libreboot

Unnamed repository; edit this file 'description' to name the repository.
Log | Files | Refs | README

commit 95259e28ef047923258434898113d70c8e544eab
parent 707f9383a8189b0054730134340f20709f56f976
Author: Francis Rowe <info@gluglug.org.uk>
Date:   Fri,  6 Nov 2015 22:43:29 +0000

convert documentation to texinfo

Diffstat:
docs/archive_old.html | 1531-------------------------------------------------------------------------------
docs/archive_old.texi | 2058+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/depthcharge/index.html | 362-------------------------------------------------------------------------------
docs/depthcharge/index.texi | 213+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/future/index.html | 599-------------------------------------------------------------------------------
docs/future/index.texi | 516+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/future/old.html | 319-------------------------------------------------------------------------------
docs/future/old.texi | 203+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/git/index.html | 1078-------------------------------------------------------------------------------
docs/git/index.texi | 947+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/gnulinux/configuring_parabola.html | 884-------------------------------------------------------------------------------
docs/gnulinux/configuring_parabola.texi | 482+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/gnulinux/encrypted_parabola.html | 859-------------------------------------------------------------------------------
docs/gnulinux/encrypted_parabola.texi | 414+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/gnulinux/encrypted_trisquel.html | 493-------------------------------------------------------------------------------
docs/gnulinux/encrypted_trisquel.texi | 347+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/gnulinux/grub_boot_installer.html | 312-------------------------------------------------------------------------------
docs/gnulinux/grub_boot_installer.texi | 157+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/gnulinux/grub_cbfs.html | 376-------------------------------------------------------------------------------
docs/gnulinux/grub_cbfs.texi | 178+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/gnulinux/grub_config.html | 223-------------------------------------------------------------------------------
docs/gnulinux/grub_config.texi | 119+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/gnulinux/index.html | 97-------------------------------------------------------------------------------
docs/gnulinux/index.texi | 58++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/grub/index.html | 190-------------------------------------------------------------------------------
docs/grub/index.texi | 116+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hardware/index.html | 82-------------------------------------------------------------------------------
docs/hardware/index.texi | 48++++++++++++++++++++++++++++++++++++++++++++++++
docs/hardware/t60_heatsink.html | 171-------------------------------------------------------------------------------
docs/hardware/t60_heatsink.texi | 91+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hardware/t60_lcd_15.html | 128-------------------------------------------------------------------------------
docs/hardware/t60_lcd_15.texi | 59+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hardware/x60_heatsink.html | 187-------------------------------------------------------------------------------
docs/hardware/x60_heatsink.texi | 116+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hardware/x60_keyboard.html | 91-------------------------------------------------------------------------------
docs/hardware/x60_keyboard.texi | 43+++++++++++++++++++++++++++++++++++++++++++
docs/hardware/x60_lcd_change.html | 83-------------------------------------------------------------------------------
docs/hardware/x60_lcd_change.texi | 37+++++++++++++++++++++++++++++++++++++
docs/hcl/c201.html | 277-------------------------------------------------------------------------------
docs/hcl/c201.texi | 161+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hcl/gm45_lcd.html | 370-------------------------------------------------------------------------------
docs/hcl/gm45_lcd.texi | 298+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hcl/gm45_remove_me.html | 711-------------------------------------------------------------------------------
docs/hcl/gm45_remove_me.texi | 437+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hcl/index.html | 676-------------------------------------------------------------------------------
docs/hcl/index.texi | 543+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hcl/kfsn4-dre.html | 172-------------------------------------------------------------------------------
docs/hcl/kfsn4-dre.texi | 88+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hcl/kgpe-d16.html | 301-------------------------------------------------------------------------------
docs/hcl/kgpe-d16.texi | 326+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hcl/r400.html | 140-------------------------------------------------------------------------------
docs/hcl/r400.texi | 70++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hcl/r500.html | 299-------------------------------------------------------------------------------
docs/hcl/r500.texi | 190+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hcl/t400.html | 161-------------------------------------------------------------------------------
docs/hcl/t400.texi | 88+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hcl/t500.html | 191-------------------------------------------------------------------------------
docs/hcl/t500.texi | 98+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/hcl/x200.html | 383-------------------------------------------------------------------------------
docs/hcl/x200.texi | 220+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/index.html | 274-------------------------------------------------------------------------------
docs/index.texi | 135+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/install/bbb_ehci.html | 514-------------------------------------------------------------------------------
docs/install/bbb_ehci.texi | 400+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/install/bbb_setup.html | 469-------------------------------------------------------------------------------
docs/install/bbb_setup.texi | 284+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/install/c201.html | 306-------------------------------------------------------------------------------
docs/install/c201.texi | 163+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/install/index.html | 519-------------------------------------------------------------------------------
docs/install/index.texi | 274+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/install/kgpe-d16.html | 125-------------------------------------------------------------------------------
docs/install/kgpe-d16.texi | 66++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/install/r400_external.html | 599-------------------------------------------------------------------------------
docs/install/r400_external.texi | 296+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/install/r500_external.html | 480-------------------------------------------------------------------------------
docs/install/r500_external.texi | 241+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/install/t400_external.html | 582------------------------------------------------------------------------------
docs/install/t400_external.texi | 296+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/install/t500_external.html | 592-------------------------------------------------------------------------------
docs/install/t500_external.texi | 296+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/install/t60_unbrick.html | 322-------------------------------------------------------------------------------
docs/install/t60_unbrick.texi | 152+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/install/x200_external.html | 475-------------------------------------------------------------------------------
docs/install/x200_external.texi | 277+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/install/x60_unbrick.html | 318-------------------------------------------------------------------------------
docs/install/x60_unbrick.texi | 164+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/install/x60tablet_unbrick.html | 215-------------------------------------------------------------------------------
docs/install/x60tablet_unbrick.texi | 112+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/maintain/index.html | 692-------------------------------------------------------------------------------
docs/maintain/index.texi | 315+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/misc/index.html | 254-------------------------------------------------------------------------------
docs/misc/index.texi | 156+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/misc/patch.html | 218-------------------------------------------------------------------------------
docs/misc/patch.texi | 97+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/release.html | 200-------------------------------------------------------------------------------
docs/release.texi | 186+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/security/dock.html | 190-------------------------------------------------------------------------------
docs/security/dock.texi | 151++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/security/index.html | 76----------------------------------------------------------------------------
docs/security/index.texi | 40++++++++++++++++++++++++++++++++++++++++
docs/security/t60_security.html | 484-------------------------------------------------------------------------------
docs/security/t60_security.texi | 284+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/security/x60_security.html | 344-------------------------------------------------------------------------------
docs/security/x60_security.texi | 232+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
docs/tasks.html | 513-------------------------------------------------------------------------------
docs/tasks.texi | 308+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
106 files changed, 13646 insertions(+), 20507 deletions(-)

diff --git a/docs/archive_old.html b/docs/archive_old.html @@ -1,1531 +0,0 @@ -<!DOCTYPE html> -<html> -<head> - <meta charset="utf-8"> - <meta name="viewport" content="width=device-width, initial-scale=1"> - - <style type="text/css"> - @import url('css/main.css'); - </style> - - <title>Libreboot release information (old)</title> -</head> -<body> - - <div class="section"> - - <h1 id="pagetop">Libreboot release information (old)</h1> - <p> - Information for this release can be found at <a href="release.html">release.html</a>. - Updated versions of libreboot can be found at <a href="http://libreboot.org/">libreboot.org</a>. - </p> - - <div class="important"> - <p> - <b>This page is *obsolete*, provided for historical purposes.</b> - </p> - </div> - - </div> - - <div class="section"> - - <h2>Releases</h2> - <ul> - <li><a href="#release20150518">r20150518 (18th May 2015)</a></li> - <li><a href="#release20150124">r20150124 (24th January 2015), r20150126 (26th January 2015), r20150208 (8th February 2015)</a></li> - <li><a href="#release20141015">r20141015 (15th October 2014)</a></li> - <li><a href="#release20140911">r20140911 (6th release)</a> (11th September 2014 <b>pre-release, 7th beta</b>)</li> - <li><a href="#release20140622">r20140622 (5th release)</a> (7th March 2014, revised 22nd June 2014)</li> - <li><a href="#release20140221">r20140221 (4th release)</a> (21st February 2014)</li> - <li><a href="#release20131214">r20131214 (3rd release)</a> (14th December 2013)</li> - <li><a href="#release20131213">r20131213 (2nd release)</a> (13th December 2013)</li> - <li><a href="#release20131212">r20131212 (1st release)</a> (12th December 2013)</li> - </ul> - - </div> - - <div class="section"> - - <h1 id="release20150518">Release 20150518</h1> - - <p> - Release date: 18th May 2015. - </p> - - <p> - Installation instructions can be found at <b><i>docs/install/index.html</i></b>. - Building instructions (for source code) can be found at <b><i>docs/git/index.html#build</i></b>. - </p> - - <h2>Machines supported in this release:</h2> - <ul> - <li> - <b>ThinkPad X60/X60s</b> - <ul> - <li> - You can also remove the motherboard from an X61/X61s and replace it with an X60/X60s motherboard. - An X60 Tablet motherboard will also fit inside an X60/X60s. - </li> - </ul> - </li> - <li> - <b>ThinkPad X60 Tablet</b> (1024x768 and 1400x1050) with digitizer support - <ul> - <li>See <b><i>docs/hcl/index.html#supported_x60t_list</i></b> for list of supported LCD panels</li> - <li>It is unknown whether an X61 Tablet can have it's mainboard replaced with an X60 Tablet motherboard.</li> - </ul> - </li> - <li> - <b>ThinkPad T60</b> (Intel GPU) (there are issues; see below): - <ul> - <li>See notes below for exceptions, and <b><i>docs/hcl/index.html#supported_t60_list</i></b> for known working LCD panels.</li> - <li>It is unknown whether a T61 can have it's mainboard replaced with a T60 motherboard.