig i386coreboot coreboot x86 do_defconfig gru_bob chromebook_bob default do_defconfig gru_kevin chromebook_kevin default do_defconfig qemu_arm_12mb qemu_arm64 default Signed-off-by: Alper Nebi Yasak <alpernebiyasak@gmail.com>
2025-04-29u-boot: arm64: Rebase to v2025.04Alper Nebi Yasak
Set the U-Boot revision to the commit hash for v2025.04, and rebase the patches for the default U-Boot tree to accommodate for upstream changes: - The SPL/TPL/VPL phases are being unified under the xPL name, so there's a config rename. - Some test macros were renamed, for the video-related patches. - Add some missing hunks for video damage series. - Upstream Makefile adds another argument to the binman call. - The SWIG related patch is merged upstream, drop it. I'm not sure if src/u-boot/* directories are regenerated on new builds, so it may be necessary to remove them manually after applying this. Signed-off-by: Alper Nebi Yasak <alpernebiyasak@gmail.com>
2025-04-29u-boot: arm64: Save our modifications to the upstream defconfigsAlper Nebi Yasak
Run diffconfig from Linux to track our modifications to the old upstream defconfigs, so we can apply them to the new ones. Restore the original defconfigs to highlight our changes here, and upstream changes in the next commit. Done manually, but something like: do_diff() { ours="$1" theirs="$2" tree="$3" diffconfig \ src/u-boot/${tree}/configs/${theirs}_defconfig \ config/u-boot/${ours}/config/default \ >config/u-boot/${ours}/config/diffconfig cp src/u-boot/${tree}/configs/${theirs}_defconfig \ config/u-boot/${ours}/config/default } do_diff amd64coreboot coreboot64 x86_64 do_diff i386coreboot coreboot x86 do_diff gru_bob chromebook_bob default do_diff gru_kevin chromebook_kevin default do_diff qemu_arm64_12mb qemu_arm64 default Signed-off-by: Alper Nebi Yasak <alpernebiyasak@gmail.com>
2025-04-29u-boot: arm64: Turn configs into defconfigsAlper Nebi Yasak
Run `./mk -s u-boot` to convert our configs into defconfigs, so we can keep our changes to the old upstream defconfigs and re-apply them to the new upstream defconfigs. Signed-off-by: Alper Nebi Yasak <alpernebiyasak@gmail.com>
2025-04-26update uefitool to rev a072527, 26 Apr 2025Leah Rowe
This fixes a problem, in that CMake 4.0 dropped compatibility with CMake version 3.5; UEFIExtract/CMakeLists.txt had the line: CMAKE_MINIMUM_REQUIRED(VERSION 3.1.0 FATAL_ERROR) This is lower than 3.5. The new version has this: CMAKE_MINIMUM_REQUIRED(VERSION 3.22) Which is higher than 3.5, in terms of version number. This brings in the following upstream changes: * a072527 Convert other uses of 0xABCD back to ABCDh * a19aead Revert "Update hexadecimal numbers output format from ABCDh to 0xABCD" due to breaking downstream tools * 7752279 Improve region access settings info for Intel v2 descriptor * 6f6debb Add volume header info on NumBlocks and Length used to calcualte alternative size of it * f64ba09 Minor fix for embedded QHexView on Windows * 2b23bbd Implement Apple developer signing for macOS builds * 9cc9518 Update hexadecimal numbers output format from ABCDh to 0xABCD * 73d07cd Add Kaitai-based parser for Dell DVAR store * c8b7151 Fix minor bug while presenting the EOF elemement of AppleSysF store * 892111a Add new fields into Intel Microcode header * 7cea8ee Remove outdated definition of FLASH_PARAMETERS * c38ed92 Add missing header comments to goto*dialog.h * 22bb757 Remove PATH_MAX from realpath * d61d759 Make sure to wrap all uses of kaitai::kstream into try-catch blocks * 7ef3719 Add initial support for Insyde H2O FlashDeviceMap rev4 * 97a85f9 Add Microsoft LZMA section GUID * a077743 Bump version numbers * 07742a5 Update GUID database * a12be6b Address review comments * 9719b0c Update copyright and authors in About UEFITool window * fbf6afd Expand Type column of the report to fit new FlashDeviceMap store and entry types * 3cb5dc0 Add SLIC pubkey and marker parsers * fd0faea Add Phoenix CMDB parser * 01e2e08 Add FFS volume parser for non-AMI NVRAM areas * 4e2a8f6 Add Intel uCode parser * 58366f4 Add Insyde Flash Device Map parser * b98edf6 Add Phoenix EVSA parser * f989fdf Add Phoenix FlashMap parser * 4e600eb Add Apple SysF/Diag parser * 2d6eaa9 Add EDK2 FTW parser * ca7d4ca Add Insyde FDC parser * 34904bd Add KaitaiStruct parsing of Phoenix VSS2 * 489b85f Rewrite VSS and VSS2 NVRAM variable parsers in KaitaiStruct * 2661b8f Remove manual NVRAM parsing, add EDK2 VSS parser written in KaitaiStruct * d91115f Also sign UEFIFind and UEFIExtract for macOS * 0fae05c Add adhoc signature to UEFITool on macOS * 5e6a1c7 Fix CFBundleIdentifier in UEFITool Info.plist * 8d7e01c Make sure to initialize counterUncData * b1ad055 Bump version numbers * 7dd9014 Update GUID database * 4e3fa58 Update QHexView, build it as a library for Qt6 builds * 369f101 Enable building ffsparser_fuzzer during CI/CD, improve readUnaligned to silence Clang UBSAN * ff42cec UEFIExtract: add support for extracting uncompressedData for tree items that have it * c94f78a Add missing common/LZMA/SDK/C/7zWindows.h * b5756f9 Revert old patch from common/LZMA/SDK/C/CpuArch.c * 65fb4a8 Update LZMA SDK to 24.09 * e66bc7d Apply a small patch to common/zlib/gzguts.h to fix a build issue in macOS * dcf21fa Update built-in zlib to 1.3.1 * 0af36bd Fix an issue with kaitai_regenerate.sh creating backup files on modern macOS * fd76e89 Update README.md * 427d8ec Update README.md * a824260 Add MX77L12850F * a777f1f Update main.yml * 5f23377 Update main.yml * 932120c Use x64 macos-13 runner for FreeBSD in main.yml * a8c008c Update macos-12 to macos-latest in main.yml * 6b853f8 Fix SonarCube Scan action version * 66565a5 Try using new SonarCube scan action * 371448d Enable long file paths for UEFIFind * b0cd7fe Update upload-artifacts action to v4 * 4b868bb Remove CodeQL and PVS-Studio from main.yml * 214b356 Add AMIC A25LQ64 to internal JEDEC ID database * 0030ea9 Fix findPattern logic when pattern is at the end of the data * 3441255 fix: add qt version limit to setDesktopFileName * 941ee6c Set desktop file name to fix the missing icon when running under Wayland * c550853 Defined ACCESSPERMS for musl * bf93a5e Bump version numbers * d03a8f2 Fixing FreeBSD action * 0a88da1 Update guids.csv * 6f9a4c0 Fix off-by-one error in parsing IFWI partition table * e0b1e02 Update main.yml * 161c697 Update main.yml * 573452e Update main.yml * 166c797 add Micron XM25RH128C * 0e11189 fix a few misspellings * daf5851 Update README.md * 1cba371 Update guids.csv * 4992474 Fix CPD Extension offset (reverts 29915ca) * 29915ca Fix CPD Manifest's partition offset The ACCESSPERMS patch has been removed, because upstream already dealt with this. Libreboot had made the same fix independently, without realising that upstream also did. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-22coreboot/hp8300cmt: purge xhci_overcurrent_mappingLeah Rowe
This prevents a build error, as the variable is no longer used at all by coreboot (EHCI mapping is used as reference instead). Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-22Fix VBT path on HP Elite desktopsLeah Rowe
