linuxboot/heads

@MrChromebox updated https://review.coreboot.org/c/coreboot/+/85278 Note that the coreboot matrix thread We understand that both can't be used at the same time INTEL_CHIPSET_LOCKDOWN=y vs # CONFIG_INTEL_CHIPSET_LOCKDOWN is not set + CONFIG_SOC_INTEL_COMMON_SPI_LOCKDOWN_SMM=y Other message in thread: Note that as of now, patches for different platforms grew in forks who use this, and afaik it's mostly heads So PR0 patches are Work for alder lake and meteorlake under dasharo fork (seems self-contained under Dasharo/coreboot@a4f9bd2) community attempt under ready to merge kano (26.03) under https://github.com/linuxboot/heads/pull/2133/changes#diff-f1f6f628ec68a607e292baa7e86c813f2d966fc7420b31b7f24ea7f346aed525 Starlabs patch on top of coreboot upstream 26.07.01 (untested yet AFAIK) https://github.com/linuxboot/heads/pull/2164/changes#diff-12e023b0ef7b98398ffcbd169c5a0f38520f4e87642cc55dd9ffecbadfb3e180 So upstream https://review.coreboot.org/c/coreboot/+/85278 still lack implementa

Skylake+ and possibly other platforms (t480*) From discussion on coreboot matrix thread Turns out the PCH-H datasheets are just wrong and the pad_cfg_lock_offset value for GPIO community 0 was wrong. I fixed it to match edk2-platforms and the Linux pin-ctrl driver and locking seems to be working with my original patch, though with the SBI method instead of the PCR method: https://review.coreboot.org/c/coreboot/+/90885 I will push some patches later Locking them in SMM as is done in the patch train of https://review.coreboot.org/c/coreboot/+/95545 does not appear to be working on Skylake even with the corrected offsets. AlderLake Also patchtrain for alderlake (nv4x_adl), would needs backporting https://review.coreboot.org/q/topic:%22tpm_gpio_pltrst_lock%22 to be applied downstream until next release of Dasahro+Heads Referred from Dasharo/coreboot#959 (comment) TODO update downstream forks used patchtrains test against nv4xadl update https://github.com/tlaurion/tpm-gpio-fail upda

For those who follows, its been a couple of PR that I try to save them, since there is 4kb left in master of freed ME space on those boards for maximized-hotp builds. I plan to merge #2206 soon, and the code comments alone of that pr are now consuming that 4kb compressedfreed space. It's your time to shine: you're technical, own a x220/t420, want to jump in under #1991 or any other quests under #590 to revive them, be my guest. Flagging this u=issue with help needed and pinning, Sorry folks, 8mb spi boards not a priority of mine. Is it one of yours? Shine :)

Before filing a bug report Follow-up to #2008 and #2186. #2186 merged in master. Hardware details Board: novacustom-v540tu (failing). Working: x230 (EOL_x230-maximized), novacustom-nv4x_adl. GPU: iGPU-only (Intel Meteor Lake, device ID 7d55). Heads/Dasharo: Dasharo Heads-v0.2.1-3144-g7850f7a (DMI BIOS string), vendor-installed by Novacustom. ROM: vendor (Dasharo) image, maximized. Please describe the problem Describe the bug #2186 ("initrd: boot dd-written hybrid ISOs in mount-usb and usb-autoboot") fixes #2008 ("kicksecure iso doesn't boot under Heads") on x230 and novacustom-nv4x_adl. On novacustom-v540tu the Kicksecure ISO fails to boot only in live-amnesic mode ("LIVE Mode | USER Session | disposable use"): the machine auto-reboots before/at the LXQt desktop. The failure is specific to the live-amnesic USER session. Non-live-amnesic modes boot fine on the same machine: "LIVE Mode | SYSMAINT Session" (sysmode) boots to console, and the other grub entries are unaffected. To Reprodu

This comes often from community members suggesting crypto donation ,latest today in qubes matrix room. But problem is burden on me, I would need to receive the donations, without the burden of converting to fiat and legal/accounting burden. Present thoughts (require time, not replicated by any other small team based teams AFAIK) Switch OpenCollective's Fiscal Host from Open Source Collective to Open Collective Europe which Could theoretically provide Tax deduction papers to donor (fiat donations) Could theoretically deal with crypto->fiat conversion to collective once converted, though they require collective to Have a minimum balance of €2,000. QubesOS/Whonix and other projects accepts crypto donations by providing direct wallet addresses. Issue there is as said prior: burden is for me to have legal/accounting burden. Others avenues not yet considered.