</li> - <li>See <b><i>docs/future/index.html#t60_cpu_microcode</i></b>.</li> - <li>T60P (and T60 laptops with ATI GPU) will likely never be supported: <b><i>docs/hcl/index.html#t60_ati_intel</i></b></li> - </ul> - </li> - <li> - <b>ThinkPad X200</b> - <ul> - <li>X200S and X200 Tablet are also supported, conditionally; see <b><i>docs/hcl/x200.html#x200s</i></b></li> - <li><b>ME/AMT</b>: libreboot removes this, permanently. <b><i>docs/hcl/gm45_remove_me.html</i></b></li> - </ul> - </li> - <li> - <b>ThinkPad R400</b> - <ul> - <li>See <b><i>docs/hcl/r400.html</i></b></li> - <li><b>ME/AMT</b>: libreboot removes this, permanently. <b><i>docs/hcl/gm45_remove_me.html</i></b></li> - </ul> - </li> - <li> - <b>ThinkPad T400</b> - <ul> - <li>See <b><i>docs/hcl/t400.html</i></b></li> - <li><b>ME/AMT</b>: libreboot removes this, permanently. <b><i>docs/hcl/gm45_remove_me.html</i></b></li> - </ul> - </li> - <li> - <b>ThinkPad T500</b> - <ul> - <li>See <b><i>docs/hcl/t500.html</i></b></li> - <li><b>ME/AMT</b>: libreboot removes this, permanently. <b><i>docs/hcl/gm45_remove_me.html</i></b></li> - </ul> - </li> - <li> - <b>Apple MacBook1,1</b> (MA255LL/A, MA254LL/A, MA472LL/A) - <ul> - <li>See <b><i>docs/hcl/index.html#macbook11</i></b>.</li> - </ul> - </li> - <li> - <b>Apple MacBook2,1</b> (MA699LL/A, MA701LL/A, MB061LL/A, MA700LL/A, MB063LL/A, MB062LL/A) - <ul> - <li>See <b><i>docs/hcl/index.html#macbook21</i></b>.</li> - </ul> - </li> - </ul> - - <h2> - Changes for this release, relative to r20150208 (earliest changes last, recent changes first) - </h2> - <ul> - <li>Add a whitelist entry to board_enable.c in flashrom, for the ThinkPad R400, T400 and T500</li> - <li> - Updated flashrom (to SVN revision 1889) - <ul> - <li>X200 whitelist patch removed (merged upstream)</li> - <li>X200 whitelist modified to include X200S and X200 Tablet</li> - </ul> - </li> - <li>libreboot_util: don't include cmos layout files (not needed anymore)</li> - <li><b>coreboot-libre: backport patches for X200 Tablet digitizer support</b></li> - <li>build/release/archives: create SHA512 sum manifest file of the release archives</li> - <li>build/release/archives: separate crossgcc into a new archive</li> - <li>disabled generation of txtmode ROM images for now (they will be back again in the next release)</li> - <li>coreboot-libre: delete unused code (reduce size of src archive)</li> - <li>Flashing guides: make them more friendly to colourblind people</li> - <li> - docs/gnulinux/encrypted_*.html: Remove mention of password length - - it was arbitrary and pointless. - </li> - <li>docs/maintain/index.html: Finish the guide</li> - <li> - scripts/download/coreboot: use diffs included in libreboot, not external gerrit cherry-picks - - review.coreboot.org (gerrit) being down no longer kills - libreboot (backup mirrors of the master repository exist) - </li> - <li>docs/install/bbb_setup.html: Add info about wp/hold and pinouts</li> - <li>docs/index.html: improve the description of libreboot</li> - <li>docs/hcl/gm45_remove_me.html: notes about the demefactory utility</li> - <li>docs/install/bbb_setup.html: EHCI debug: recommend linux-libre</li> - <li>docs/install/bbb_setup.html: EHCI Debug logging setup guide</li> - <li>docs/hcl/t500.html: Add screen compatibility report (TODO: fix incompatible screens)</li> - <li> - Update coreboot(again) + merge GM45 hybrid GPU patches - - means that T400/T500 with the ATI+Intel hybrid GPU setup - will work (ATI disabled, Intel permanently enabled). - power_on_after_fail nvram option added to all GM45 boards, - defaulting to No, so that plugging it AC doesn't boot up - the system against the users will. Net20DC is now the default - debug dongle on all boards (compatible with BBB). - </li> - <li>demefactory (new utility): create GM45 factory.rom without the ME</li> - <li>ich9deblob: re-factor descriptor.c functions</li> - <li>docs/hcl/t500.html: add hardware logs</li> - <li>docs/gnulinux/encrypted_*.html: No password for default entry</li> - <li>docs/git/index.html: Add more details about BUC.TS</li> - <li>grub.cfg: Also scan for grub2/grub.cfg, not just grub/grub.cfg</li> - <li>docs/maintain/ (new section. WIP!): Maintaining libreboot</li> - <li>docs/gnulinux/grub_boot_installer.html: Fix hazardous instruction</li> - <li>docs/tasks.html: Better categorization between intel/amd/arm</li> - <li>docs/install/bbb_setup.html: notes about SPI flashing stability</li> - <li>docs/install/bbb_setup.html: more names for the 0.1&quot; cables</li> - <li>docs/install/*_external.html: add disclaimer about thermal paste</li> - <li>docs/install/bbb_setup.html: Fix broken links</li> - <li>docs/install/bbb_setup.html: preliminary notes about EHCI debug</li> - <li>docs/hcl/gm45_remove_me.html: Link to websites talking about the ME</li> - <li>docs/install/{t400,t500,r400}_external.html: Notes about CPU compatibility</li> - <li>Delete the ich9macchange script. It's useless, and confuses people</li> - <li>docs/hcl/gm45_remove_me.html: prioritize ich9gen executable path</li> - <li>docs/hcl/gm45_remove_me.html: prioritize changing mac address</li> - <li>docs/hcl/gm45_remove_me.html: less confusing notes about ich9gen</li> - <li>build/dependencies/parabola: Add dependencies for x86_64</li> - <li>Move parabola/trisquel dependency scripts to scripts/helpers/build</li> - <li>scripts/dependencies/paraboladependencies: build dependencies (32-bit Parabola)</li> - <li><b>New board</b>: ThinkPad T500</li> - <li>Add diffs for descriptor/gbe differences between T500 and X200</li> - <li>coreboot-libre: provide better blob categorization</li> - <li>docs/hcl/gm45_remove_me.html: add notes about flash write protect</li> - <li><b>New board</b>: ThinkPad T400</li> - <li>GRUB: add partial vesamenu.c32 support (fixes tails ISOLINUX menu)</li> - <li>Update GRUB (to revision fa07d919d1ff868b18d8a42276d094b63a58e299)</li> - <li> - Update coreboot (to revision 83b05eb0a85d7b7ac0837cece67afabbdb46ea65) - <ul> - <li> - Intel CPU microcode (most of it) no longer deleted, - because it was deleted upstream (moved to a 3rd - party repository). - </li> - <li>MacBook2,1 cstate patch is no longer cherry picked (merged upstream)</li> - <li>Patch to disable use of timestamps in coreboot no longer included (merged upstream)</li> - </ul> - </li> - <li>coreboot-libre: don't list vortex86ex kbd firmware as microcode (list it separately)</li> - <li>coreboot-libre: don't rm */early_setup_ss.h (these are not blobs)</li> - <li>coreboot-libre: add GPLv3 license to the findblobs script</li> - <li>coreboot-libreboot: don't rm raminit_tables (nahelem/sandybridge) (they are not blobs)</li> - <li>coreboot-libre: don't delete the .spd.hex files (they are not blobs)</li> - <li>build/release/archives: don't put rmodtool in libreboot_util</li> - <li>docs/install/x200_external.html: recommend installing GNU/Linux at the end</li> - <li>docs/install/x200_external.html: add more photos, improve instructions</li> - <li>build/clean/grub: use distclean instead of clean</li> - <li>grub-assemble: Add the <i>bsd</i> and <i>part_bsd</i> modules</li> - <li>build/roms/withgrub: Only run ich9gen if gm45/gs45 images exist</li> - <li>docs/git/index.html: Add notes about building for specific boards</li> - <li>build/roms/withgrub: Allow building for a custom range of boards</li> - <li>grub-assemble: Disable verbose output</li> - <li>Add documentation on how to unlock root encrypted fs with key in initramfs in Parabola Linux</li> - <li>docs/gnulinux/grub_cbfs.html: Improve structure (easier to use)</li> - <li>grub.cfg: Disable the beep on startup</li> - <li>docs/install/bbb_setup.html: Make the guide easier to use</li> - <li>docs/gnulinux/grub_cbfs.html: Remove redundant instructions</li> - <li>docs/install/x200_external.html: Mark pins in the images</li> - <li>docs/install/bbb_setup.html: Replace 3.3V PSU photo with ATX PSU</li> - <li>docs/hcl/x200.html: Add dumps from 4-MiB X200 with Lenovo BIOS 3.22</li> - <li>docs/hcl/x200.html: Add dumps from 4-MiB X200 with Lenovo BIOS 3.18</li> - <li>grub.cfg: add syslinux_configfile menuentry for ahci0</li> - <li>grub.cfg: Add more paths for syslinux_configfile</li> - <li>docs/future.html: T60: Add EDID dump from LG-Philips LP150E05-A2K1</li> - <li>docs/install/bbb_setup.html: Further clarify which clip is needed</li> - <li>bash scripts: Make script output more user-friendly in general</li> - <li>bash scripts: Only enable verbose output if DEBUG= is used</li> - <li> - build: Support multiple extra options - - now possible to build multiple images for arbitrary - boards (configs), but without building the entire - collection. - </li> - <li> - Deleted the signing archive key - - the finger print and ID is given instead, so that - the user can download it from a key server - </li> - <li> - scripts/helpers/build/release: Move docs to separate archive - - reduces the size of the other archives considerably - </li> - <li>Move DEBLOB to resources/utilities/coreboot-libre/deblob</li> - <li> - scripts/helpers/build/release: Delete DEBLOB from libreboot_src/ - - not needed in libreboot_src (release archive) because it - contains a coreboot revision that has already been deblobbed. - </li> - <li>flash (script): Use <i>build</i> instead of <i>DEBLOB</i> to know if in src</li> - <li>docs/install/r400_external.html: Show images, don't link.</li> - <li>docs/install/x200_external.html: Show images, don't link.</li> - <li>docs/install/bbb_setup.html: Show images, instead of linking</li> - <li>Documentation: optimize all images (reduce file sizes)</li> - <li> - Remove download links from the release page (and the archive page) - - release archives are hosted differently following this release, - which means that the old methods are no longer viable. - </li> - <li>Moved ich9macchange to resources/scripts/misc/ich9macchange</li> - <li> - ich9macchange: assume that the script is being run from _util - (act only on one ROM image, defined by a user-provided path) - </li> - <li>Move grub-background to resources/scripts/misc/grub-background</li> - <li>grub-background: assume that it is being run from libreboot_util</li> - <li>grub-background: change only one ROM image, specified by path</li> - <li>build (release archives): Add the commitid file to release/</li> - <li>build-release: Move the release archives to release/</li> - <li> - Merge all build scripts into a single generic script, - with helpers in resources/scripts/helpers/build/ - </li> - <li> - Replace <i>getall</i> with <i>download</i>, which takes as input an argument - specifying which program the user wants to download. - </li> - <li>Moved the get scripts to resources/scripts/helpers/download/</li> - <li>build-release: Remove the powertop entries</li> - <li>Moved powertop.trisquel7 to resources/scripts/misc/</li> - <li>Deleted the powertop.trisquel6 script (Trisquel 6 is obsolete)</li> - <li>Documentation: general improvements to the flashing instructions</li> - <li>Merged all flashing scripts into a single script</li> - <li>Updated GRUB</li> - <li>bucts: Make it build without git</li> - <li>Moved dejavu-fonts-ttf-2.34/AUTHORS to resources/grub/font/</li> - <li>Deleted GRUB Invaders from libreboot</li> - <li>Deleted SeaBIOS from libreboot</li> - <li>build-release: optimize use of tar (reduced file sizes)</li> - <li>grub.cfg: add another SYSLINUX config location (/syslinux/syslinux.cfg)</li> - <li>build-release: remove the bin/ directory from libreboot_util</li> - <li>cleandeps: delete the bin/ directory</li> - <li>buildrom-withgrub: create the bin directory if it does not exist</li> - <li>coreboot-libre: don't use git for version timestamp</li> - <li>i945-pwm: add clean command to Makefile</li> - <li>i945-pwm: add -lz to Makefile</li> - <li>docs/install/x200_external: Mention GPIO33 non-descriptor mode</li> - <li>docs/hcl/index.html: Remove redundant links</li> - <li>ich9macchange: Add R400</li> - <li>build-release: Separate ROM images into individual archives</li> - <li>build-release: rename libreboot_bin to libreboot_util</li> - <li><b>New board:</b> ThinkPad R400 support added to libreboot.</li> - <li>bbb_setup.html: tell user to use libreboot's own flashrom</li> - </ul> - - </div> - - <div class="section"> - - <h1 id="release20150124">Release 20150124, 20150126 and 20150208</h1> - - <p> - Release date: 24th January 2015. - </p> - - <h2>Machines supported in this release:</h2> - <ul> - <li> - <b>Lenovo ThinkPad X60/X60s</b> - <ul> - <li> - You can also remove the motherboard from an X61/X61s and replace it with an X60/X60s motherboard. - An X60 Tablet motherboard will also fit inside an X60/X60s. - </li> - </ul> - </li> - <li> - <b>Lenovo ThinkPad X60 Tablet</b> (1024x768 and 1400x1050) with digitizer support - <ul> - <li>See <b>hcl/index.html#supported_x60t_list</b> for list of supported LCD panels</li> - <li>It is unknown whether an X61 Tablet can have it's mainboard replaced with an X60 Tablet motherboard.</li> - </ul> - </li> - <li> - <b>Lenovo ThinkPad T60</b> (Intel GPU) (there are issuesinstall/x200_external.html; see below): - <ul> - <li>See notes below for exceptions, and <b>hcl/index.html#supported_t60_list</b> for known working LCD panels.</li> - <li>It is unknown whether a T61 can have it's mainboard replaced with a T60 motherboard.</li> - <li>See <b>future/index.html#t60_cpu_microcode</b>.