Also: hp8300cmt_16mb did not specify a data.vbt path, even though it is indeed available in the coreboot tree. This has been corrected. The previous lack of VBT on hp8300cmt_16mb wasn't really a big problem, since coreboot handles initialisation anyway, and it's basically optional on Linux. Coreboot doesn't parse VBT at all. This patch should fix build errors, that were caused on the recent revision update, where several of the HP desktops have now been turned into variants. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-22ifd/q45t_am: unlock regions by defaultLeah Rowe
i used ifdtool --unlock to do this Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-22coreboot/g43t_am3: use ifd-based setupLeah Rowe
no-ME setup. with a gbe file. we previously made this a descriptorless setup. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-22coreboot/q45t_am3: use ifd-based setupLeah Rowe
Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-22coreboot/default: add missing submodulesLeah Rowe
due to a rule in .gitignore, these were ignored, because it ignores .tar.xz entries in git status Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-22NEW MAINBOARD: Acer Q45T-AM (G43T-AM3 variant)Leah Rowe
Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-22coreboot/g43t_am3: fix data.vbt pathLeah Rowe
this board became a variant, in the new coreboot revision that lbmk recently updated to. fix the data.vbt path to prevent error. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-21add missing config/data/coreboot/0Leah Rowe
this is a file containing one byte, of value zero i meant to add it in previous commits, for the resizing and shrinking of tarballs when inserting or deleting vendor files used by include/vendor.sh Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-21coreboot/next: merge with coreboot/defaultLeah Rowe
I also cherry-picked a patch from Heads, that fixes build issues caused by the hacks in the T480 port; several changes made by Mate are now ifdef'd based on whether a KabyLake ThinkPad is specified in defconfig. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-21coreboot/default: Update, c247f62749b (8 Feb 2025)Leah Rowe
This is currently the latest revision of coreboot. Other coreboot trees to follow. The "next" tree will also be merged with coreboot/default, in a follow-up commit. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-20Update the GRUB revisionsLeah Rowe
A number of regressions were caused by the recent CVE fixes, many of which have since been fixed upstream. This includes several ext4 file system bugs, which caused some systems not to boot properly, when dealing with very large initramfs files. No additional patching has been made. This will be tested, and then used to provide a revision update for Libreboot 20241206. After this, there are several additional OOT patches that will be merged, for the next *testing release* of Libreboot. Update to this revision, for all GRUB trees: a4da71dafeea519b034beb159dfe80c486c2107c This brings in the following changes from upstream: * a4da71daf util/grub-install: Include raid5rec module for RAID 4 as well * 223fcf808 loader/ia64/efi/linux: Reset grub_errno on failure to allocate * 6504a8d4b lib/datetime: Specify license in emu module * 8fef533cf configure: Add -mno-relax on riscv* * 1fe094855 docs: Document the long options of tpm2_key_protect_init * 6252eb97c INSTALL: Document the packages needed for TPM2 key protector tests * 9d4b382aa docs: Update NV index mode of TPM2 key protector * 2043b6899 tests/tpm2_key_protector_test: Add more NV index mode tests * 9f66a4719 tests/tpm2_key_protector_test: Reset "ret" on fail * b7d89e667 tests/tpm2_key_protector_test: Simplify the NV index mode test * 5934bf51c util/grub-protect: Support NV index mode * cd9cb944d tpm2_key_protector: Support NV index handles * fa69deac5 tpm2_key_protector: Unseal key from a buffer * 75c480885 tss2: Add TPM 2.0 NV index commands * 041164d00 tss2: Fix the missing authCommand * 46c9f3a8d tpm2_key_protector: Add tpm2_dump_pcr command * 617dab9e4 tpm2_key_protector: Dump PCRs on policy fail * 204a6ddfb loader/i386/linux: Update linux_kernel_params to match upstream * 6b64f297e loader/xnu: Fix memory leak * f94d257e8 fs/btrfs: Fix memory leaks * 81146fb62 loader/i386/linux: Fix resource leak * 1d0059447 lib/reloacator: Fix memory leaks * f3f1fcecd disk/ldm: Fix memory leaks * aae2ea619 fs/ntfs: Fix NULL pointer dereference and possible infinite loop * 3b25e494d net/drivers/ieee1275/ofnet: Add missing grub_malloc() * fee6081ec kern/ieee1275/init: Increase MIN_RMA size for CAS negotiation on PowerPC machines * b66c6f918 fs/zfs: Fix a number of memory leaks in ZFS code * 1d59f39b5 tests/util/grub-shell: Remove the work directory on successful run and debug is not on * e0116f3bd tests/grub_cmd_cryptomount: Remove temporary directories if successful and debug is not on * e6e2b73db tests/grub_cmd_cryptomount: Default TMPDIR to /tmp * 32b02bb92 tests/grub_cmd_cryptomount: Cleanup the cryptsetup script unless debug is enabled * c188ca5d5 tests: Cleanup generated files on expected failure in grub_cmd_cryptomount * 50320c093 tests/util/grub-shell-luks-tester: Add missing line to create RET variable in cleanup * bb6d3199b tests/util/grub-shell-luks-tester: Find cryptodisk by UUID * 3fd163e45 tests/util/grub-shell: Default qemuopts to envvar $GRUB_QEMU_OPTS * ff7f55307 disk/lvm: Add informational messages in error cases of ignored features * a16b4304a disk/lvm: Add support for cachevol LV * 9a37d6114 disk/lvm: Add support for integrity LV * 6c14b87d6 lvm: Match all LVM segments before validation * d34b9120e disk/lvm: Remove unused cache_pool * 90848a1f7 disk/lvm: Make cache_lv more generic as ignored_feature_lv * 488ac8bda commands/ls: Add directory header for dir args * 096bf59e4 commands/ls: Print full paths for file args * 90288fc48 commands/ls: Output path for single file arguments given with path * 6337d84af commands/ls: Show modification time for file paths * cbfb031b1 commands/ls: Merge print_files_long() and print_files() into print_file() * 112d2069c commands/ls: Return proper GRUB_ERR_* for functions returning type grub_err_t * da9740cd5 commands/acpi: Use options enum to index command options * 1acf11fe4 docs: Capture additional commands restricted by lockdown * 6a168afd3 docs: Document restricted filesystems in lockdown * be0ae9583 loader/i386/bsd: Fix type passed for the kernel * ee27f07a6 kern/partition: Unbreak support for nested partitions * cb639acea lib/tss2/tss2_structs.h: Fix clang build - remove duplicate typedef * 696e35b7f include/grub/mm.h: Remove duplicate inclusion of grub/err.h * 187338f1a script/execute: Don't let trailing blank lines determine the return code * ff173a1c0 gitignore: Ignore generated files from libtasn * fbcc38891 util/grub.d/30_os-prober.in: Conditionally show or hide chain and efi menu entries * 56ccc5ed5 util/grub.d/30_os-prober.in: Fix GRUB_OS_PROBER_SKIP_LIST for non-EFI * 01f064064 docs: Do not reference non-existent --dumb option * 3f440b5a5 docs: Replace @lbracechar{} and @rbracechar{} with @{ and @} * f20988738 fs/xfs: Fix grub_xfs_iterate_dir() return value in case of failure * 1ed2628b5 fs/xfs: Add new superblock features added in Linux 6.12/6.13 * 348cd416a fs/ext2: Rework out-of-bounds read for inline and external extents * c730eddd2 disk/ahci: Remove conditional operator for endtime * f0a08324d term/ns8250-spcr: Return if redirection is disabled * 7161e2437 commands/file: Fix NULL dereference in the knetbsd tests * 11b9c2dd0 gdb_helper: Typo hueristic * 224aefd05 kern/efi/mm: Reset grub_mm_add_region_fn after ExitBootServices() call * 531750f7b i386/tsc: The GRUB menu gets stuck due to unserialized rdtsc * f2a1f66e7 kern/i386/tsc_pmtimer: The GRUB menu gets stuck due to failed calibration * 13f005ed8 loader/i386/linux: Fix cleanup if kernel doesn't support 64-bit addressing Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-17vendor.sh: yet even more code cleanupLeah Rowe
