PoC : D16 15h coreboot fork #1910
Conversation
…it from https://git.15h.org/mrothfuss/coreboot-15h/src/branch/4.11-tpm-measured-boot dating 20250126 Once fork switched, after repo is cloned, CTRL-C and: - ./docker_repro.sh make BOARD=UNMAINTAINED_kgpe-d16_server-whiptail coreboot.modify_and_save_oldconfig_in_place - Enable measured boot, save changes. Changes were saved under config/coreboot-kgpe-d16_server-whiptail.config, see diff (a lot compared to 4.11 in master) Signed-off-by: Thierry Laurion <[email protected]>
| # anything. | ||
| # Pointing to https://git.15h.org/mrothfuss/coreboot-15h/src/branch/4.11-tpm-measured-boot latest commit as of 20250129 | ||
| coreboot-15h_repo := https://git.15h.org/mrothfuss/coreboot-15h.git | ||
| coreboot-15h_commit_hash := 2b7c566b463737f807a69738163344b41c686ef6 |
There was a problem hiding this comment.
@arhabd if this commit is not the latest, someone needs to take the lead and follow fam15h fork updates and redo this PR until success.
There was a problem hiding this comment.
@arhabd if this commit is not the latest, someone needs to take the lead and follow fam15h fork updates and redo this PR until success.
understood i will update the pr as times goes on until its been fully tested
|
On need for CONFIG_BOOT_XEN_ADD CONFIG_BOOT_XEN_REMOVE grub.conf overrides:
Originally posted by @tlaurion in #890 This would be: Note that #890 is an issue, not a PR. Meaning a PR implementing this would be needed so that Heads can modify Xen command line arguments on kexec calls, just like it currently do for linux kernel command line arguments, specified under board configs to apply board specifics overrides to what is under grub.conf. |
|
@Tonux599 said
Originally posted by @Tonux599 in #1634 (comment) |
… CircleCI to build for t480. Delegating needed fixes to linuxboot#1910 community effort and for the d16 club d16 board owners Signed-off-by: Thierry Laurion <[email protected]>
|
d16 dropped for CircleCI builds under t480 PR #1906 (comment) (coreboot 4.11 build race condition that may or not be fixed with fam15h coreboot 4.11 or future agesa work on top of 4.15, TBD in channel) |
|
i dont have a bmc so i tested the workstation configuration with the following changes i had to enable MEASURED_BOOT from menu config to get it to build with the 15h coreboot but other then that it was very straight forward and compiles and runs on my machine it extends the pcrs correctly and i can reset the tpm and generate new secrets and boot os is there anything in particular that needs to be tested to get this merged? i dont see any reason why it would not work on the server configuration |
|
@arhabd can you steal and expand the commit here and do the changes in a PR so others can test the ROMs? Fam15h has probably changed since I did this PR which is already bitorotting. Please take the lead. |
sure i can look into doing those changes to the pr but no new updates on the tpm-measured-boot branch on 15h.org i just asked mike if it can be merged into the master 15h branch do not fear the bitrot as i will make sure the coreboot commit is up to date |
|
Superseeded by #1929 |
Deprecates #1805 since d16 had kernel version bump as all other boards.
This PR only takes pointed commit per modules/coreboot and point UNMAINTAINED_kgpe-d16_server-whiptail board to it, which should contain all 4.11 needed patches for Heads to support TPM1.2 as well.
Discussions about this should happen under Heads channel or here.