</li> - <li>T60P (and T60 laptops with ATI GPU) will likely never be supported: <b>hcl/index.html#t60_ati_intel</b></li> - </ul> - </li> - <li> - <b>Lenovo ThinkPad X200</b> - <ul> - <li>X200S and X200 Tablet are also supported, conditionally; see <b>hcl/x200.html#x200s</b></li> - <li><b>ME/AMT</b>: libreboot removes this, permanently. <b>hcl/gm45_remove_me.html</b></li> - </ul> - </li> - <li> - <b>Lenovo ThinkPad R400</b> (r20150208 and later, only) - <ul> - <li><b>ME/AMT</b>: libreboot removes this, permanently. <b>hcl/gm45_remove_me.html</b></li> - </ul> - </li> - <li> - <b>Apple MacBook1,1</b> (MA255LL/A, MA254LL/A, MA472LL/A) - <ul> - <li>See <b>hcl/index.html#macbook11</b>.</li> - </ul> - </li> - <li> - <b>Apple MacBook2,1</b> (MA699LL/A, MA701LL/A, MB061LL/A, MA700LL/A, MB063LL/A, MB062LL/A) - <ul> - <li>See <b>hcl/index.html#macbook21</b>.</li> - </ul> - </li> - </ul> - - <h2> - Revisions for r20150208 (relative to r20150126) - </h2> - <p> - This is a maintenance release (polishing) based on r20150126. Users who installed r20150126 - don't really need to update to this release. - </p> - <ul> - <li>buildrom-withgrub: use gnulove.jpg background on 16:10 laptops (MacBook2,1 and X200)</li> - <li>build-release: include grub-background script in libreboot_bin</li> - <li>grub-background (new): lets user change GRUB background image</li> - <li>grub-assemble: Add link to original utility.</li> - <li>buildrom-withgrub: Put background.jpg in CBFS, not GRUB memdisk</li> - <li>grub-assemble: merge scripts into a single script gen.sh</li> - <li>Documentation: implement theme, drastically improve readability</li> - <li>docs/hcl/index.html: update list of compatible T60 LCD panels</li> - <li>docs/index.html: more clarification of libreboot's stated purpose.</li> - <li>build-release: include the commitid file in the release archives</li> - <li>docs/index.html: Further emphasize the GNU/Linux requirement.</li> - <li>lenovobios_firstflash: fix BASH errors</li> - <li>lenovobios_secondflash: fix BASH errors</li> - <li>docs/install/x200_external.html: Tell user to switch MAC address.</li> - <li>docs/git/index.html: Add to the list of x86_64 compatible hosts.</li> - <li>docs/install/index.html: Remove old (obsolete) information.</li> - <li>docs/git/index.html: Say that the build dependencies are for src (and not nedeed for libreboot_bin)</li> - <li>build: re-factor the descriptor/gbe generating loop for GM45/ICH9M</li> - <li>X60, X60S and X60 Tablet now the same ROM images.</li> - <li>Add QEMU (q35/ich9) support to libreboot.</li> - <li>Add QEMU (i440fx/piix4) support to libreboot</li> - <li>docs/index.html: Re-write the description of what libreboot is.</li> - <li>docs/release.html: Add notes about how to use GPG.</li> - <li>build-release: delete the commitid file from release archives</li> - <li>build-release: create file named commitid after build-release</li> - </ul> - <h2> - Revisions for r20150126 (relative to r20150124) - </h2> - <p> - This is a bug fix release based on r20150124. It contains a few small changes: - </p> - <ul> - <li>grub.cfg: hardcode the list of partitions to search (speeds up booting considerably. GRUB regexp isn't very well optimized)</li> - <li>Docs (x200.html hcl): Remove incorrect information</li> - <li>Documentation (bbb_setup.html): Fix typos</li> - <li> - build-release: delete ich9fdgbe_{4m,8m}.bin files from ich9gen - <ul> - <li> - These were accidentically included in the r20150124 release. They - are generated from ich9gen so it's ok, but they don't need to be - in the archive. - </li> - </ul> - </li> - <li>Documentation (grub_cbfs.html): Looping in libreboot_grub.cfg (Add notes about it if the user copied from grub.cfg in CBFS.)</li> - <li>Documentation: refer to Guix as GNU Guix System Distribution or GNU GSD per advice from the Guix project.</li> - </ul> - <h2> - Changes for this release (latest changes first, earliest changes last) - </h2> - <ul> - <li>Documentation: added information about how to boot Guix GNU/Linux.</li> - <li>grub.cfg: Added (usb0) and (usb0,*) to the list of devices in the <i>Search for GRUB</i> menuentry (this is needed for Guix GNU/Linux)</li> - <li>grub.cfg: Added (ahci1) to list of devices for ISOLINUX parser (CD/DVD) (this is needed for the X200 docking station).</li> - <li>grub.cfg: ISOLINUX parsing is now done on all USB partitions.</li> - <li>grub.cfg: Automatically switched to /boot/grub/libreboot_grub.cfg on a partition, if it exists.</li> - <li>libreboot_bin: added static ARM binaries for flashrom, cbfstool, ich9gen and - ich9deblob (tested on beaglebone black).</li> - <li>Flashrom: removed redundant Macronix flashchip definitions (for X200 owners).</li> - <li>Flashrom: added whitelist for ThinkPad X200.</li> - <li>X200: fixed uneven backlight (at low levels)</li> - <li>ich9macchange (new script, uses ich9gen): for changing the default MAC address on X200 ROM images.</li> - <li>ich9gen: added capability to change the default MAC address (and update the checksum)</li> - <li>ich9deblob: added new utility ich9gen: this can generate a descriptor+gbe image without a factory.rom dump present.</li> - <li>Modified ich9deblob to use a struct for Gbe, documenting everything.</li> - <li>Massively updated the ich9deblob utility: re-factored everything completely.</li> - <li>Enabled cstates 1 and 2 on macbook21. This reduces idle heat / power consumption.</li> - <li>buildrom-withgrub: disabled creation of *txtmode*.rom for X200 (only framebuffer graphics work)</li> - <li>Updated SeaBIOS (again)</li> - <li>docs/install/index.html#flashrom_x200: improve instructions</li> - <li>Updated flashrom (again) - patches updated</li> - <li>Updated GRUB (again)</li> - <li>Updated coreboot (again)</li> - <li>build-release: not all files were copied to libreboot_src. fix that.</li> - <li>build-release: include cbmem (statically compiled) in libreboot_bin</li> - <li>Documentation (X200): added software-based flashing instructions</li> - <li>Documentation: remove all references to the bus pirate (replaced with BBB flashing tutorials)</li> - <li><b>New board:</b> ThinkPad X200S and X200 Tablet support added to libreboot</li> - <li>build: automatically find board names (configs) to build for</li> - <li><b>New board:</b> ThinkPad X200 support added to libreboot</li> - <li>coreboot-libre config (all boards): enable USB dongle log output (for BeagleBone Black)</li> - <li>cleandeps: actually clean grubinvaders</li> - <li>.gitignore: add powertop directory</li> - <li>cleandeps: clean i945-pwm utility</li> - <li>scripts (all): fix typos</li> - <li>Documentation: general cleanup.</li> - <li>builddeps-flashrom: reduce build commands to a single for loop</li> - <li>scripts (all): replace unnecessary rm -Rf with rm -f</li> - <li>powertop.trisquel7: remove sudo (script already checks if the user is root)</li> - <li>docs/release.html: add lenovo g505s to the list of candidates</li> - <li>.gitignore: add libreboot_bin.tar.xz and libreboot_src.tar.xz</li> - <li> - libreboot_bin.tar.xz: Include utils as statically linked binaries - <ul> - <li>This means that the user does not have to install build dependency - or build from source anymore.</li> - </ul> - </li> - <li>deps-trisquel: Add binutils-source</li> - <li>powertop.trisquel7 (new): Setup powertop on trisquel 7</li> - <li>deps-trisquel,flash,lenovobios_firstflash,lenovobios_secondflash,macbook21_firstflash - x60flashfrom5,powertop.trisquel6: check if user is root</li> - <li>deps-trisquel: Make GRUB build on in Trisquel 7 x86_64. (cross compile dependencies. fixes build error in GRUB)</li> - <li>deps-parabola (removed) Remove Parabola dependencies script. Will re-add later (properly tested)</li> - <li>grub.cfg: Add more path checks to isolinux parser (more ISOs should work now)</li> - <li>Update SeaBIOS</li> - <li>x60flashfrom5 (new), for X60 users upgrading from 5th/early release</li> - <li>Update flashrom</li> - <li>Update GRUB</li> - <li> - Updated coreboot-libre - <ul> - <li>i945: permanently set tft_brightness to 0xff (fixes bug on X60 where - turning up brightness at max would make it loop back to low brightness)</li> - </ul> - </li> - <li> - getcb: Revert X60/T60 to legacy backlight controls - <ul> - <li>The ACPI brightness patches were abandoned and obsolete.</li> - </ul> - </li> - <li>grub.cfg: Only load initrd.img if it exists. Add rw to linux line (for ProteanOS)</li> - <li>build: Only generate the GRUB configurations once (re-use on all images)</li> - <li>Only build 2 GRUB payload executables, re-use on all boards.</li> - <li> - resources/utilities/grub-assemble/gen.txtmode.sh: Use GNU BASH<br/> - resources/utilities/grub-assemble/gen.vesafb.sh: Use GNU BASH - </li> - <li>scripts (error handling): Replace exit with exit 1 (make debugging easier)</li> - <li> - Move most files in CBFS to GRUB memdisk, except grub.cfg and grubtest.cfg - <ul> - This reduces the space used in CBFS because coreboot compresses - its payloads with LZMA by default. grub.cfg is all that most users - will want to modify, which remains in CBFS. - </ul> - </li> - <li>docs/release.html Add DMP vortex86ex to list of candidates.</li> - <li>docs/release.html Add ThinkPad X201 to list of candidates.</li> - <li>New links added to docs/security/x60_security and docs/security/t60_security</li> - <li>lenovobios_secondflash: Warn if BUCTS is not present. (not a dealbreaker. Can just pull out nvram battery/coin).</li> - <li>lenovobios_firstflash: Fail if BUCTS fails. (anti-bricking precaution)</li> - <li>Removed obnoxious warnings from flashing scripts, improved documentation instead.</li> - <li>scripts (all): add proper error checking (fail fast, fail early. Do not continue if there are errors)</li> - <li>buildrom-withgrub: rename image to boardname_layout_romtype.rom</li> - <li>buildrom-withgrub: don't move cbfstool, execute directly</li> - <li>resources/utilities/grub-assemble: add French Dvorak (BEPO) keyboard layout.</li> - <li>Documentation: add docs/hardware/x60_keyboard.html (show how to replace keyboard on X60/X60T)</li> - <li>Documentation: major cleanup (better structure, easier to find things)</li> - <li> - docs/release.html: Remove Acer CB5 from list of future candidates. - <ul> - <li> - Too many issues. Chromebooks are crippled (soldered RAM/storage/wifi) - and have too many usability issues for the libreboot project. - </li> - </ul> - </li> - <li>docs/gnulinux/grub_cbfs.html Major cleanup. Usability improvements.</li> - <li>hocs/gnulinux/encrypted_trisquel.html: Fixed mistakes/typos. General improvements</li> - <li> - flash (flashrom script): remove boardmismatch=force - <ul> - <li> - This was put there before for users upgrading from libreboot r5 - to r6, but also allows the user to flash the wrong image. For - example, the user could flash a T60 image on an X60, thus - bricking the system. It's almost certain that most people - have upgraded by now, so remove this potentially dangerous - option. - </li> - </ul> - </li> - <li>Documentation: update compatibility list for X60T LCD panels.</li> - <li>docs/release.html: add note about X60 Tablet board in X60/X60s</li> - <li>docs/howtos/grub_boot_installer.html: small corrections</li> - <li>docs/howtos/grub_boot_installer.html: improved readability, fixed html errors</li> - <li>Documentation (macbook21 related): clean up</li> - </ul> - - </div> - - <div class="section"> - - <h1 id="release20141015">Release 20141015</h1> - - <h2>Machines supported in this release:</h2> - <ul> - <li> - <b>Lenovo ThinkPad X60/X60s</b> - <ul> - <li> - You can also remove the motherboard from an X61/X61s and replace it with an X60/X60s motherboard. - An X60 Tablet motherboard will also fit inside an X60/X60s. - </li> - </ul> - </li> - <li> - <b>Lenovo ThinkPad X60 Tablet</b> (1024x768 and 1400x1050) with digitizer support - <ul> - <li>See <b>hcl/index.html#supported_x60t_list</b> for list of supported LCD panels</li> - <li>It is unknown whether an X61 Tablet can have its mainboard replaced with an X60 Tablet motherboard.</li> - </ul> - </li> - <li> - <b>Lenovo ThinkPad T60</b> (Intel GPU) (there are issues; see below): - <ul> - <li>See notes below for exceptions, and <b>hcl/index.html#supported_t60_list</b> for known working LCD panels.</li> - <li>It is unknown whether a T61 can have its mainboard replaced with a T60 motherboard.</li> - <li>See <b>future/index.html#t60_cpu_microcode</b>.</li> - <li>T60P (and T60s with ATI GPU) will likely never be supported: <b>hcl/index.html#t60_ati_intel</b></li> - </ul> - </li> - <li> - <b>Apple MacBook1,1</b> (MA255LL/A, MA254LL/A, MA472LL/A) - <ul> - <li>See <b>hcl/index.html#macbook11</b>.</li> - </ul> - </li> - <li> - <b>Apple MacBook2,1</b> (MA699LL/A, MA701LL/A, MB061LL/A, MA700LL/A, MB063LL/A, MB062LL/A) - <ul> - <li>See <b>hcl/index.html#macbook21</b>.</li> - </ul> - </li> - </ul> - - <h2> - Changes for this release (latest changes first, earliest changes last) - </h2> - <ul> - <li>Updated coreboot (git commit 8ffc085e1affaabbe3dca8ac6a89346b71dfc02e), the latest at the time of writing.</li> - <li>Updated SeaBIOS (git commit 67d1fbef0f630e1e823f137d1bae7fa5790bcf4e), the latest at the time of writing.</li> - <li>Updated Flashrom (svn revision 1850), the latest at the time of writing.</li> - <li>Updated GRUB (git commit 9a67e1ac8e92cd0b7521c75a734fcaf2e58523ad), the latest at the time of writing.</li> - <li>Cleaned up the documentation, removed unneeded files.</li> - <li>ec/lenovo/h8 (x60/x60s/x60t/t60): Enable wifi/bluetooth/wwan/touchpad/trackpoint by default.</li> - <li>Documentation: Updated list of T60 LCDs (Samsung LTN150XG 15&quot; XGA listed as non-working).