code equals bugs. code that doesn't exist can't have bugs, so it is superior by definition. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-11lbmk: unified PWD handling (work directory)Leah Rowe
instead of running pwd all the time, run it once in lib.sh, and export PWD. for lbmk-specific use of PWD, use xbmkpwd, which contains the value of PWD as was set by the pwd utility in lib.sh. many parts of lbmk rely on pwd, and it *must* be correct. this change adds basic error handling, since pwd can in fact return errors in some cases. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-11lbmk: use pwd util, not PWD environmental variableLeah Rowe
PWD could be anything, if the user manually exported it before running lbmk. always run pwd instead, to get the real string. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-04grub/xhci: Remove unused patchLeah Rowe
I was importing a patch for the z790 boards, but Libreboot doesn't support this board yet, and the patch was a hack that may affect other boards. When I do later merge that board, and I find that the hack is needed, I'll simply make another grub tree within lbmk. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-04-01remove _fsp targets (keep _vfsp)Leah Rowe
_fsp is obsolete. people should use _vfsp _fsp was kept for a short while, for backward compatibility, but nobody really uses it now and it just causes confusion Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-02-19Bump GRUB revision to add 73 security patchesLeah Rowe
You can find information about these patches here: https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html GRUB has been on a crusade as of late, to proactively audit and fix many security vulnerabilities. This lbmk change brings in a comprehensive series of patches that fix bugs ranging from possible buffer overflows, use-after frees, null derefs and so on. These changes are critical, so a revision release *will* be issued, for the Libreboot 20241206 release series. This change imports the following 73 patches which are present on the upstream GRUB repository (commit IDs matched to upstream): * 4dc616657 loader/i386/bsd: Use safe math to avoid underflow * 490a6ab71 loader/i386/linux: Cast left shift to grub_uint32_t * a8d6b0633 kern/misc: Add sanity check after grub_strtoul() call * 8e6e87e79 kern/partition: Add sanity check after grub_strtoul() call * 5b36a5210 normal/menu: Use safe math to avoid an integer overflow * 9907d9c27 bus/usb/ehci: Define GRUB_EHCI_TOGGLE as grub_uint32_t * f8795cde2 misc: Ensure consistent overflow error messages * 66733f7c7 osdep/unix/getroot: Fix potential underflow * d13b6e8eb script/execute: Fix potential underflow and NULL dereference * e3c578a56 fs/sfs: Check if allocated memory is NULL * 1c06ec900 net: Check if returned pointer for allocated memory is NULL * dee2c14fd net: Prevent overflows when allocating memory for arrays * 4beeff8a3 net: Use safe math macros to prevent overflows * dd6a4c8d1 fs/zfs: Add missing NULL check after grub_strdup() call * 13065f69d fs/zfs: Check if returned pointer for allocated memory is NULL * 7f38e32c7 fs/zfs: Prevent overflows when allocating memory for arrays * 88e491a0f fs/zfs: Use safe math macros to prevent overflows * cde9f7f33 fs: Prevent overflows when assigning returned values from read_number() * 84bc0a9a6 fs: Prevent overflows when allocating memory for arrays * 6608163b0 fs: Use safe math macros to prevent overflows * fbaddcca5 disk/ieee1275/ofdisk: Call grub_ieee1275_close() when grub_malloc() fails * 33bd6b5ac disk: Check if returned pointer for allocated memory is NULL * d8151f983 disk: Prevent overflows when allocating memory for arrays * c407724da disk: Use safe math macros to prevent overflows * c4bc55da2 fs: Disable many filesystems under lockdown * 26db66050 fs/bfs: Disable under lockdown * 5f31164ae commands/hexdump: Disable memory reading in lockdown mode * 340e4d058 commands/memrw: Disable memory reading in lockdown mode * 34824806a commands/minicmd: Block the dump command in lockdown mode * c68b7d236 commands/test: Stack overflow due to unlimited recursion depth * dad8f5029 commands/read: Fix an integer overflow when supplying more than 2^31 characters * b970a5ed9 gettext: Integer overflow leads to heap OOB write * 09bd6eb58 gettext: Integer overflow leads to heap OOB write or read * 7580addfc gettext: Remove variables hooks on module unload * 9c1619773 normal: Remove variables hooks on module unload * 2123c5bca commands/pgp: Unregister the "check_signatures" hooks on module unload * 0bf56bce4 commands/ls: Fix NULL dereference * 05be856a8 commands/extcmd: Missing check for failed allocation * 98ad84328 kern/dl: Check for the SHF_INFO_LINK flag in grub_dl_relocate_symbols() * d72208423 kern/dl: Use correct segment in grub_dl_set_mem_attrs() * 500e5fdd8 kern/dl: Fix for an integer overflow in grub_dl_ref() * 2c34af908 video/readers/jpeg: Do not permit duplicate SOF0 markers in JPEG * 0707accab net/tftp: Fix stack buffer overflow in tftp_open() * 5eef88152 net: Fix OOB write in grub_net_search_config_file() * aa8b4d7fa net: Remove variables hooks when interface is unregisted * a1dd8e59d net: Unregister net_default_ip and net_default_mac variables hooks on unload * d8a937cca script/execute: Limit the recursion depth * 8a7103fdd kern/partition: Limit recursion in part_iterate() * 18212f064 kern/disk: Limit recursion depth * 67f70f70a disk/loopback: Reference tracking for the loopback * 13febd78d disk/cryptodisk: Require authentication after TPM unlock for CLI access * 16f196874 kern/file: Implement filesystem reference counting * a79106872 kern/file: Ensure file->data is set * d1d6b7ea5 fs/xfs: Ensuring failing to mount sets a grub_errno * 6ccc77b59 fs/xfs: Fix out-of-bounds read * 067b6d225 fs/ntfs: Implement attribute verification * 048777bc2 fs/ntfs: Use a helper function to access attributes * 237a71184 fs/ntfs: Track the end of the MFT attribute buffer * aff263187 fs/ntfs: Fix out-of-bounds read * 7e2f750f0 fs/ext2: Fix out-of-bounds read for inline extents * edd995a26 fs/jfs: Inconsistent signed/unsigned types usage in return values * bd999310f fs/jfs: Use full 40 bits offset and address for a data extent * ab09fd053 fs/jfs: Fix OOB read caused by invalid dir slot index * 66175696f fs/jfs: Fix OOB read in jfs_getent() * 1443833a9 fs/iso9660: Fix invalid free * 965db5970 fs/iso9660: Set a grub_errno if mount fails * f7c070a2e fs/hfsplus: Set a grub_errno if mount fails * 563436258 fs/f2fs: Set a grub_errno if mount fails * 0087bc690 fs/tar: Integer overflow leads to heap OOB write * 2c8ac08c9 fs/tar: Initialize name in grub_cpio_find_file() * 417547c10 fs/hfs: Fix stack OOB write with grub_strcpy() * c1a291b01 fs/ufs: Fix a heap OOB write * ea703528a misc: Implement grub_strlcpy() Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-02-12Update pico-serprog revisionRiku Viitanen
