From eed25bd2209a4c9f7c21a15689b5c90bd3757a6c Mon Sep 17 00:00:00 2001 From: Leah Rowe Date: Sun, 21 Nov 2021 15:57:40 +0000 Subject: update coreboot and nuke tianocore tianocore is a liability for the libreboot project. it's a bloated mess, and unreliable, broken on many boards, and basically impossible to audit. i don't trust tianocore, so i'm removing it. --- ...y-intel-stm-Add-warning-for-non-reproduci.patch | 35 ---------------------- 1 file changed, 35 deletions(-) delete mode 100644 resources/coreboot/default/patches/0006-src-security-intel-stm-Add-warning-for-non-reproduci.patch (limited to 'resources/coreboot/default/patches/0006-src-security-intel-stm-Add-warning-for-non-reproduci.patch') diff --git a/resources/coreboot/default/patches/0006-src-security-intel-stm-Add-warning-for-non-reproduci.patch b/resources/coreboot/default/patches/0006-src-security-intel-stm-Add-warning-for-non-reproduci.patch deleted file mode 100644 index b01cf1c3..00000000 --- a/resources/coreboot/default/patches/0006-src-security-intel-stm-Add-warning-for-non-reproduci.patch +++ /dev/null @@ -1,35 +0,0 @@ -From 1804c7cb2e6e62a363a18f237ecdf8337e58c20d Mon Sep 17 00:00:00 2001 -From: Martin Roth -Date: Mon, 10 May 2021 11:28:45 -0600 -Subject: [PATCH 06/19] src/security/intel/stm: Add warning for - non-reproducible build - -Because the STM build doesn't use the coreboot toolchain it's not -reproducible. Make sure that's displayed during the build. - -Signed-off-by: Martin Roth -Change-Id: I3f0101400dc221eca09c928705f30d30492f171f -Reviewed-on: https://review.coreboot.org/c/coreboot/+/54020 -Tested-by: build bot (Jenkins) -Reviewed-by: Angel Pons -Reviewed-by: Patrick Georgi ---- - src/security/intel/stm/Makefile | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/src/security/intel/stm/Makefile b/src/security/intel/stm/Makefile -index 1493869e80..31e5bdd88a 100644 ---- a/src/security/intel/stm/Makefile -+++ b/src/security/intel/stm/Makefile -@@ -18,6 +18,8 @@ all: build - - build: - echo "STM - Build" -+ echo "-- WARNING: This uses the system toolchain instead of" -+ echo " the coreboot toolchain, so is not reproducible." - cd $(project_dir)/Stm; \ - mkdir -p build; \ - cd build; \ --- -2.25.1 - -- cgit v1.2.1