</li> - <li>builddeps-coreboot: Don't build libpayload (not needed. This was leftover by mistake, when trying out the TINT payload).</li> - <li>Replaced most diff files (patches) for coreboot with gerrit checkouts (cherry-pick).</li> - <li>Documentation: x60_security.html and t60_security.html: added links to info about the ethernet controller (Intel 82573).</li> - <li>Documentation: x60_security.html and t60_security.html: added notes about DMA and the docking station.</li> - <li> - Documentation: configuring_parabola.html: basic post-install steps for Parabola GNU/Linux - (helpful, since libreboot development is being moved to Parabola at the time of writing). - </li> - <li>builddeps-coreboot: use 'make crossgcc-i386' instead of 'make crossgcc'. Libreboot only targets x86 at the time of writing.</li> - <li>ROM images no longer include SeaBIOS. Instead, the user adds it afterwards. Documentation and scripts updated.</li> - <li>docs/images/encrypted_parabola.html: Notes about linux-libre-grsec</li> - <li>Documentation: encrypted_parabola.html: add tutorial for encrypted Parabola GNU/Linux installation.</li> - <li>Documentation: added more info about wifi chipsets</li> - </ul> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="release20140911">6th release (pre-release, 7th beta)</h1> - - <ul> - <li>Released 11th July 2014 (pre-release) 1st beta</li> - <li>Revised (pre-release, 2nd beta) 16th July 2014</li> - <li>Revised (pre-release, 3rd beta) 20th July 2014</li> - <li>Revised (pre-release, 4th beta) 29th July 2014</li> - <li>Revised (pre-release, 5th beta) 11th August 2014 (corrected 11th August 2014)</li> - <li>Revised (pre-release, 6th beta) 3rd September 2014</li> - <li>Revised (pre-release, 7th beta) 11th September 2014</li> - </ul> - - <h2>Machines still supported (compared to previous release):</h2> - <ul> - <li> - <b>Lenovo ThinkPad X60/X60s</b> - <ul> - <li> - You can also remove the motherboard from an X61/X61s and replace it with an X60/X60s motherboard. - </li> - </ul> - </li> - </ul> - <h2>New systems supported in this release:</h2> - <ul> - <li> - <b>Lenovo ThinkPad X60 Tablet</b> (1024x768 and 1400x1050) with digitizer support - <ul> - <li>See <b>hcl/index.html#supported_x60t_list</b> for list of supported LCD panels</li> - <li>It is unknown whether an X61 Tablet can have its mainboard replaced with an X60 Tablet motherboard.</li> - </ul> - </li> - <li> - <b>Lenovo ThinkPad T60</b> (Intel GPU) (there are issues; see below) - <ul> - <li>See notes below for exceptions, and <b>hcl/index.html#supported_t60_list</b> for known working LCD panels.</li> - <li>It is unknown whether a T61 can have its mainboard replaced with a T60 motherboard.</li> - <li>T60P (and T60s with ATI GPU) will likely never be supported: <b>hcl/index.html#t60_ati_intel</b></li> - </ul> - </li> - <li> - <b>Apple MacBook1,1</b> (MA255LL/A, MA254LL/A, MA472LL/A) - <ul> - <li>See <b>hcl/index.html#macbook11</b>.</li> - </ul> - </li> - <li> - <b>Apple MacBook2,1</b> (MA699LL/A, MA701LL/A, MB061LL/A, MA700LL/A, MB063LL/A, MB062LL/A) - <ul> - <li>See <b>hcl/index.html#macbook21</b>.</li> - </ul> - </li> - </ul> - <h2>Machines no longer supported (compared to previous release):</h2> - <ul> - <li><b>All previous systems still supported!</b></li> - </ul> - - <h2> - Revisions for r20140911 (7th beta) (11th September 2014) - </h2> - <ul> - <li>The changes below were made in a git repository, unlike in previous releases. Descriptions below are copied from 'git log'.</li> - <li>Update .gitignore for new dependencies.</li> - <li>Use a submodule for i945-pwm.</li> - <li>Don't clean packages that fail or don't need cleaning.</li> - <li>Don't clean i945-pwm, it's not needed.</li> - <li>Regression fix: Parabola live ISO boot issues</li> - <li>Re-enable background images in ISOLINUX/SYSLINUX GRUB parser menus</li> - <li>Regression fix: Re-add CD-ROM (ata0) in GRUB</li> - <li>Documentation: add notes about performance penalty when using ecryptfs.</li> - <li>Documentation: Fixed spelling and grammatical errors.</li> - <li>Documentation: macbook21: add new system as tested</li> - <li>Documentation: macbook21: add info about improving touchpad sensitivity</li> - <li>Documentation: X60 Tablet: add more information about finger input</li> - <li>Documentation: release.html: Add information about recently merged commit in coreboot</li> - </ul> - - <h2> - Revisions for r20140903 (6th beta) (3rd September 2014) - </h2> - <ul> - <li>Added modified builddeb* scripts for Parabola GNU/Linux-libre: buildpac, buildpac-flashrom, buildpac-bucts (courtesy of Noah Vesely)</li> - <li>Documentation: updated all relevant areas to mention use of buildpac* scripts for Parabola users.</li> - <li>Documentation: added information showing how to enable or disable bluetooth on the X60</li> - <li>MacBook1,1 tested! See <b>hcl/index.html#macbook11</b></li> - <li>Documentation: fixed typo in index.html#get_edid_panelname (get-edit changed to get-edid)</li> - <li>Documentation: added images/x60_lcd_change/ (pics only for now)</li> - <li>Added gcry_serpent and gcry_whirlpool to the GRUB module list in the 'build' script (for luks users)</li> - <li> - <b>Libreboot is now based on a new coreboot version from August 23rd, 2014:<br/> - Merged commits (relates to boards that were already supported in libreboot):</b> - <ul> - <li><a href="http://review.coreboot.org/#/c/6697/">http://review.coreboot.org/#/c/6697/</a></li> - <li><a href="http://review.coreboot.org/#/c/6698/">http://review.coreboot.org/#/c/6698/</a> (merged already)</li> - <li><a href="http://review.coreboot.org/#/c/6699/">http://review.coreboot.org/#/c/6699/</a> (merged already)</li> - <li><a href="http://review.coreboot.org/#/c/6696/">http://review.coreboot.org/#/c/6696/</a> (merged already)</li> - <li><a href="http://review.coreboot.org/#/c/6695/">http://review.coreboot.org/#/c/6695/</a> (merged already)</li> - <li><b><a href="http://review.coreboot.org/#/c/5927/">http://review.coreboot.org/#/c/5927/</a> (merged already)</b></li> - <li><a href="http://review.coreboot.org/#/c/6717/">http://review.coreboot.org/#/c/6717/</a> (merged already)</li> - <li><a href="http://review.coreboot.org/#/c/6718/">http://review.coreboot.org/#/c/6718/</a> (merged already)</li> - <li> - <a href="http://review.coreboot.org/#/c/6723/">http://review.coreboot.org/#/c/6723/</a> (merged already) - (text-mode patch, might enable memtest. macbook21) - </li> - <li> - <a href="http://review.coreboot.org/#/c/6732/">http://review.coreboot.org/#/c/6732/</a> (MERGED) - (remove useless ps/2 keyboard delay from macbook21. already merged) - </li> - </ul> - </li> - <li> - These were also merged in coreboot (relates to boards that libreboot already supported): - <ul> - <li><a href="http://review.coreboot.org/#/c/5320/">http://review.coreboot.org/#/c/5320/</a> (merged)</li> - <li><a href="http://review.coreboot.org/#/c/5321/">http://review.coreboot.org/#/c/5321/</a> (merged)</li> - <li><a href="http://review.coreboot.org/#/c/5323/">http://review.coreboot.org/#/c/5323/</a> (merged)</li> - <li><a href="http://review.coreboot.org/#/c/6693/">http://review.coreboot.org/#/c/6693/</a> (merged)</li> - <li><a href="http://review.coreboot.org/#/c/6694/">http://review.coreboot.org/#/c/6694/</a> (merged)</li> - <li><a href="http://review.coreboot.org/#/c/5324/">http://review.coreboot.org/#/c/5324/</a> (merged)</li> - </ul> - </li> - <li>Documentation: removed the section about tft_brightness on X60 (new code makes it obsolete)</li> - <li>Removed all patches from resources/libreboot/patch/ and added new patch: 0000_t60_textmode.git.diff</li> - <li>Updated getcb script and DEBLOB script.</li> - <li>Updated configuration files under resources/libreboot/config/ to accomodate new coreboot version.</li> - <li> - Removed grub_serial*.cfg and libreboot_serial*.rom, all configs/rom files are now unified (containing same configuration as serial rom files from before). - <ul> - <li>Documentation: updated index.html#rom to reflect the above.</li> - </ul> - </li> - <li>Updated GRUB to new version from August 14th, 2014.</li> - <li>Unified all grub configurations for all systems to a single grub.cfg under resources/grub/config/</li> - <li>Updated flashrom to new version from August 20th, 2014</li> - <li> - Added getseabios and builddeps-seabios (builddeps and getall were also updated) - <ul> - <li> - Added instructions to 'buildrom-withgrub' to include bios.bin.elf and vgaroms/vgabios.bin from SeaBIOS inside the ROM. - </li> - </ul> - </li> - <li>Added seabios (and sgavgabios) to grub as payload option in menu</li> - <li> - Disabled serial output in Memtest86+ (no longer needed) to speed up tests. - <ul> - <li>MemTest86+ now works properly, it can output on the laptop screen (no serial port needed anymore).</li> - </ul> - </li> - <li> - Added getgrubinvaders, builddeps-grubinvaders scripts. Added these to getall and builddeps. - <ul> - <li> - Added <a href="http://www.coreboot.org/GRUB_invaders">GRUB Invaders</a> menu entry in resources/grub/config/grub.cfg - </li> - </ul> - </li> - <li>Added rules to builddeps-coreboot to build libpayload with TinyCurses. (added appropriate instructions to cleandeps script).</li> - <li>Commented out lines in resources/grub/config/grub.cfg for loading font/background (not useful anymore, now that GRUB is in text-mode).</li> - <li>Commented out lines in buildrom-withgrub that included backgrounds/fonts (not useful anymore, now that GRUB is in text-mode).</li> - <li> - Added resources/utilities/i945-pwm/ (from git://git.mtjm.eu/i945-pwm), for debugging acpi brightness on i945 systems. - <ul> - <li>Added instructions for it in builddeps, builddeps-i945pwm, builddeb and cleandeps</li> - </ul> - </li> - <li>'build' script: removed the parts that generated sha512sum manifests (not needed, since release tarballs are GPG-signed)</li> - <li> - 'build' script: removed the parts that generated libreboot_meta directory (not needed anymore, since _meta will be hosted in git) - <ul> - <li>Updated index.html#build_meta (and other parts of documentation) to accomodate this change.</li> - </ul> - </li> - <li>Documentation: simplified (refactored) the notes in index.html#rom</li> - <li> - 'build' script: removed the parts that generated libreboot_bin and added them to a new script: 'build-release' - <ul> - <li>Documentation: index.html#build updated to reflect the above.</li> - </ul> - </li> - <li>Removed 'sudo' from builddeb, builddeb-flashrom, powertop.trisquel6 and builddeb-bucts scripts (assuming that the user has it is a really bad idea).</li> - <li><s>Added all gcry_* modules to grub (luks/cryptomount): gcry_arcfour gcry_camellia gcry_crc gcry_dsa gcry_md4 gcry_rfc2268 gcry_rmd160 gcry_seed gcry_sha1 gcry_sha512 gcry_twofish gcry_blowfish gcry_cast5 gcry_des gcry_idea gcry_md5 gcry_rijndael gcry_rsa gcry_serpent gcry_sha256 gcry_tiger gcry_whirlpool</s></li> - <li>Added GNUtoo's list of GRUB modules (includes all of the gcry_* modules above), cryptomount should be working now.</li> - <li>Removed builddeb-bucts and builddeb-flashrom, merged them with builddeb (index.html updated accordingly)</li> - <li>Removed buildpac-bucts and buildpac-flashrom, merged them with buildpac (index.html updated accordingly)</li> - <li>Renamed builddeb to deps-trisquel (index.html updated accordingly)</li> - <li>Renamed buildpac to deps-parabola (index.html updated accordingly)</li> - <li>Documentation: removed all parts talking about build dependencies, replaced them with links to index.html#build_dependencies</li> - <li>Documentation: emphasized more strongly on the documentation, the need to re-build bucts and/or flashrom before flashing a ROM image.</li> - <li>build-release: flashrom, nvramtool, cbfstool and bucts are no longer provided pre-compiled in binary archives, and are now in source form only. (to maximize distro compatibility).</li> - <li>Documentation: added gnulinux/encrypted_trisquel.html showing how to setup a fully encrypted Trisquel installation (including /boot) and boot it from the GRUB payload.</li> - <li>'build' script: replaced grub.elf assembly instructons, it is now handled by a utility added under resources/utilities/grub-assemble</li> - <li>Moved resources/grub/keymap to resources/utilities/grub-assemble/keymap, and updated that utility to use it</li> - <li>Documentation: removed useless links to pictures of keyboard layouts and unmodified layouts.</li> - <li>Removed all unused fonts from dejavu-fonts-ttf-2.34/ directory</li> - <li>'buildrom-withgrub' script: updated it to create 2 sets of ROMs for each system: one with text-mode, one with coreboot framebuffer.</li> - <li>Documentation: updated index.html#rom to reflect the above</li> - <li>Deleted unused README and COPYING file from main directory</li> - <li>Removed some rm -Rf .git* instructions from the get* scripts and moved them to build-release script</li> - <li> - Split up default grub.cfg into 6 parts: extra/{common.cfg,txtmode.cfg,vesafb.cfg} and menuentries/{common.cfg,txtmode.cfg,vesafb.cfg} - <ul> - <li>buildrom-withgrub script uses these to generate the correct grub.cfg for each type of configuration.