Most importantly this should fix issues with rp2350 boards not synchronizing properly. Signed-off-by: Riku Viitanen <riku.viitanen@protonmail.com>
2025-01-31deps/arch: genisoimage belongs to cdrtoolsRunxi Yu
genisoimage is not a an AUR package as suggested by aur_notice. It is available in the "cdrtools" package in the repositories. References: https://archlinux.org/packages/extra/x86_64/cdrtools/ Signed-off-by: Runxi Yu <me@runxiyu.org>
2025-01-29restore old x230 gbe fileLeah Rowe
i accidentally committed one where i'd changed the mac address, on a previous revision to nvmutil Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-01-29util/nvmutil: Only read up to 4KB on larger gbeLeah Rowe
On the 16KB and 128KB files, we still only need to operate on 4KB at the start of each block, where the block size is larger than 4KB. The reason we deal with the entire 4KB block is because the nvm words (in the 128 byte section) can define an extended nvm area anywhere after 128 bytes, within the 128 byte block. We could systematically read where that is being handled, and handle it; we could then allocate less memory, and read/write fewer bytes, but many block devices like SSDs and flash drives have at least a 4KB erase block anyway, so it's kinda pointless. saving memory would be nice, but I don't really want to bloat the code. This is a nice easy optimisation, to avoid wasting an additional 8KB of memory when handling 16KB files, and additional 120KB if handling 128KB files, since nf is what determines how much memory will be allocated. the alternative would be to use an mmap, and then we could reasonably handle the idea above for only writing, surgically, what we need: nvm words and extended nvm words. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-01-18snipLeah Rowe
Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-01-14grub/xhci: Add xHCI non-root-hub fixes from NitrokeyLeah Rowe
See: https://github.com/Nitrokey/nethsm-grub/commits/nethsm-z790?since=2025-01-13&until=2025-01-13 And more generally, see branch: https://github.com/Nitrokey/nethsm-grub/commits/nethsm-z790 This brings in a few minor fixes, and also a not-so-minor fix: Add TT (transaction translation) handling for non-SuperSpeed devices in xhci.c More generally, this patchset will improve non-root hub support in the xHCI code. There is also a patch to work around a quirk on the MSI Z790-P mainboard, which I'm planning to add to Libreboot at a later date. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-01-12add gnults-devel to fedora 41 dependenciesLeah Rowe
Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-01-12grub.cfg: scan luks *inside lvm*Leah Rowe
the user might have boot their kernel inside luks inside lvm for some dumb reason it's theoretically possible that the user would be so silly indeed Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-01-12grub.cfg: Scan *every* LVM deviceLeah Rowe
We were scanning a hardcoded set up LVM volumes, so in practise, LVM boot didn't really work. We did this because scanning for asterisk is slow on some machines. However, since LVM is the last one, and since most users don't boot directly from LVM, it wasn't that much of an issue in practise. Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-01-06Libreboot 20241206, 8th revision20241206rev8Leah Rowe
Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-01-06pico-sdk: Import picotool as a dependencyLeah Rowe
We were previously not handling picotool at all, and pico-sdk would download picotool itself, at build time. This means that the source archive, if created, would not contain picotool. While not strictly required, for complete corresponding source, since it's a toolchain and not the actual pico-serprog firmware, it is my policy that releases must include full corresponding source code, when it is feasible to do so. I must say, I intensely dislike cmake, with such burning passion; I am thoroughly displeased by how hacky this is, but it works and now nothing is in my way for a Libreboot 20241206 rev8 release! Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-01-06coreboot/next uprev: Fix T480 backlight keysLeah Rowe
Backlight controls already worked on the T480/T480s, if you used software-based controls e.g. set a hotkey for xbacklight, but the actual Fn buttons on the keyboard did not function at all; this patch fixes that issue This also fixes LEDs on T480, on warm reboot, which are otherwise off. It sets them back to the state they were at on cold boot. Both fixes are from Mate Kukri in the new T480 patchset. In addition to these fixes, Mate made several code quality improvements as part of efforts to upstream this code into coreboot's main branch. Updated coreboot T480 patchset to patchset 25. This change will be reflected next in a modification to the Libreboot documentation. I had to make several other fixes on top of this; see diff. A debug option was being enabled relating to stack overflow detection, which we ought to avoid to mitigate over-zealous build errors and stack corruption at boot; an errant option for an EC we don't use was also being enabled, by some code in coreboot relating to a Dasharo board; both issues have been mitigated in this lbmk patch, by patching the upstream coreboot build system in this patch. As part of this change, the coreboot/next tree within lbmk has been updated. Existing patches have been rebased. This brings in the following changes from upstream, relative to the previous revision used on coreboot/next: * 2f1e4e5e85 mb/hp/snb_ivb_desktops/z220*: Remove leftover old usb configurations * 9e859154ea mb/hp/snb_ivb_desktops: Remove unused includes * 70b33cb38d ec/google/chromeec/acpi: Add support for generic LPC memory range * f2ad73b5d1 mb/google/rauru: Raise little core CPU frequency from 700MHz to 2.4GHz * 044017b4cd mb/google/rauru: Initialize PMICs in romstage * 397c3e3c52 mb/google/fatcat/var/fatcat: Add touchpad wake source * e18f0f53cb mb/google/fatcat/var/fatcat: Change touchpad interrupt to edge trigger * a8b4ee246d mb/google/nissa/var/rull: Configure Acoustic noise mitigation * c09fd09edf tree: Use "true", "false" for has_power_resource * 1e64875265 mb/google/fatcat: Remove unused <stdio.h> * f316ab6796 mb/google/fatcat/var/francka: Fix early pad configuration for TPM * 6ca2c3c415 soc/mediatek/mt8196: Fix indentation in Makefile.mk * 94c1307fdb soc/mediatek/mt8196: Add dynamic power-saving for peripheral clocks * 67b140a949 tree: Use "true", "false" for fine_grained_control * 97923aebe1 mb/prodrive/atlas: Add initial support for options * 1a16146795 Fix up CFR's open issues * 7e8d8cdea2 mb/google/rauru: Initialize SPM * 3153432b83 soc/intel/alderlake: Add function to force disable memory channels * 8ea2b0ab46 mb/google/fatcat/var/francka: Use RAM ID 2 for MT62F2G32D4DS-020 WT:F * 5f600a8ee9 mb/google/fatcat: Limit Power Limit when battery is missing * 5213646241 ec/google/chromeec: Add function to detect barrel charger * 5ef70e5f22 ec/google/chromeec: Add API to check if battery is critically low * 42fd35b486 ec/google/chromeec: Add API to check if charger is present * 56370d0283 ec/google/chromeec: Add API to check if a USB PD charger is attached * 001e7a0b45 soc/mediatek/mt8196: Add MT6685 Clock IC driver * 5852841ca7 soc/intel/meteorlake: Use ASPM helpers from Alder Lake * b04f057efd mb/google/rex/var/kanix: Add Synaptics touchpad * af0c2e7a2e mb/prodrive/atlas: Remove the workaround for CLKREQ pins * 13316c644b mb/google/fatcat/var/fatcat: Modify interrupt GPIO for LPSS I2C touchpad * 825e9173b4 soc/mediatek: Distinguish pmic_init_setting function name * d65ff8492c soc/intel/xeon_sp/spr/acpi: Fix regression * 291778a1bd mb/google/corsola: Add new board variant Wyrdeer * 745dcc861d mb/google/corsola: Refactor mipi_panel_power_on function * 79f60c6b22 mb/google/nissa/var/telith: Disable stylus function * d7934bdd53 Doc/soc/amd/family15h: Fix URLs to AMD documents * 3cb7db4075 soc/mediatek/mt8196: Add PMIC MT6316 driver * 60bce10750 drivers/mipi: Add support for KD_KD110N11_51IE panel * d4c80054a4 soc/mediatek/mt8189: Enable timer compensation v2.5 * 403846f177 soc/mediatek/mt8196: Define MFGPLL_*_BASE using MFGSYS_BASE * b3edaa7b10 mb/google/rauru: Implement SKU ID * b470b48718 mb/google/rauru: Add support for getting storage id * 24a5048948 mb/google/nissa/var/pujjo: Add new supported memory part * c6e27c5fbf mb/google/nissa/var/rull: Add G2 touchscreen to devicetree * 639def1d84 mb/google/fatcat/var/fatcat: Enable FPS * acb8c870b2 mb/google/fatcat: Suppress unnecessary extra space in device trees * d79ba5565d mb/google/nissa/var/telith: Modify PLD for typeC and typeA * 620d2fab06 soc/mediatek/mt8189: Replace SPDX identifiers to GPL-2.0-only OR MIT * d90b1322ab commonlib: Refactor CSE sync eventLog * 4ef6c13b38 mb/google/brya: Adjust EC memory map range to support indexed IO * 1e90bbadfa ec/google/chromeec: Add indexed IO support * a8ab708584 mb/google/nissa/var/quandiso2: Create a quandiso2 variant * 78f610a0ae util/docker/doc.coreboot.org: Allow git to work in envs owned by root * 38ee22f6da util/docker/doc.coreboot.org: Use Alpine minor instead of point releases * 0196c3b6a4 util/docker/doc.coreboot.org: Get rid of bash workarounds * 897b46693b util/docker/doc.coreboot.org: Don't create volumes * a0c45cbf1f 3rdparty/fsp: Update submodule to upstream master * aa562d2881 soc/mediatek/mt8189: Add GPIO driver * 40a863cd60 soc/mediatek/mt8189: Initialize watchdog * 1380ed0cd2 soc/mediatek: Add support for MediaTek firmware support package * 4f92943c89 soc/mediatek/common: Rename GPT_MHZ to TIMER_MHZ for readability * 5a73692e0c soc/mediatek/mt8196: Add SPM loader * 306660c2de util/crossgcc: Update CMake from 3.30.2 to 3.31.3 * f3adc74e44 mb/google/fatcat: Keep GSPIx interface default PCI * 809e704101 soc/intel/pantherlake: Rename GSPI2 to GSPI0A * 222ef676f9 soc/intel/pantherlake: Add ACPI name for GSPI2 * 1fda7027c0 util/crossgcc: Update ACPICA from 20230628 to 20241212 * e35175bb38 Update vboot submodule to upstream main * 9eb4c5aff8 util/ifdtool: Fix memory leaks * 87ae3573b5 mb/starlabs/starlite_adl: Configure GPIO interrupt for Virtual Button * eaf87422b1 ec/starlabs/merlin: Add Intel Virtual Button Driver for Tablet Mode * a1532790b9 docs: Add 24.12 release notes * 8c0df740c7 mb/google/nissa/var/gothrax: Add probe and GPIO config for HDMI and touchpanel * f6fcff5511 docs/security/vboot: Update supported boards * 0dba17da0c mb/google/brya/uldrenite: Add WWAN RW350R-GL power on sequence * 2c4af7cd29 mb/topton/adl: Enable TPM2 (Intel fTPM/PTT) * c11558d4c7 mb/asus/p8z77-m: Drop GPIO by I/O * 4f1a1adef6 mb/topton/adl: Disable mapped SATA port * 81cbe11361 mb/asus/p8z77-m: Revert SIO IRQ settings carried from OEM * 9578c67c77 mb/google/brox: Include CSE reset in mainboard reset expectation * 5af5e66686 util/cbfstool: eliminate late sign of life event * 0797c40d52 src/soc/intel/cmn/blk/cse: Log cse sync information * 9a15a1ed21 soc/intel: Log CSE Sync Early Sign of Life event from a better place * c812c78618 mb/trulo/var/uldrenite: Support USB_OC on the A0 port * ee1a766f05 mb/trulo/var/uldrenite: Set GPP_B5 and B6 to ISH function * 87c9d93a62 mb/google/skywalker: Add MediaTek MT8189 reference board * 6bd51ce42a soc/mediatek/mt8189: Add a stub implementation of MT8189 SoC * ea646c0514 mb/google/rauru: Add pwrsel init in romstage * c3265da005 soc/mediatek/mt8196: Add pwrsel driver * 30d8e1880a ec/google/chromeec: Publish LPC GMR address range via CREC _CRS * bb85775d92 soc/intel/cmn/acpi: Add ACPI method to get LGMR address * 84347d0b45 payloads/Linuxboot: Fix u-root build * 7bcec7a2ef payloads/LinuxBoot: Build x86_64 with host toolchain * e3150e819d util/crossgcc: Add libstdcxx target * 61385c4976 soc/mediatek/common: Move SPM_SYSTEM_BASE_OFFSET to soc folders * 6625dee027 soc/mediatek/common: Use array to represent spm_sw_rsv registers * cd8d6861f6 soc/mediatek/common: Move some functions to spm_v1.c * 91fe658714 drivers/option: Add forms in cbtables * 4d4776f320 mb/emulation/qemu-sbsa: Configure flash region for MMU * dfef1895f2 mainboard: Add MiTAC Computing Whitestone-2 (LGA-4677) * caf8f9f60f mb/google/brya/var/uldrenite: Enable PMC, HECI and SRAM devices * b668c756bf mb/trulo/var/uldrenite: Configure audio (max9360a, rt5682) * 941f994809 mb/trulo/var/uldrenite: Configure Network * 600e7810fb mb/trulo/var/uldrenite: Configure USB ports and mapping * 0261cbe8e9 mb/trulo/var/uldrenite: Configure serial_io and I2C * 113205bcd1 mb/trulo/var/uldrenite: Enable eMMC and DLL tuning parameters * 0dd227f9c1 mb/trulo/var/uldrenite: Enable DPTF, S0ix and configure FIVR setting * 0ce153c8df mb/google/nissa/var/rull: For probe, change unprovisioned to unknown * b57308f437 mb/google/rauru: Add SD card configurations * e969a3df87 soc/mediatek/mt8196: Add SD card configurations * 8be835ce3c soc/mediatek/mt8196: Add tracker driver * 78560f9958 soc/mediatek/mt8196: Add MMinfra driver support * 0b252ef8b4 util/mtkheader: Add GFH header for mt8189 bootblock code * 540eb5ba73 cpu/qemu: Enable IDT_IN_EVERY_STAGE * f9d6fd4e0f soc/intel/xeon_sp: Enable IDT_IN_EVERY_STAGE * c3dee9eaba cpu/intel/car/romstage: Fix false-positive stack corruption * b659fb5cea mb/ocp/tiogapass: Wait for BMC * 7c0556244d drivers/wifi: Update Drive Strength BRI Rsp Table revision * 70bdd2e1fa cpu/x86/topology: Simplify CPU topology initialization * 3a2ffba231 soc/intel/xeon_sp: Introduce early_pch_init * 48ed4b0f85 soc/intel/xeon_sp/lbg: Add support to hide HDA * a857c81122 arch/x86: Disable DEBUG_STACK_OVERFLOW_BREAKPOINTS_IN_ALL_STAGES * 45dabe846d mb/google/brox: Apply ISH_FW_VERSION in Kconfig * e0b1a0dbec vc/intel/fsp/mtl: Update MTL fsp header files from 3471_91 to 4122_21 * c20fd2fc3f 3rdparty/fsp: Update submodule to