</li> - </ul> - </li> - <li>grub_memdisk.cfg (used inside grub.elf) now only loads grub.cfg from cbfs. It no longer enables serial output or sets prefix. (menuentries/common.cfg does instead)</li> - <li> - resources/grub/config/extra/common.cfg, added: - <ul> - <li>insmod instructions to load those modules: nativedisk, ehci, ohci, uhci, usb, usbserial_pl2303, usbserial_ftdi, usbserial_usbdebug</li> - <li>set prefix=(memdisk)/boot/grub</li> - <li> - For native graphics (recommended by coreboot wiki):<br/> - gfxpayload=keep<br/> - terminal_output --append gfxterm - </li> - <li> - Play a beep on startup:<br/> - play 480 440 1 - </li> - </ul> - </li> - <li> - Documentation: added note about 'fb=false' workaround for text-mode debian-installer (Trisquel net install) to - gnulinux/grub_boot_installer.html - </li> - <li> - Documentation: updated gnulinux/grub_cbfs.html to make it safer (and easier) to follow. - </li> - </ul> - - <h2> - Corrections to r20140811 (5th beta) (11th August 2014) - </h2> - <ul> - <li>Fixed typo where revision list for 5th beta was listed as March 11th 2014, when in fact it was August 11th 2014</li> - <li>Fixed incorrect grub.cfg that was actually placed in resources/grub/config/x60/grub_usqwerty.cfg which broke the default GRUB menu entry on X60</li> - </ul> - - <h2> - Revisions for r20140811 (5th beta) (11th August 2014) - </h2> - <ul> - <li>build: added 'luks', 'lvm', 'cmosdump' and 'cmostest' to the list of modules for grub.elf</li> - <li>Documentation: added pics showing T60 unbricking (still need to write a tutorial)</li> - <li>build: include cmos.layout (coreboot/src/mainboard/manufacturer/model/cmos.layout) files in libreboot_bin</li> - <li>Documentation: added <b>install/x60tablet_unbrick.html</b></li> - <li>Documentation: added <b>install/t60_unbrick.html</b></li> - <li>Documentation: added <b>install/t60_lcd_15.html</b></li> - <li>Documentation: added <b>install/t60_security.html</b></li> - <li>Documentation: added <b>install/t60_heatsink.html</b></li> - <li>Documentation: Renamed RELEASE.html to release.html</li> - <li>Documentation: removed pcmcia reference in x60_security.html (it's cardbus)</li> - <li>Documentation: added preliminary information about randomized seal (for physical intrusion detection) in x60_security.html and t60_security.html</li> - <li>Documentation: added preliminary information about preventing/mitigating cold-boot attack in x60_security.html and t60_security.html</li> - <li>Documentation: added info to index.html#macbook21 warning about issues with macbook21</li> - <li> - Documentation: X60/T60: added information about checking custom ROMs using dd to see whether or not the top 64K - region is duplicated below top or not. Advise caution about this in the tutorial that deals with flashing on top - of Lenovo BIOS, citing the correct dd commands necessary if it is confirmed that the ROM has not been applied with - dd yet. (in the case that the user compiled their own ROMs from libreboot, without using the build scripts, or if they forgot to use dd, etc). - </li> - <li> - Split resources/libreboot/patch/gitdiff into separate patch files (getcb script updated to accomodate this change). - </li> - <li>Re-added .git files to bucts</li> - <li>Fixed the oversight where macbook21_firstflash wasn't included in binary archives</li> - <li>Release archives are now compressed using .tar.xz for better compression</li> - </ul> - - <h2> - Revisions for r20140729 (4th beta) (29th July 2014) - </h2> - <ul> - <li>Documentation: improved (more explanations, background info) in docs/security/x60_security.html (courtesy of Denis Carikli)</li> - <li>MacBook2,1 tested (confirmed)</li> - <li>macbook21: Added script 'macbook21_firstflash' for flashing libreboot while Apple EFI firmware is running.</li> - <li>Documentation: macbook21: added software-based flashing instructions for flashing libreboot while Apple EFI firmware is running.</li> - <li> - Reduced size of libreboot_src.tar.gz: - <ul> - <li> - Removed .git and .gitignore from grub directory (libreboot_src); not needed. - Removing them reduces the size of the archive (by a lot). GRUB development should be upstream. - </li> - <li> - Removed .git and .gitignore from bucts directory (libreboot_src); not needed. - Removing them reduces the size of the archive. bucts development should be upstream. - </li> - <li> - Removed .svn from flashrom directory (libreboot_src); not needed. - Removing it reduces the size of the archive. flashrom development should be upstream. - </li> - </ul> - </li> - <li> - Added ROMs with Qwerty (Italian) layout in GRUB (libreboot*itqwerty.rom) - </li> - <li> - Added resources/utilities/i945gpu/intel-regs.py for debugging issues related to LCD panel compatibility on X60 Tablet and T60. (courtesy of <a href="http://mtjm.eu">Michał Masłowski</a>) - </li> - </ul> - - <h2> - Revisions for r20140720 (3rd beta) (20th July 2014) - </h2> - <ul> - <li> - Fixed typo that existed in 2nd beta where the release date of the 2nd beta was listed as being in year 2016, when in actual fact it was 2014. - </li> - <li> - Documentation: added (preliminary) details about (rare) buggy CPUs on the ThinkPad T60 that were found to fail (instability, kernel panics, etc) - without the microcode updates. - </li> - <li>Documentation: added docs/hardware/x60_heatsink.html for showing how to change the heatsink on the Thinkpad X60</li> - <li>Added ROM images for Azerty (French) keyboard layout in GRUB (courtesy of Olivier Mondoloni)</li> - <li> - Tidied up some scripts: - <ul> - <li><s>Re-factored those scripts (made easier to read/maintain): build-x60, build-x60t, build-t60, build-macbook21</s></li> - <li><s>Reduced the number of grub configs to 2 (or 1, for macbook21), the build scripts now generate the other configs at build time.</s></li> - <li>Deleted build-x60, build-x60t, build-t60, build-macbook21 and replaced with intelligent (generic) buildrom-withgrub script</li> - <li>Updated build to use buildrom-withgrub script for building the ROM images.</li> - <li>coreboot.rom and coreboot_serial.rom renamed to coreboot_usqwerty.rom and coreboot_serial_usqwerty.rom</li> - <li>coreboot_dvorak and coreboot_serial_dvorak.rom renamed to coreboot_usdvorak.rom and coreboot_serial_usdvorak.rom</li> - <li>Renamed coreboot*rom to libreboot*rom</li> - <li>Made flash, lenovobios_firstflash and lenovobios_secondflash scripts fail if the specified file does not exist.</li> - <li>Updated all relevant parts of the documentation to reflect the above.</li> - </ul> - </li> - <li>Replaced background.png with background.jpg. added gnulove.jpg. (resources/grub/background/)</li> - <li>Updated buildrom-withgrub to use background.jpg instead of background.png</li> - <li>Updated buildrom-withgrub to use gnulove.jpg aswell</li> - <li>Updated resources/grub/config/macbook21/grub*cfg to use gnulove.jpg background.</li> - <li>Updated resources/grub/config/{x60,t60,x60t}/grub*cfg to use background.jpg background.</li> - <li>Documentation: updated docs/index.html#grub_custom_keyboard to be more generally useful.</li> - <li> - nvramtool: - <ul> - <li>Updated builddeps-coreboot script to build it</li> - <li>Updated build script to include it in libreboot_bin</li> - </ul> - </li> - <li> - Documentation: added docs/security/x60_security.html (security hardening for X60) - </li> - </ul> - - <h2> - Revisions for r20140716 (2nd beta) (16th July 2014) - </h2> - <ul> - <li> - Deleted all git-related files from the coreboot directory. This was necessary because - with those it is possible to run 'git diff' which shows the changes made in the form - of a patch (diff format); this includes the blobs that were deleted during deblobbing. - </li> - </ul> - - <h2> - Revisions for r20140711 (1st beta) (11th July 2014) - </h2> - <ul> - <li>Initial release (new coreboot base, dated 1st June 2014. See 'getcb' script for reference)</li> - <li>DEBLOBBED coreboot</li> - <li>Removed the part from memtest86+ 'make' where it tried to connect to some scp server while compiling. (commented out line 24 in the Makefile)</li> - <li>X60 now uses a single .config (for coreboot)</li> - <li>X60 now uses a single grub.cfg (for grub memdisk)</li> - <li>X60 now uses a single grub.elf (payload)</li> - <li>Added new native graphics code for X60 (replaces the old 'replay' code) from Vladimir Serbinenko: 5320/9 from review.coreboot.org</li> - <li>T60 is now supported, with native graphics. (5345/4 from review.coreboot.org, cherry-picked on top of 5320/9 checkout)</li> - <li> - Added macbook2,1 support (from Mono Moosbart and Vladimir Serbinenko) from review.coreboot.org (see 'getcb' script to know how that was done) - <ul> - <li>Documentation: added information linking to correct page and talking about which models are supported.</li> - <li>Added resources/libreboot/config/macbook21config</li> - <li>macbook21: Added 'build-macbook21' script and linked to it in 'build' (ROMs included under bin/macbook21/)</li> - <li>macbook21: Removed dd instructions from build-macbook21 script (macbook21 does not need bucts when flashing libreboot while Apple EFI firmware is running)</li> - <li>Documentation: Added macbook21 ROMs to the list of ROMs in docs/index.html#rom</li> - <li>Documentation: Write documentation linking to Mono Moosbart's macbook21 and parabola page (and include a copy)</li> - </ul> - </li> - <li>Documentation: added a copy of Mono's Parabola install guide (for macbook21 with Apple EFI firmware) and linked in in main index.</li> - <li>Documentation: added a copy of Mono's Coreboot page (for macbook21) and linked it in main index.</li> - <li>T60: Copy CD option from the grub.cfg files for T60 *serial*.rom images into the grub configs for non-serial images. (T60s have CD/DVD drive on main laptop)</li> - <li>macbook21: remove options in build-macbook21 for *serial*.rom (there is no dock or serial port available for macbook21)</li> - <li> - Added patches for backlight controls on X60 and T60 with help from Denis Carikli (see ./resources/libreboot/patch/gitdiff and ./getcb and docs/i945_backlight.html) - <ul> - <li>Documentation: added docs/i945_backlight.html showing how backlight controls were made to work on X60/T60</li> - </ul> - </li> - <li> - Documentation: Added info about getting LCD panel name based on EDID data. - <ul> - <li>Documentation: Added a link to this from the list of supported T60s and LCD panels for T60 (so that the user can check what LCD panel they have).</li> - </ul> - </li> - <li> - X60/T60: Merged patches for 3D fix (from Paul Menzel) when using kernel 3.12 or higher (see ./resources/libreboot/patch/gitdiff and ./getcb) - <ul> - <li>based on 5927/11 and 5932/5 from review.coreboot.org</li> - </ul> - </li> - <li> - Improved thinkpad_acpi support (from coreboot ): xsensors shows more information. - <ul> - <li>From 4650/29 in review.coreboot.org (merged in coreboot 'master' on June 1st 2014)</li> - </ul> - </li> - <li> - Merged changes for digitizer (X60 Tablet) and IR (X60 and T60) based on 5243/17, 5242/17 and 5239/19 from review.coreboot.org - <ul> - <li>(see ./resources/libreboot/patch/gitdiff and ./getcb)</li> - </ul> - </li> - <li>Documentation: added information about building flashrom using 'builddeps-flashrom' script.</li> - <li>Re-created resources/libreboot/config/x60config</li> - <li>Re-created resources/libreboot/config/t60config</li> - <li> - Added 'x60tconfig' in resources/libreboot/config (because X60 Tablet has different information about serial/model/version in 'dmidecode') - <ul> - <li>Added 'build-x60t' script</li> - <li>Updated 'build' script to use 'build-x60t'</li> - <li>Documentation: added to #config section the section #config_x60t (libreboot configuration and dmidecode info)</li> - <li>Documentation: added x60t ROMs to the list of ROMs</li> - </ul> - </li> - <li>Tidied up the 'builddeps' script (easier to read)</li> - <li>Tidied up the 'cleandeps' script (easier to read)</li> - <li>Annotated the 'buildall' script</li> - <li>Added 'getcb' script for getting coreboot revision used from git, and patching it.</li> - <li>Added 'getgrub' script for getting the GRUB revision used from git, and patching it.</li> - <li>Added 'getmt86' script for getting the memtest86+ version used, and patching it.</li> - <li>Added 'getbucts' script for getting the bucts version used.</li> - <li>Added 'getflashrom' script for getting the flashrom version used, and patching it</li> - <li>Added 'getall' script which runs all of the other 'get' scripts.</li> - <li> - Add instructions to the 'build' script to prepare libreboot_meta.tar.gz - <ul> - <li>New archive: libreboot_meta.tar.gz - minimal archive, using the 'get' scripts to download all the dependencies (coreboot, memtest, grub and so on).</li> - </ul> - </li> - <li>Documentation: added information about where 'build' script prepares the libreboot_meta.tar.gz archive.</li> - <li> - Documentation: added information about how to use the 'get' scripts in libreboot_meta.tar.gz (to generate libreboot_src.tar.gz) - <ul> - <li>Documentation: mention that meta doesn't create libreboot_src/ directory, but that libreboot_meta itself becomes the same.</li> - <li>Documentation: advise to rename libreboot_meta to libreboot_src after running 'getall'.</li> - </ul> - </li> - <li>Annotated the 'builddeb' script, to say what each set of dependencies are for.</li> - <li>Separated bucts/flashrom builddeb sections into separate scripts: builddeb-flashrom, builddeb-bucts.</li> - <li>Documentation: Updated relevant parts based on the above.