upstream master * e5b5fc345a soc/intel/xeon_sp: Improve PCI INTx IRQ routing for Gen6 * 673075f102 util/cbfstool: Add eventLog support for ELOG_TYPE_FW_CSE_SYNC * 3235b7c6d5 commonlib: Add ELOG_TYPE_FW_CSE_SYNC eventLog type * 4a0c49e671 soc/intel/pantherlake: Keep image clock configuration enable * 51cc2bacb6 soc/intel/pantherlake: Disable stack overflow debug options * eeb6f67eec Docs: Convert bare URLs into hyperlinks * 2609519704 mb/google/rauru: Implement regulator interface * 8c6426c1b4 soc/mediatek/mt8196: Add PMIC MT6373 driver * bda5b83661 mb/google/brya/var/uldrenite: update gpio settings * afb11d05b9 mb/google/trulo/var/uldrenite: Add memory config * 46df9e1d38 mb/google/brya/var/marasov: Enable GPP_F9 GPIO for early panel power-on * 04d33b90ec mb/google/fatcat: config GPP_F23 as ISH gpio pin * 16ab83b34a soc/mediatek/mt8196: Initialize SSPM * b793209b80 mb/google/brox/var/jubilant: Disable Tccold Handshake * 2f1e67bbc7 mb/google/nissa/var/glassway: Modify touch screen ILIT2901 sequence * a1c50f233d soc/mediatek/mt8196: Add PMIC MT6363 ADC driver * 8910b6ba7d soc/mediatek/mt8196: Add PMIC MT6363 driver * c215889442 soc/mediatek/mt8196: Add PMIF and PMIC driver support * 27fa0595de soc/mediatek/mt8196: Add mtcmos init support * 61a00269a2 mb/amb/birman*/gpio: remove configuration for VDD_MEM_VID[0,1] * 38b59164ca ec/google/chromeec: Define ACPI_NOTIFY_CROS_EC_MKBP constant * 50c9747d87 drivers/usb/intel_bluetooth: Add GBTR Method * 0bb4a220a8 soc/intel/common/cnvi: Fix GBTE path in comment * d33244c3af drivers/usb/intel_bluetooth: Relocate BTRK to \_SB.PCI0 * 04b9627e07 drivers/usb/intel_bluetooth: Fix GBTE to return Local0 * c3f9dd3af3 drivers/usb/intel_bluetooth: Change the Power Resource to S0 * 1cf8d84f3b mb/google/nissa/var/rull: Add 6W and 15W DPTF parameters * 62a9d670bf mb/google/brya/var/uldrenite: Add HDA verb tables * 56278eeed8 mb/google/rex/var/kanix: Enable/Disable PCIE WLAN based on fw_config * 6d3346068b intel/common/block: Program the right power_limits_config entry * 35bf4bc59c commonlib: Add generic word-at-a-time optimization to ipchksum() * e987ba45d6 soc/mediatek/mt8196: Add booker driver * aa3cfd5c69 haswell NRI: Post-process selected timings * 4a4ad2b1e6 haswell NRI: Initialise MPLL * 41c2e1685e soc/intel/xeon_sp: Add PCU PCI drivers * 8721757aca soc/intel/xeon_sp/skx: Configure IOAPICs * e9c546b153 arch/x86: Rename breakpoint removal function * 0351872731 arch/x86: Add breakpoint to stack canary * 572da7c524 acpi/acpigen: generate Create*Field() from name string directly * 2e9aebf63f mb/google/fatcat: Enable Intel DPTF support and configure policies * a8ff286185 mb/google/fatcat: Enable Bayhub Level 2 errata * 230e646d98 mb/google/fatcat: Remove redundant GPIOs for x1 slot * fbacae625a soc/intel/ptl: Enable UFS functionality by adding IRQ programming * b67e001a85 soc/intel/pantherlake: Fix UFS ACPI _ADR calculation * 2496943b5c mb/google/brox/var/jubilant: Set PCIe root port 5 speed to Gen2 * dfdb210e26 soc/intel/common/block: Fixup itss_get_on_chip_dev_pirq * 223dabef56 soc/intel/common/block: Add const qualifier for input of pirq ops * afc49fa013 soc/intel/xeon_sp: Remove lpc_lockdown_config * 1a4ab38035 soc/mediatek/mt8196: Rename SCP to SPM base variables * 3189afbdee soc/intel/common: Drop locking function fast_spi_set_vcl * 01bf34cb28 soc/intel/xeon_sp: Support _PRT reporting for domain * 1399dd8086 soc/intel/xeon_sp: Skip not pre-routed devices in _PRT reporting * a5362f6d73 soc/mediatek/mt8196: Enable ARM Trusted Firmware integration * 42a696090f Update arm-trusted-firmware submodule to upstream master * 861413b295 mb/google/nissa/var/riven: Set PCIe root port 4 speed to Gen2 * d5a11293ff soc/intel/alderlake: Add support for PCIe speed setting * 5b447d00f5 soc/intel/pantherlake: Fix UFS ACPI inclusion in southbridge.asl * 1c51c3e57f device/pci_ids: Add Pantherlake-H GT2 (DID2) * 15109603c6 mainboard/ocp/tiogapass: Enable TPM * 94d200c394 soc/intel/xeon_sp/cpx: Add missing FADT fields * 534585d7bd soc/intel/xeon_sp/skx: Drop ACPI_FADT_8042 * 98ca450a53 soc/intel/xeon_sp: Use generate_p_state_entries * 28c03b501e mb/ocp/tiogapass: Implement mainboard_dimm_slot_exists * 74ee80d207 soc/intel/xeon_sp/cpx: Fix register lock * e1a0e6b738 soc/intel/xeon_sp/skx: Fix CPU init * b04ecb2a5f arch/x86: Enable support for IOAPIC devices * a7437ca340 soc/intel/common/block/cse: allow CSE telemetry on non-lite CSE SKU * 0d284bfc36 soc/intel/mtl/acpi/gpio.asl: fix missing gpio.h include * aeb5ccd129 ec/dasharo/ec: add Dasharo features * 820c7e06d2 soc/mediatek/mt8196: Set DRAMC_PARAM_HEADER_VERSION to 4 * d8104af174 mb/google/rex/var/kanix: Disable FP_MCU based on fw_config * 075a13b775 mb/google/fatcat: Update Soundwire codec address based on devicetree * 2411942a05 drivers/soundwire/alc711: Add common Kconfig for ALC7xx soundwire codecs * 534f81d165 mb/google/fatcat: Update flash layout * 1b175a64e3 soc/intel/ptl: Populate SMBIOS Type 4 with unique serial number * 4b574281f0 soc/intel/cmn/pmc: Retrieve SoC QDF information via PMC IPC * 4ce5304879 soc/intel/xeon_sp: Advertise DIMMs on skylake_sp as well * 5613f0e6be soc/intel/xeon_sp: Fix debug print * 0d827a5810 soc/intel/xeon_sp: Drop SOC_INTEL_MMAPVTD_ONLY_FOR_DPR * d3aa108acf drivers/ipmi/ocp: Add missing include * 37e9c22089 libpayload: configs: Add new config.featuretest to broaden CI * bcced7caea commonlib/device_tree: Make END token part of struct_size * 8ad1ee9b0a util/intelp2m: Print the current project version * 1b9c312273 intelp2m/patform/sunrise: Add unit tests * 2394795279 intelp2m/patform/lewisburg: Add unit tests * bce3363412 intelp2m/patform/apollolake: Add unit tests * 6abf66c8f3 util/intelp2m/parser/template: Add unit test * 6b43e4ba33 MAINTAINERS: Add Yuchi and Vasiliy for Intel Atom Snow Ridge SoC * 5cedebf874 soc/intel/xeon_xp: Remove 1 bytes losing in lower DRAM * cd30d94ae5 mb/google/brya/var/uldrenite: Generate RAM ID and SPD file * cda1e7e553 mb/google/nissa: Create pujjogatwin variant * c0ccace4d5 .checkpatch.conf: Set max line length to 96 * 6f2a8ee8cc soc/mediatek/mt8196: Require DRAM blob to exist * 850cf7d07a Update blobs submodule to upstream main * 75424efdc4 soc/amd/common/psp/psp_def.h: increase P2C_BUFFER_MAXSIZE * 179945291c soc/amd/common/psp/rpmc: fix printk format string * 9b308f4d54 soc/amd/common/psp/psp_smi: report errors in 'handle_psp_command' * 5613f209c7 soc/amd/common/psp_smi_flash: implement SPI flash RPMC command handling * b1f954bc6c soc/amd/common/block/psp/psp_smi_flash.h: fix struct element types * ce01117aa5 drivers/spi: add RPMC support * 78270ef3f1 Documentation/tutorial/managing_local_additions.md: Add symlink info * 0a7c3ed514 soc/mediatek/mt8195: Fix SCP register address * 4c8547704f mb/google/rauru: Add 2nd source TAS2563 amps to support beep * ac83b48cba soc/mediatek/mt8196: Add audio base address definition * c661933a24 soc/mediatek/common: Add read16/write16 support for PMIF * c107755701 vc/intel/fsp: Update PTL FSP headers from 2382_01 to 2431.00 * a417acdfbc mb/google/fatcat: Remove unnecessary prototype * d095f1ea45 soc/amd/glinda: Update MCA banks * 8df4eefd44 soc/mediatek/mt8196: Reserve DRAM buffers for HW TX TRACKING * 5c766bc150 mb/purism/librem_cnl: Add ramtop to cmos.layout for librem_mini * 2007792b08 mb/purism/librem_l1um_v2/ramstage.c: Use DEV_PTR macro * 7f54139a81 Docs/mb/starlabs/labtop_cml.md: Fix footnote syntax Signed-off-by: Leah Rowe <leah@libreboot.org> wip2 Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-01-04add libx86 to arch dependenciesLeah Rowe
needed to compile the "int" tool defined under config/git/ Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-01-04add less to arch dependenciesLeah Rowe
probably not actually needed, but it annoys me that it doesn't come installed by default, and it's needed for certain git operations Signed-off-by: Leah Rowe <leah@libreboot.org>
2025-01-03submodule/grub: use codeberg for 1st gnulib mirrorLeah Rowe
the gnu.org mirror is always slow for some reason, but only for gnulib. it may only be for me, because routing in other countries/networks may differ. when i'm freshly cloning lbmk modules, gnulib is always really slow, like 300KB/s (bytes, not bits) i have 1gbps internet and wish to not have 2005-era speeds, thank you kindly! Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-31hp820g2: fix vendorfile inject and set release=yLeah Rowe
I believed that the compressed nature of refcode was the only non-reproducible thing, but turns out you also need to run rmodtool on the refcode to make the binary relocatable in cbfs. This is based on my reading of the coreboot Makefile. With this change, I can now provide release binaries for the HP EliteBook 820 G2. Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-31fedora41/dependencies: add libuuid-develLeah Rowe
it seems to be required for uuid/uuid.h Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-31add uuid-devel to fedora41 dependenciesLeah Rowe
Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-31support ./mk dependencies fedora reinstallLeah Rowe
dnf reinstall package or dnf install package for reinstall, do this: ./mk dependencies fedora41 re this is an example command the 4th argument prefixes "install" in dnf install a bit hacky but it should work Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-31fix missing semicolon in grub nvme patchLeah Rowe
i forgot this when rebasing on the recent uprev Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-31bump seabios to rev 1602647f1 (7 November 2024)Leah Rowe
This brings in a *single* change from SeaBIOS, because there has only been one change in the main branch, and it's a bug fix. The change from upstream is as follows: commit 1602647f1be24fe63d11138d802e735c8e674e63 Author: Daniel Khodabakhsh <d.khodabakhsh@gmail.com> Date: Thu Nov 7 18:46:16 2024 -0800 boot: Force display of the boot menu when boot-menu-wait is a negative number Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-31Bump GRUB revision to 6811f6f09 (26 November 2024)Leah Rowe
Although this is for a stable release revision, namely Libreboot 20241206 revision 8, I've carefully audited the upstream changes and they all seem fine. Several important bug fixes have been imported with this change. Most interestly, GRUB has also added support for TPM2 Key Protectors; we don't use this feature yet, and probably won't for the time being, since TPM is largely security threatre for our purposes anyway. There's no harm including all upstream revisions, up to those ones, since those modules are not yet added in lbmk. Most notably, there are several file system fixes, and minor fixes to the graphics terminal of GRUB. Minor fixes only, in terms of what Libreboot actually uses at present. The full list of imported changes are as follows, relative to the previous GRUB revision, which was b53ec06a1 from 17 June 2024: * 6811f6f09 tpm2_key_protector: Enable build for powerpc_ieee1275 * ff14b89bd ieee1275/tcg2: Add TCG2 driver for ieee1275 PowerPC firmware * 72092a864 ieee1275/tcg2: Refactor grub_ieee1275_tpm_init() * 8c0b5f200 ieee1275/ibmvpm: Move TPM initialization functions to own file * 7344b3c7c ieee1275: Consolidate repeated definitions of IEEE1275_IHANDLE_INVALID * 29d1bd2a9 term/ieee1275/serial: Cast 0 to proper type * 99ee68a01 tss2: Adjust bit fields for big endian targets * 3770a6905 docs: Document TPM2 key protector * f898440cc tests: Add tpm2_key_protector_test * 76a2bcb99 tpm2_key_protector: Add grub-emu support * 135e0bc88 diskfilter: Look up cryptodisk devices first * b35480b48 cryptodisk: Wipe out the cached keys from protectors * 6abf8af3c cryptodisk: Fallback to passphrase * fba3a474e tpm2_key_protector: Implement NV index * 550ada7d6 tpm2_key_protector: Support authorized policy * 5f6a2fd51 util/grub-protect: Add new tool * ad0c52784 cryptodisk: Support key protectors * 48e230c31 key_protector: Add TPM2 Key Protector * 35c9904df tss2: Add TPM2 Software Stack (TSS2) support * 63a78f4b4 tss2: Add TPM2 types and Marshal/Unmarshal functions * 2ad159d9b tss2: Add TPM2 buffer handling functions * 5d260302d key_protector: Add key protectors framework * 3d60732f9 libtasn1: Add the documentation * 99cda6788 asn1_test: Test module for libtasn1 * 504058e82 libtasn1: Compile into asn1 module * 8a0fedef2 asn1_test: Enable the testcase only when GRUB_LONG_MAX is larger than GRUB_INT_MAX * 66cf4cb14 asn1_test: Use the grub-specific functions and types * 0d0913fc6 asn1_test: Print the error messages with grub_printf() * 2e93a8e4b asn1_test: Remove "verbose" and the unnecessary printf() * b7568e335 asn1_test: Return either 0 or 1 to reflect the results * d60a04bae asn1_test: Rename the main functions to the test names * 54e0e19a2 asn1_test: Include asn1_test.h only * 0ad1d4ba8 libtasn1: Fix the potential buffer overrun * 4160ca983 libtasn1: Use grub_divmod64() for division * 8f56e5e5c libtasn1: Adjust the header paths in libtasn1.h * d86df91cb libtasn1: Replace strcat() with _asn1_str_cat() * 32fdfe600 libtasn1: Replace strcat() with strcpy() in _asn1_str_cat() * fa498af7b libtasn1: Disable code not needed in GRUB * 9a26abbc3 libtasn1: Import libtasn1-4.19.0 * c85c2b9f5 posix_wrap: Tweaks in preparation for libtasn1 * 4f6c46091 kern/fs: Honour file->read_hook() in grub_fs_blocklist_read() * 792132c72 docs: Fix incorrect and potentially confusing language and minor formatting * 1763d83f5 docs: Correct GRUB config file name for network boot * 097fd9d9a docs: Correct chainloader UEFI secure boot info * f48e6af11 docs: Correct PXE environment variables descriptions * dd743ba42 loader/multiboot: Do not add modules before successful download * 9a9082b50 grub-mkimage: Add SBAT metadata into ELF note for PowerPC targets * f97d4618a grub-mkimage: Create new ELF note for SBAT * f26b39860 commands/legacycfg: Avoid closing file twice * 337cb2486 nx: Rename GRUB_DL_ALIGN to DL_ALIGN * 31de991de kern/acpi: Fix out of bounds access in grub_acpi_xsdt_find_table() * f5bb766e6 nx: Set the NX compatible flag for the GRUB EFI images * 94649c026 nx: Set page permissions for loaded modules * 09ca66673 nx: Add memory attribute get/set API * 9fb80dd57 modules: Load module sections at page-aligned addresses * 6e2fe134e modules: Don't allocate space for non-allocable sections * 2b79d550f