</li> - <li>Added instructions to 'build' script for including builddeb-bucts and builddeb-flashrom in libreboot_bin</li> - <li> - Updated flashrom checkout (r1822 2014-06-16) from SVN (http://flashrom.org/Downloads). - <ul> - <li>Updated flashing instructions in docs/index.html for new commands needed (Macronix chip on X60/T60)</li> - <li>For X60/T60 (flashrom): Patched flashchips.c_lenovobios_macronix and flashchips.c_lenovobios_sst executables for SST/macronix (included in resources/flashrom/patch)</li> - <li>Updated builddeps to build flashrom_lenovobios_sst and flashrom_lenovobios_macronix, for X60/T60 users with Lenovo BIOS</li> - <li>moved the flashrom build instructions from 'builddeps' and put them in 'builddeps-flashrom', excecuting that from 'builddeps'.</li> - <li>Added builddeps-flashrom to libreboot_bin.tar.gz</li> - </ul> - </li> - <li> - flashrom: added patched flashchips.c to resources/flashrom/patch (automatically use correct macronix chip on libreboot, without using '-c' switch) - <ul> - <li>removed 'MX25L1605' and 'MX25L1605A/MX25L1606E' entries in flashchips.c for the patched version of flashchips.c</li> - <li>added instructions to 'builddeps-flashrom' to automatically use this modified flashchips.c in the default build</li> - </ul> - </li> - <li>Added builddeb to libreboot_bin.tar.gz</li> - <li> - Moved 'bucts' build instructions from builddeps to builddeps-bucts - <ul> - <li>builddeps now runs 'builddeps-bucts' instead</li> - <li>Added 'builddeps-bucts' to libreboot_bin.tar.gz</li> - <li>Documentation: Added information about using 'builddep-bucts' to build the BUC.TS utility.</li> - </ul> - </li> - <li> - Added 'lenovobios_firstflash' and 'lenovobios_secondflash' scripts - <ul> - <li>Added instructions to 'build' script for including those files in libreboot_bin</li> - <li>Documentation: Add tutorial for flashing while Lenovo BIOS is running (on X60/T60)</li> - </ul> - </li> - <li> - Added 'flash' script (make sure to run builddeps-flashrom first) which (while libreboot is already running) can use flashrom to flash a ROM - <ul> - <li>eg: &quot;sudo ./flash bin/x60/coreboot_serial_ukdvorak.rom&quot; equivalent to &quot;sudo ./flashrom/flashrom -p internal -w bin/x60/coreboot_uk_dvorak.rom&quot;</li> - <li>updated 'build' script to include the 'flash' script in libreboot_bin.tar.gz</li> - </ul> - </li> - <li>Documentation: replaced default flashrom tutorial to recommend the 'flash' script instead.</li> - <li> - Re-add cbfstool source code back into libreboot_bin.tar.gz, as cbfstool_standalone - <ul> - <li>Patched that version to work (able to be built and used) without requiring the entire coreboot source code.</li> - <li> - Created patched version of the relevant source files and added it into resources/cbfstool/patch - <ul> - <li>see coreboot/util/cbfstool/rmodule.c and then the patched version in resources/cbfstool/patch/rmodule.c</li> - <li>see coreboot/src/include/rmodule-defs.h and the rule in 'build' for including this in ../libreboot_bin/cbfstool_standalone</li> - </ul> - </li> - <li>Added instructions to 'build' script for applying this patch to the cbfstool_standalone source in libreboot_bin</li> - <li>Added instructions to 'build' script for then re-compiling cbfstool_standalone in libreboot_bin after applying the patch</li> - <li>Added a 'builddeps-cbfstool' script (in src, but only used in bin and put in bin by 'build') that compiles cbfstool_standalone in libreboot_bin (make), moves the cbfstool and rmodtool binaries into libreboot_bin/ and then does 'make clean' in libreboot_bin/cbfstool_standalone</li> - <li>Updated the 'build' script to put 'builddeps-cbfstool' in libreboot_bin</li> - <li>Updated the 'build' script in the cbfstool (standalone) part to accomodate the above.</li> - <li>Documentation: added notes about cbfstool (standalone) in libreboot_bin</li> - </ul> - </li> - <li>Documentation: made docs/gnulinux/grub_cbfs.html slightly easier to follow.</li> - <li>Annotate the 'build*' scripts with 'echo' commands, to help the user understand what it actually happening during the build process.</li> - <li> - Documentation: added information about how 'dmidecode' data was put in the coreboot configs - <ul> - <li>Documentation: In fact, document how the 'config' files in resources/libreboot/config/ were created</li> - </ul> - </li> - <li>Documentation: Added information about which ThinkPad T60s are supported, and which are not.</li> - <li> - Documentation: added information about LCD inverters (for upgrading the LCD panel on a T60 14.1' XGA or 15.1' XGA) - <ul> - <li>it's FRU P/N 41W1478 (on T60 14.1&quot;) so this was added to the docs.</li> - <li>it's P/N 42T0078 FRU 42T0079 or P/N 41W1338 (on T60 15.1&quot;) so this was added to the docs.</li> - </ul> - </li> - <li>Documentation: added information about names of LCD panels for T60 to the relevant parts of the documentation.</li> - <li>Documentation: added information (with pictures) about the differences between T60 with Intel GPU and T60 with ATI GPU.</li> - <li>Documentation: added pictures of keyboard layouts (US/UK Qwerty/Dvorak) to the ROM list, to let the user compare with their own keyboard.</li> - <li> - Move the coreboot build instructions in 'builddeps' into 'builddeps-coreboot' and link it in 'builddeps' - <ul> - <li>Link to 'builddeps-coreboot' in final stage of 'getcb'</li> - </ul> - </li> - <li> - Move GRUB build instructions from 'builddeps' into 'builddeps-grub', link from 'builddeps' - <ul> - <li>Link to 'builddeps-grub' in final stage of 'getgrub'</li> - </ul> - </li> - <li> - Move MemTest86+ build instructions from 'builddeps' into 'builddeps-memtest86', link from 'builddeps' - <ul> - <li>Link to 'builddeps-memtest86' in final stage of 'getmt86'</li> - </ul> - </li> - <li>made 'build' script put resources/ directory in libreboot_bin, to make builddeps-flashrom work in libreboot_bin</li> - <li>Removed instructions for building source code in the 'get' script (they don't really belong there)</li> - <li>Added libfuse-dev and liblzma-dev to the list of GRUB dependencies in 'builddeb' script.</li> - <li>Converted the 'RELEASE' file to 'docs/RELEASE.html'</li> - <li>Added those dependencies to builddeb script (for GRUB part): gawk libdevmapper-dev libtool libfreetype6-dev</li> - <li>Added to build script the instruction at the end to create a sha512sum.txt with a file manifest plus checksums.</li> - <li>Deleted the RELEASE and BACKPORT files (no longer needed)</li> - <li> - Documentation: added information about X60/T60 dock (ultrabase x6 and advanced mini dock) to relevant sections. - <ul> - <li>Added to docs/index.html#serial</li> - </ul> - </li> - </ul> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="release20140622">Release 20140622 (5th release)</h1> - - <ul> - <li>7th March 2014</li> - <li>revised 22nd June 2014</li> - </ul> - - <h2>Officially supported</h2> - <ul> - <li>ThinkPad X60</li> - <li>ThinkPad X60s</li> - </ul> - - <h2>Revision (22nd June 2014 - extra)</h2> - <ul> - <li>Documentation: added X60 Unbricking tutorial</li> - <li>Documentation: added info about enabling or disabling wifi</li> - <li>Documentation: added info about enabling or disabling trackpoint</li> - </ul> - - <h2>Revision (22nd June 2014 - extra)</h2> - <ul> - <li>Documentation: Improved the instructions for using flashrom</li> - <li>Documentation: Improved the instructions for using cbfstool (to change the default GRUB menu)</li> - <li>Documentation: Numerous small fixes.</li> - </ul> - - <h2>Revision notes (22nd June 2014)</h2> - <ul> - <li>updated GRUB (git 4b8b9135f1676924a8458da528d264bbc7bbb301, 20th April 2014)</li> - <li>Made &quot;DeJavu Sans Mono&quot; the default font in GRUB (fixes border corruption).</li> - <li>re-added background image in GRUB (meditating GNU)</li> - <li> - added 6 more images: - <ul> - <li>coreboot_ukqwerty.rom (UK Qwerty keyboard layout in GRUB)</li> - <li>coreboot_serial_ukqwerty.rom (UK Qwerty keyboard layout in GRUB)</li> - <li>coreboot_dvorak.rom (US Dvorak keyboard layout in GRUB)</li> - <li>coreboot_serial_dvorak.rom (US Dvorak keyboard layout in GRUB)</li> - <li>coreboot_ukdvorak.rom (UK Dvorak keyboard layout in GRUB)</li> - <li>coreboot_serial_ukdvorak.rom (UK Dvorak keyboard layout in GRUB)</li> - <li>(coreboot.rom and coreboot_serial.rom have US Qwerty keyboard layout in GRUB, as usual)</li> - </ul> - </li> - <li> - improved the documentation: - <ul> - <li>removed FLASH_INSTRUCTION and README.powertop and merged them with README</li> - <li>removed obsolete info from README and tidied it up</li> - <li>deleted README (replaced with docs/index.html)</li> - </ul> - </li> - <li>tidied up the menu entries in GRUB</li> - <li>tidied up the root directory of X60_source/, sorted more files into subdirectories</li> - <li>added 'pkg-config' to the list of dependencies for building powertop on Trisquel</li> - <li>wrote a script (powertop.trisquel6) to automatically setup Powertop to run at boot time (for Trisquel 6 users)</li> - <li>improved the commenting inside the 'build' script (should make modifying it easier)</li> - <li>Renamed X60_binary.tar.gz and X60_source.tar.gz to libreboot_bin.tar.gz and libreboot_src.tar.gz, respectively.</li> - <li>Replaced &quot;GNU GRUB version&quot; with &quot;FREE AS IN FREEDOM&quot; on GNU GRUB start screen.</li> - <li>Added sha512.txt files in libreboot_src and libreboot_bin. (inside the archives)</li> - <li>Added libreboot_bin.tar.gz.sha512.txt and libreboot_src.tar.gz.sha512.txt files (outside of the archives)</li> - </ul> - - <h2>Revision notes (11th June 2014):</h2> - <ul> - <li>removed 'CD' boot option from coreboot.rom (not needed)</li> - <li>removed 'processor.max_cstate=2' and 'idle=halt' options (see README.powertop file)</li> - </ul> - - <h2>Revision notes (5th June 2014):</h2> - <ul> - <li>added backlight support (Fn+Home and Fn+End) on X60</li> - <li>fixed broken/unstable 3D when using kernel 3.12 or higher</li> - <li>(see 'BACKPORT' file)</li> - </ul> - - <h2>Revision notes (9th March 2015):</h2> - <ul> - <li>recreated coreboot config from scratch</li> - <li>GRUB loads even faster now (less than 2 seconds).</li> - <li>Total boot time reduced by further ~5 seconds.</li> - <li>Added crypto and cryptodisk modules to GRUB</li> - <li>cbfstool now included in the binary archives</li> - </ul> - - <h2>Development notes</h2> - <ul> - <li> - Binary archive now have 2 images: - <ul> - <li>With serial output enabled and memtest86+ included (debug level 8 in coreboot)</li> - <li>With serial output disabled and memtest86+ excluded (faster boot speeds) (debugging disabled)</li> - </ul> - </li> - <li> - Reduced impact on battery life: - <ul> - <li>'processor.max_cstate=2' instead of 'idle=halt' for booting default kernel</li> - </ul> - </li> - <li> - coreboot.rom (faster boot speeds, debugging disabled): - <ul> - <li>Disabled coreboot serial output (Console-> in &quot;make menuconfig&quot;)</li> - <li>Set coreboot debug level to 0 instead of 8 (Console-> in &quot;make menuconfig&quot;)</li> - <li>Changed GRUB timeout to 1 second instead of 2 (in grub.cfg</li> - <li>Removed background image in GRUB.</li> - <li>Removed memtest86+ payload (since it relies on serial output) - </ul> - </li> - <li> - coreboot_serial.rom (slower boot speeds, debugging enabled): - <ul> - <li>Boot time still reduced, but only by ~2 seconds</li> - <li>has the memtest86+ payload included in the ROM</li> - <li>has serial port enabled. How this is achieved (from X60_source): Turn on debugging level to 8, and enable serial output</li> - </ul> - </li> - <li>(in Console-> in coreboot &quot;make menuconfig&quot;)</li> - <li>(and build with grub_serial.cfg and grub_memdisk_serial.cfg)</li> - </ul> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="release20140221">Release 20140221 (4th release)</h1> - - <ul> - <li>21st February 2014</li> - </ul> - - <h2>Officially supported</h2> - <ul> - <li>ThinkPad X60</li> - <li>ThinkPad X60s</li> - </ul> - - <h2>Development notes</h2> - <ul> - <li>Removed SeaBIOS (redundant)</li> - <li> - New GRUB version (2.02~beta2) - <ul> - <li>Fixes some USB issues</li> - <li>Includes ISOLINUX/SYSLINUX parser</li> - </ul> - </li> - <li>New grub.cfg</li> - <li> - Removed useless options: - <ul> - <li>options for booting sda 2/3/4</li> - <li>seabios boot option</li> - </ul> - </li> - <li> - Added new menu entries: - <ul> - <li>Parse ISOLINUX config (USB)</li> - <li>Parse ISOLINUX config (CD)</li> - <li>Added 'cat' module for use on GRUB command line.</li> - </ul> - </li> - <li>&quot;set pager=1&quot; is set in grub.cfg, for less-like functionality</li> - </ul> - <p> - The "Parse" options read ./isolinux/isolinux.cfg on a CD or USB, - and automatically converts it to a grub config and switches to the boot menu of that distro. - This makes booting ISOs *much* easier than before. - </p> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="release20131214">r20131214 (3rd release)</h1> - - <ul> - <li>14th December 2013</li> - </ul> - - <h2>Supported:</h2> - <ul> - <li>ThinkPad X60</li> - <li>ThinkPad X60s</li> - </ul> - - <h2>Development notes</h2> - <ul> - <li>Added SeaBIOS payload to GRUB2 (for booting USB drives)</li> - <li>new grub.cfg</li> - </ul> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="release20131213">r20131213 (2nd release)</h1> - - <ul> - <li>13th December 2013</li> - </ul> - - <h2>Supported:</h2> - <ul> - <li>ThinkPad X60</li> - <li>ThinkPad X60s</li> - </ul> - - <h2>Development notes</h2> - <ul> - <li>added background image to GRUB2</li> - <li>added memtest86+ payload to grub2</li> - <li>improvements to the documentation</li> - <li>new grub.cfg</li> - </ul> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="release20131212">r20131212 (1st release)</h1> - - <ul> - <li>12th December 2013</li> - </ul> - - <h2>Supported:</h2> - <ul> - <li>ThinkPad X60</li> - <li>ThinkPad X60s</li> - </ul> - - <h2>Development notes</h2> - <ul> - <li>initial release</li> - <li>source code deblobbed</li> - </ul> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <p> - Copyright &copy; 2014, 2015 Francis Rowe &lt;info@gluglug.org.uk&gt;<br/> - Permission is granted to copy, distribute and/or modify this document - under the terms of the GNU Free Documentation License, Version 1.3 - or any later version published by the Free Software Foundation; - with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. - A copy of the license can be found at <a href="gfdl-1.3.txt">gfdl-1.3.txt</a> - </p> - - <p> - Updated versions of the license (when available) can be found at - <a href="https://www.gnu.org/licenses/licenses.html">https://www.gnu.org/licenses/licenses.html</a> - </p> - - <p> - UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE - EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS - AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF - ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, - IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, - WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR - PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, - ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT - KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT - ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. - </p> - <p> - TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE - TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, - NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, - INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, - COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR - USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN - ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR - DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR - IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. - </p> - <p> - The disclaimer of warranties and limitation of liability provided - above shall be interpreted in a manner that, to the extent - possible, most closely approximates an absolute disclaimer and - waiver of all liability. - </p> - - </div> - -</body> -</html> diff --git a/docs/archive_old.texi b/docs/archive_old.texi @@ -0,0 +1,2058 @@ +\input texinfo +@documentencoding UTF-8 + +@macro textstrikeout{text} +~~\text\~~ +@end macro + +@ifnottex +@paragraphindent 0 +@end ifnottex +@titlepage +@title Libreboot release information (old) +@end titlepage + +@node Top +@top Libreboot release information (old) + +@menu +* Libreboot release information old:: +* Release 20150518:: +* Release 20150124 20150126 and 20150208:: +* Release 20141015:: +* 6th release pre-release 7th beta:: +* Release 20140622 5th release:: +* Release 20140221 4th release:: +* r20131214 3rd release:: +* r20131213 2nd release:: +* r20131212 1st release:: +@end menu + +@node Libreboot release information old +@chapter Libreboot release information (old) +@anchor{#libreboot-release-information-old} +Information for this release can be found at @uref{release.html,release.html}. Updated versions of libreboot can be found at @uref{http://libreboot.org/,libreboot.org}. + +@strong{This page is *obsolete*, provided for historical purposes.} +@menu +* Releases:: +@end menu + +@node Releases +@section Releases +@anchor{#releases} +@itemize +@item +@ref{#release20150518,r20150518 (18th May 2015)} +@item +@ref{#release20150124,r20150124 (24th January 2015), r20150126 (26th January 2015), r20150208 (8th February 2015)} +@item +@ref{#release20141015,r20141015 (15th October 2014)} +@item +@ref{#release20140911,r20140911 (6th release)} (11th September 2014 @strong{pre-release, 7th beta}) +@item +@ref{#release20140622,r20140622 (5th release)} (7th March 2014, revised 22nd June 2014) +@item +@ref{#release20140221,r20140221 (4th release)} (21st February 2014) +@item +@ref{#release20131214,r20131214 (3rd release)} (14th December 2013) +@item +@ref{#release20131213,r20131213 (2nd release)} (13th December 2013) +@item +@ref{#release20131212,r20131212 (1st release)} (12th December 2013) +@end itemize + +@node Release 20150518 +@chapter Release 20150518 +@anchor{#release-20150518} +Release date: 18th May 2015. + +Installation instructions can be found at @strong{@emph{docs/install/index.html}}. Building instructions (for source code) can be found at @strong{@emph{docs/git/index.html#build}}. +@menu +* Machines supported in this release:: +* Changes for this release relative to r20150208 earliest changes last recent changes first:: +@end menu + +@node Machines supported in this release +@section Machines supported in this release: +@anchor{#machines-supported-in-this-release} +@itemize +@item +@strong{ThinkPad X60/X60s} +@itemize +@item +You can also remove the motherboard from an X61/X61s and replace it with an X60/X60s motherboard. An X60 Tablet motherboard will also fit inside an X60/X60s. +@end itemize + +@item +@strong{ThinkPad X60 Tablet} (1024x768 and 1400x1050) with digitizer support +@itemize +@item +See @strong{@emph{docs/hcl/index.html#supported_x60t_list}} for list of supported LCD panels +@item +It is unknown whether an X61 Tablet can have it's mainboard replaced with an X60 Tablet motherboard. +@end itemize + +@item +@strong{ThinkPad T60} (Intel GPU) (there are issues; see below): +@itemize +@item +See notes below for exceptions, and @strong{@emph{docs/hcl/index.html#supported_t60_list}} for known working LCD panels. +@item +It is unknown whether a T61 can have it's mainboard replaced with a T60 motherboard. +@item +See @strong{@emph{docs/future/index.html#t60_cpu_microcode}}. +@item +T60P (and T60 laptops with ATI GPU) will likely never be supported: @strong{@emph{docs/hcl/index.html#t60_ati_intel}} +@end itemize + +@item +@strong{ThinkPad X200} +@itemize +@item +X200S and X200 Tablet are also supported, conditionally; see @strong{@emph{docs/hcl/x200.html#x200s}} +@item +@strong{ME/AMT}: libreboot removes this, permanently. @strong{@emph{docs/hcl/gm45_remove_me.html}} +@end itemize + +@item +@strong{ThinkPad R400} +@itemize +@item +See @strong{@emph{docs/hcl/r400.html}} +@item +@strong{ME/AMT}: libreboot removes this, permanently. @strong{@emph{docs/hcl/gm45_remove_me.html}} +@end itemize + +@item +@strong{ThinkPad T400} +@itemize +@item +See @strong{@emph{docs/hcl/t400.html}} +@item +@strong{ME/AMT}: libreboot removes this, permanently. @strong{@emph{docs/hcl/gm45_remove_me.html}} +@end itemize + +@item +@strong{ThinkPad T500} +@itemize +@item +See @strong{@emph{docs/hcl/t500.html}} +@item +@strong{ME/AMT}: libreboot removes this, permanently. @strong{@emph{docs/hcl/gm45_remove_me.html}} +@end itemize + +@item +@strong{Apple MacBook1,1} (MA255LL/A, MA254LL/A, MA472LL/A) +@itemize +@item +See @strong{@emph{docs/hcl/index.html#macbook11}}. +@end itemize + +@item +@strong{Apple MacBook2,1} (MA699LL/A, MA701LL/A, MB061LL/A, MA700LL/A, MB063LL/A, MB062LL/A) +@itemize +@item +See @strong{@emph{docs/hcl/index.html#macbook21}}. +@end itemize + +@end itemize + +@node Changes for this release relative to r20150208 earliest changes last recent changes first +@section Changes for this release, relative to r20150208 (earliest changes last, recent changes first) +@anchor{#changes-for-this-release-relative-to-r20150208-earliest-changes-last-recent-changes-first} +@itemize +@item +Add a whitelist entry to board_enable.c in flashrom, for the ThinkPad R400, T400 and T500 +@item +Updated flashrom (to SVN revision 1889) +@itemize +@item +X200 whitelist patch removed (merged upstream) +@item +X200 whitelist modified to include X200S and X200 Tablet +@end itemize + +@item +libreboot_util: don't include cmos layout files (not needed anymore) +@item +@strong{coreboot-libre: backport patches for X200 Tablet digitizer support} +@item +build/release/archives: create SHA512 sum manifest file of the release archives +@item +build/release/archives: separate crossgcc into a new archive +@item +disabled generation of txtmode ROM images for now (they will be back again in the next release) +@item +coreboot-libre: delete unused code (reduce size of src archive) +@item +Flashing guides: make them more friendly to colourblind people +@item +docs/gnulinux/encrypted_*.html: Remove mention of password length - it was arbitrary and pointless. +@item +docs/maintain/index.html: Finish the guide +@item +scripts/download/coreboot: use diffs included in libreboot, not external gerrit cherry-picks - review.coreboot.org (gerrit) being down no longer kills libreboot (backup mirrors of the master repository exist) +@item +docs/install/bbb_setup.html: Add info about wp/hold and pinouts +@item +docs/index.html: improve the description of libreboot +@item +docs/hcl/gm45_remove_me.html: notes about the demefactory utility +@item +docs/install/bbb_setup.html: EHCI debug: recommend linux-libre +@item +docs/install/bbb_setup.html: EHCI Debug logging setup guide +@item +docs/hcl/t500.html: Add screen compatibility report (TODO: fix incompatible screens) +@item +Update coreboot(again) + merge GM45 hybrid GPU patches - means that T400/T500 with the ATI+Intel hybrid GPU setup will work (ATI disabled, Intel permanently enabled). power_on_after_fail nvram option added to all GM45 boards, defaulting to No, so that plugging it AC doesn't boot up the system against the users will. Net20DC is now the default debug dongle on all boards (compatible with BBB). +@item +demefactory (new utility): create GM45 factory.rom without the ME +@item +ich9deblob: re-factor descriptor.c functions +@item +docs/hcl/t500.html: add hardware logs +@item +docs/gnulinux/encrypted_*.html: No password for default entry +@item +docs/git/index.html: Add more details about BUC.TS +@item +grub.cfg: Also scan for grub2/grub.cfg, not just grub/grub.cfg +@item +docs/maintain/ (new section. WIP!): Maintaining libreboot +@item +docs/gnulinux/grub_boot_installer.html: Fix hazardous instruction +@item +docs/tasks.html: Better categorization between intel/amd/arm +@item +docs/install/bbb_setup.html: notes about SPI flashing stability +@item +docs/install/bbb_setup.html: more names for the 0.1" cables +@item +docs/install/*_external.html: add disclaimer about thermal paste +@item +docs/install/bbb_setup.html: Fix broken links +@item +docs/install/bbb_setup.html: preliminary notes about EHCI debug +@item +docs/hcl/gm45_remove_me.html: Link to websites talking about the ME +@item +docs/install/@{t400,t500,r400@}_external.html: Notes about CPU compatibility +@item +Delete the ich9macchange script. It's useless, and confuses people +@item +docs/hcl/gm45_remove_me.html: prioritize ich9gen executable path +@item +docs/hcl/gm45_remove_me.html: prioritize changing mac address +@item +docs/hcl/gm45_remove_me.html: less confusing notes about ich9gen +@item +build/dependencies/parabola: Add dependencies for x86_64 +@item +Move parabola/trisquel dependency scripts to scripts/helpers/build +@item +scripts/dependencies/paraboladependencies: build dependencies (32-bit Parabola) +@item +@strong{New board}: ThinkPad T500 +@item +Add diffs for descriptor/gbe differences between T500 and X200 +@item +coreboot-libre: provide better blob categorization +@item +docs/hcl/gm45_remove_me.html: add notes about flash write protect +@item +@strong{New board}: ThinkPad T400 +@item +GRUB: add partial vesamenu.c32 support (fixes tails ISOLINUX menu) +@item +Update GRUB (to revision fa07d919d1ff868b18d8a42276d094b63a58e299) +@item +Update coreboot (to revision 83b05eb0a85d7b7ac0837cece67afabbdb46ea65) +@itemize +@item +Intel CPU microcode (most of it) no longer deleted, because it was deleted upstream (moved to a 3rd party repository). +@item +MacBook2,1 cstate patch is no longer cherry picked (merged upstream) +@item +Patch to disable use of timestamps in coreboot no longer included (merged upstream) +@end itemize + +@item +coreboot-libre: don't list vortex86ex kbd firmware as microcode (list it separately) +@item +coreboot-libre: don't rm */early_setup_ss.h (these are not blobs) +@item +coreboot-libre: add GPLv3 license to the findblobs script +@item +coreboot-libreboot: don't rm raminit_tables (nahelem/sandybridge) (they are not blobs) +@item +coreboot-libre: don't delete the .spd.hex files (they are not blobs) +@item +build/release/archives: don't put rmodtool in libreboot_util +@item +docs/install/x200_external.html: recommend installing GNU/Linux at the end +@item +docs/install/x200_external.html: add more photos, improve instructions +@item +build/clean/grub: use distclean instead of clean +@item +grub-assemble: Add the @emph{bsd} and @emph{part_bsd} modules +@item +build/roms/withgrub: Only run ich9gen if gm45/gs45 images exist +@item +docs/git/index.html: Add notes about building for specific boards +@item +build/roms/withgrub: Allow building for a custom range of boards +@item +grub-assemble: Disable verbose output +@item +Add documentation on how to unlock root encrypted fs with key in initramfs in Parabola Linux +@item +docs/gnulinux/grub_cbfs.html: Improve structure (easier to use) +@item +grub.cfg: Disable the beep on startup +@item +docs/install/bbb_setup.html: Make the guide easier to use +@item +docs/gnulinux/grub_cbfs.html: Remove redundant instructions +@item +docs/install/x200_external.html: Mark pins in the images +@item +docs/install/bbb_setup.html: Replace 3.3V PSU photo with ATX PSU +@item +docs/hcl/x200.html: Add dumps from 4-MiB X200 with Lenovo BIOS 