modules: Strip .llvm_addrsig sections and similar * 246c82cda modules: Make .module_license read-only * 616adeb80 i386/memory: Rename PAGE_SIZE to GRUB_PAGE_SIZE and make it global * 95a7bfef5 i386/memory: Rename PAGE_SHIFT to GRUB_PAGE_SHIFT * 1b1061409 i386/msr: Extract and improve MSR support detection code * 929fafdf5 i386/msr: Rename grub_msr_read() and grub_msr_write() * d96cfd7bf i386/msr: Merge rdmsr.h and wrmsr.h into msr.h * 86ec48882 commands/tpm: Skip loopback image measurement * 3808b1a9b net/drivers/efi/efinet: Skip virtual VLAN devices during card enumeration * e5f047be0 efi/console: Properly clear leftover artifacts from the screen * c5ae124e1 kern/riscv/efi/init: Use time register in grub_efi_get_time_ms() * 9c34d56c2 loader/efi/linux: Reset freed pointer * 92bed41bf loader/efi/linux: Reuse len variable * 33cb8aecd lib/x86_64/relocator_asm: Use .quad instead of .long * 77cd623de lib/x86_64/relocator_asm: Fix comment in code * 95145eea5 loader/efi/linux: Update comment * d333e8bb3 util/grub-mkimagexx: Explicitly move modules to __bss_start for MIPS targets * 34b7f3721 include/grub/offsets.h: Set mod_align to 4 on MIPS * ed0651673 gentpl: Put boot/mips/startup_raw.S into beginning of the image * 648f2d16c configure: Add -mno-gpopt option for mips and mipsel targets * f0710d2d8 lib/xzembed/xz_dec_bcj: Silence warning when no BCJ is available * e61157bbd fs/erofs: Replace 64-bit modulo with bitwise operations * 5313fa839 configure: Look for .otf fonts * 33b94f2a9 loader/efi/chainloader: Do not print device path of chainloaded file * ab1e6fc04 docs: Document all GRUB modules * 9537f4403 commands/bli: Fix crash in get_part_uuid() Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-31t480/3050micro: force power off post power failureLeah Rowe
The T480 has no option table, because it lacks nvram, so the default option applies, which seems to be power on after power failure. This is undesirable on a laptop. It's triggered simply when your laptop battery runs out, and once triggered, it couldn't be configured at all. Hard-code this. The documentation will be updated later on after this patch is pushed, telling those users who want to change this behaviour how to modify/remove the patch, if they wish to to do so, because some people may actually want to run a server on the OptiPlex 3050 Micro (or if they're crazy like I am, they will host libreboot.org on a ThinkPad). Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-31flashprog: Disable -WerrorLeah Rowe
We haven't seen any build errors, but it seems flashprog sets -Werror on CFLAGS. If you provide WARNERROR=no as a make argument, it avoids -Werror entirely. This is a preventative fix, for over-zealous compilers. Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-31bump flashprog to revision eb2c041 (14 Nov 2024)Leah Rowe
This brings in several important bug fixes from upstream. With this, the following upstream changes have been imported: * eb2c041 cli_wp: Fix bail-out when multiple chips are detected * e05e334 cli_common: Rename local `optarg' variable * efad610 manibuilder: Include NetBSD (anita tags) in `native' target * 09289fb manibuilder: Replace unmaintained DEFAULT_TAGS list * 1457cc6 manibuilder: Stop build testing oldest, EOL targets * 1faffa5 manibuilder: Fix Ubuntu Noble Numbat (24.04) for amd64 * 61dbe36 udev rules: Use `uaccess' tag instead of `plugdev' group * 63d30a2 install: Install binary into bin/, not sbin/ * 6ce26a7 flashchips: add Winbond W25R512NW / W74M51NW * 612519b ichspi: Add Intel Arrow Lake support * d5a61ef ichspi: Add Intel Lunar Lake support * 5e0d9b0 ichspi: Add Intel Meteor Lake SoC * 0ef2eb8 ichspi: Add Intel Snow Ridge SoC * 42daab1 ichspi: Properly add Emmitsburg PCH * af26008 ich_descriptors_tool: Add missing options for EHL & C620 * 82fe123 ich_descriptors: Hard code number of masters for newer gens * 157b818 ich_descriptors: Guard MCH strap handling by chipset version * db878fb ich_descriptors: Drop chipset detection based on `freq_read` * b3cc2c6 ich_descriptors: Unify pretty printing of PCH100+ masters * 8e4151d chipset_enable: Remove hidden-spidev workaround for Elkhart Lake * 6d72efa chipset_enable: Remove hidden-spidev workaround for all 14nm PCHs * 092a699 chipset_enable: Remove hidden-spidev workaround for TGP+ * 5bbd324 chipset_enable: Add missing PCI ID for Intel PCH H410 * a088475 chipset_enable: Factor PCH100 hidden-spidev workaround out * 5eb7a58 Drop 1s delay before automatic verification * 7427569 libflashprog: Run programmer_shutdown() on failed setup * 5a9d6ea chipset_enable: Fix memory leaks introduced with AMD SPI100 * e149fbe Only try to check erase opcodes for SPI25 chips * 07ebc68 Avoid NULL deref in check_block_eraser() * 2405310 chipset_enable: Mark Intel QM87 as DEP * 9897063 flashchips: Allow volatile register writes for W25Q128.V * c972aed flashchips: Configure WP for MX25L25635F/45G * 8f7122c cli: Add new write-protect CLI * eed122d layout: Implement flashprog_layout_get_region_range() * 1f693db cli: Add new `config' CLI for status/config registers * 85c2cf8 cli: Implement "command" option parser * 24c0977 cli: Add print function for generic CLI options * b82aadc cli: Move some declarations into `cli.h` * a705043 cli: Add a new CLI wrapper * d39c7d6 cli: Extract basic CLI init into cli_common * df6ce9f cli: Extract log argument parsing into cli_common * 0da839b cli: Extract layout argument processing * d91822a cli: Extract layout argument parsing into cli_common * e7899a9 cli: Move all long-option keys into cli.h * 34e783a cli: Extract flash argument parsing into cli_common * e68b08b cli_classic: Rewrite programmer argument parsing * 6898f5b spi25_statusreg: Prefer volatile status register writes * 55e7884 Introduce FLASHPROG_FLAG_NON_VOLATILE_WRSR * fbba454 Install udev rules * 768cfc4 flashchips: Add GigaDevice GD25LR512ME Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-30replace liblz4-tool with lz4 and liblz4-devLeah Rowe
In Debian dependencies files. These are available in Debian Stable, but liblz4-tool is a transitional package referring to lz4; liblz4-tool transition package is unavailable in Debian sid, so remove it from the dependencies files. Signed-off-by: Leah Rowe <leah@libreboot.org>
2024-12-30lib.sh dependencies: support --reinstall argumentLeah Rowe
./mk dependencies debian --reinstall Add --reinstall and it'll do: apt-get install --reinstall This can be useful when updating from a stable release to a testing release. The variable, "reinstall" can be configured for other distros, but it's currently only configured for Debian-based distros. Also, it can be anything. For example, you could add -y; however, a 4th argument will not be accepted. For example, you cannot do: ./mk dependencies debian --reinstall -y If you do this, it'll only see --reinstall; similarly, if you did this command: ./mk dependencies debian -y --reinstall then -y would be passed, but not --reinstall. This is an intentional design decision, in case you accidentally pasted or subshelled something that outputted something undesirable, to prevent possible abuse. Signed-off-by: Leah Rowe <leah@libreboot.org>