3.22 +@item +docs/hcl/x200.html: Add dumps from 4-MiB X200 with Lenovo BIOS 3.18 +@item +grub.cfg: add syslinux_configfile menuentry for ahci0 +@item +grub.cfg: Add more paths for syslinux_configfile +@item +docs/future.html: T60: Add EDID dump from LG-Philips LP150E05-A2K1 +@item +docs/install/bbb_setup.html: Further clarify which clip is needed +@item +bash scripts: Make script output more user-friendly in general +@item +bash scripts: Only enable verbose output if DEBUG= is used +@item +build: Support multiple extra options - now possible to build multiple images for arbitrary boards (configs), but without building the entire collection. +@item +Deleted the signing archive key - the finger print and ID is given instead, so that the user can download it from a key server +@item +scripts/helpers/build/release: Move docs to separate archive - reduces the size of the other archives considerably +@item +Move DEBLOB to resources/utilities/coreboot-libre/deblob +@item +scripts/helpers/build/release: Delete DEBLOB from libreboot_src/ - not needed in libreboot_src (release archive) because it contains a coreboot revision that has already been deblobbed. +@item +flash (script): Use @emph{build} instead of @emph{DEBLOB} to know if in src +@item +docs/install/r400_external.html: Show images, don't link. +@item +docs/install/x200_external.html: Show images, don't link. +@item +docs/install/bbb_setup.html: Show images, instead of linking +@item +Documentation: optimize all images (reduce file sizes) +@item +Remove download links from the release page (and the archive page) - release archives are hosted differently following this release, which means that the old methods are no longer viable. +@item +Moved ich9macchange to resources/scripts/misc/ich9macchange +@item +ich9macchange: assume that the script is being run from _util (act only on one ROM image, defined by a user-provided path) +@item +Move grub-background to resources/scripts/misc/grub-background +@item +grub-background: assume that it is being run from libreboot_util +@item +grub-background: change only one ROM image, specified by path +@item +build (release archives): Add the commitid file to release/ +@item +build-release: Move the release archives to release/ +@item +Merge all build scripts into a single generic script, with helpers in resources/scripts/helpers/build/ +@item +Replace @emph{getall} with @emph{download}, which takes as input an argument specifying which program the user wants to download. +@item +Moved the get scripts to resources/scripts/helpers/download/ +@item +build-release: Remove the powertop entries +@item +Moved powertop.trisquel7 to resources/scripts/misc/ +@item +Deleted the powertop.trisquel6 script (Trisquel 6 is obsolete) +@item +Documentation: general improvements to the flashing instructions +@item +Merged all flashing scripts into a single script +@item +Updated GRUB +@item +bucts: Make it build without git +@item +Moved dejavu-fonts-ttf-2.34/AUTHORS to resources/grub/font/ +@item +Deleted GRUB Invaders from libreboot +@item +Deleted SeaBIOS from libreboot +@item +build-release: optimize use of tar (reduced file sizes) +@item +grub.cfg: add another SYSLINUX config location (/syslinux/syslinux.cfg) +@item +build-release: remove the bin/ directory from libreboot_util +@item +cleandeps: delete the bin/ directory +@item +buildrom-withgrub: create the bin directory if it does not exist +@item +coreboot-libre: don't use git for version timestamp +@item +i945-pwm: add clean command to Makefile +@item +i945-pwm: add -lz to Makefile +@item +docs/install/x200_external: Mention GPIO33 non-descriptor mode +@item +docs/hcl/index.html: Remove redundant links +@item +ich9macchange: Add R400 +@item +build-release: Separate ROM images into individual archives +@item +build-release: rename libreboot_bin to libreboot_util +@item +@strong{New board:} ThinkPad R400 support added to libreboot. +@item +bbb_setup.html: tell user to use libreboot's own flashrom +@end itemize + +@node Release 20150124 20150126 and 20150208 +@chapter Release 20150124, 20150126 and 20150208 +@anchor{#release-20150124-20150126-and-20150208} +Release date: 24th January 2015. +@menu +* Machines supported in this release:: +* Revisions for r20150208 relative to r20150126:: +* Revisions for r20150126 relative to r20150124:: +* Changes for this release latest changes first earliest changes last:: +@end menu + +@node Machines supported in this release +@section Machines supported in this release: +@anchor{#machines-supported-in-this-release-1} +@itemize +@item +@strong{Lenovo ThinkPad X60/X60s} +@itemize +@item +You can also remove the motherboard from an X61/X61s and replace it with an X60/X60s motherboard. An X60 Tablet motherboard will also fit inside an X60/X60s. +@end itemize + +@item +@strong{Lenovo ThinkPad X60 Tablet} (1024x768 and 1400x1050) with digitizer support +@itemize +@item +See @strong{hcl/index.html#supported_x60t_list} for list of supported LCD panels +@item +It is unknown whether an X61 Tablet can have it's mainboard replaced with an X60 Tablet motherboard. +@end itemize + +@item +@strong{Lenovo ThinkPad T60} (Intel GPU) (there are issuesinstall/x200_external.html; see below): +@itemize +@item +See notes below for exceptions, and @strong{hcl/index.html#supported_t60_list} for known working LCD panels. +@item +It is unknown whether a T61 can have it's mainboard replaced with a T60 motherboard. +@item +See @strong{future/index.html#t60_cpu_microcode}. +@item +T60P (and T60 laptops with ATI GPU) will likely never be supported: @strong{hcl/index.html#t60_ati_intel} +@end itemize + +@item +@strong{Lenovo ThinkPad X200} +@itemize +@item +X200S and X200 Tablet are also supported, conditionally; see @strong{hcl/x200.html#x200s} +@item +@strong{ME/AMT}: libreboot removes this, permanently. @strong{hcl/gm45_remove_me.html} +@end itemize + +@item +@strong{Lenovo ThinkPad R400} (r20150208 and later, only) +@itemize +@item +@strong{ME/AMT}: libreboot removes this, permanently. @strong{hcl/gm45_remove_me.html} +@end itemize + +@item +@strong{Apple MacBook1,1} (MA255LL/A, MA254LL/A, MA472LL/A) +@itemize +@item +See @strong{hcl/index.html#macbook11}. +@end itemize + +@item +@strong{Apple MacBook2,1} (MA699LL/A, MA701LL/A, MB061LL/A, MA700LL/A, MB063LL/A, MB062LL/A) +@itemize +@item +See @strong{hcl/index.html#macbook21}. +@end itemize + +@end itemize + +@node Revisions for r20150208 relative to r20150126 +@section Revisions for r20150208 (relative to r20150126) +@anchor{#revisions-for-r20150208-relative-to-r20150126} +This is a maintenance release (polishing) based on r20150126. Users who installed r20150126 don't really need to update to this release. + +@itemize +@item +buildrom-withgrub: use gnulove.jpg background on 16:10 laptops (MacBook2,1 and X200) +@item +build-release: include grub-background script in libreboot_bin +@item +grub-background (new): lets user change GRUB background image +@item +grub-assemble: Add link to original utility. +@item +buildrom-withgrub: Put background.jpg in CBFS, not GRUB memdisk +@item +grub-assemble: merge scripts into a single script gen.sh +@item +Documentation: implement theme, drastically improve readability +@item +docs/hcl/index.html: update list of compatible T60 LCD panels +@item +docs/index.html: more clarification of libreboot's stated purpose. +@item +build-release: include the commitid file in the release archives +@item +docs/index.html: Further emphasize the GNU/Linux requirement. +@item +lenovobios_firstflash: fix BASH errors +@item +lenovobios_secondflash: fix BASH errors +@item +docs/install/x200_external.html: Tell user to switch MAC address. +@item +docs/git/index.html: Add to the list of x86_64 compatible hosts. +@item +docs/install/index.html: Remove old (obsolete) information. +@item +docs/git/index.html: Say that the build dependencies are for src (and not nedeed for libreboot_bin) +@item +build: re-factor the descriptor/gbe generating loop for GM45/ICH9M +@item +X60, X60S and X60 Tablet now the same ROM images. +@item +Add QEMU (q35/ich9) support to libreboot. +@item +Add QEMU (i440fx/piix4) support to libreboot +@item +docs/index.html: Re-write the description of what libreboot is. +@item +docs/release.html: Add notes about how to use GPG. +@item +build-release: delete the commitid file from release archives +@item +build-release: create file named commitid after build-release +@end itemize + +@node Revisions for r20150126 relative to r20150124 +@section Revisions for r20150126 (relative to r20150124) +@anchor{#revisions-for-r20150126-relative-to-r20150124} +This is a bug fix release based on r20150124. It contains a few small changes: + +@itemize +@item +grub.cfg: hardcode the list of partitions to search (speeds up booting considerably. GRUB regexp isn't very well optimized) +@item +Docs (x200.html hcl): Remove incorrect information +@item +Documentation (bbb_setup.html): Fix typos +@item +build-release: delete ich9fdgbe_@{4m,8m@}.bin files from ich9gen +@itemize +@item +These were accidentically included in the r20150124 release. They are generated from ich9gen so it's ok, but they don't need to be in the archive. +@end itemize + +@item +Documentation (grub_cbfs.html): Looping in libreboot_grub.cfg (Add notes about it if the user copied from grub.cfg in CBFS.) +@item +Documentation: refer to Guix as GNU Guix System Distribution or GNU GSD per advice from the Guix project. +@end itemize + +@node Changes for this release latest changes first earliest changes last +@section Changes for this release (latest changes first, earliest changes last) +@anchor{#changes-for-this-release-latest-changes-first-earliest-changes-last} +@itemize +@item +Documentation: added information about how to boot Guix GNU/Linux. +@item +grub.cfg: Added (usb0) and (usb0,*) to the list of devices in the @emph{Search for GRUB} menuentry (this is needed for Guix GNU/Linux) +@item +grub.cfg: Added (ahci1) to list of devices for ISOLINUX parser (CD/DVD) (this is needed for the X200 docking station). +@item +grub.cfg: ISOLINUX parsing is now done on all USB partitions. +@item +grub.cfg: Automatically switched to /boot/grub/libreboot_grub.cfg on a partition, if it exists. +@item +libreboot_bin: added static ARM binaries for flashrom, cbfstool, ich9gen and ich9deblob (tested on beaglebone black). +@item +Flashrom: removed redundant Macronix flashchip definitions (for X200 owners). +@item +Flashrom: added whitelist for ThinkPad X200. +@item +X200: fixed uneven backlight (at low levels) +@item +ich9macchange (new script, uses ich9gen): for changing the default MAC address on X200 ROM images. +@item +ich9gen: added capability to change the default MAC address (and update the checksum) +@item +ich9deblob: added new utility ich9gen: this can generate a descriptor+gbe image without a factory.rom dump present. +@item +Modified ich9deblob to use a struct for Gbe, documenting everything. +@item +Massively updated the ich9deblob utility: re-factored everything completely. +@item +Enabled cstates 1 and 2 on macbook21. This reduces idle heat / power consumption. +@item +buildrom-withgrub: disabled creation of *txtmode*.rom for X200 (only framebuffer graphics work) +@item +Updated SeaBIOS (again) +@item +docs/install/index.html#flashrom_x200: improve instructions +@item +Updated flashrom (again) - patches updated +@item +Updated GRUB (again) +@item +Updated coreboot (again) +@item +build-release: not all files were copied to libreboot_src. fix that. +@item +build-release: include cbmem (statically compiled) in libreboot_bin +@item +Documentation (X200): added software-based flashing instructions +@item +Documentation: remove all references to the bus pirate (replaced with BBB flashing tutorials) +@item +@strong{New board:} ThinkPad X200S and X200 Tablet support added to libreboot +@item +build: automatically find board names (configs) to build for +@item +@strong{New board:} ThinkPad X200 support added to libreboot +@item +coreboot-libre config (all boards): enable USB dongle log output (for BeagleBone Black) +@item +cleandeps: actually clean grubinvaders +@item +.gitignore: add powertop directory +@item +cleandeps: clean i945-pwm utility +@item +scripts (all): fix typos +@item +Documentation: general cleanup. +@item +builddeps-flashrom: reduce build commands to a single for loop +@item +scripts (all): replace unnecessary rm -Rf with rm -f +@item +powertop.trisquel7: remove sudo (script already checks if the user is root) +@item +docs/release.html: add lenovo g505s to the list of candidates +@item +.gitignore: add libreboot_bin.tar.xz and libreboot_src.tar.xz +@item +libreboot_bin.tar.xz: Include utils as statically linked binaries +@itemize +@item +This means that the user does not have to install build dependency or build from source anymore. +@end itemize + +@item +deps-trisquel: Add binutils-source +@item +powertop.trisquel7 (new): Setup powertop on trisquel 7 +@item +deps-trisquel,flash,lenovobios_firstflash,lenovobios_secondflash,macbook21_firstflash x60flashfrom5,powertop.trisquel6: check if user is root +@item +deps-trisquel: Make GRUB build on in Trisquel 7 x86_64. (cross compile dependencies. fixes build error in GRUB) +@item +deps-parabola (removed) Remove Parabola dependencies script. Will re-add later (properly tested) +@item +grub.cfg: Add more path checks to isolinux parser (more ISOs should work now) +@item +Update SeaBIOS +@item +x60flashfrom5 (new), for X60 users upgrading from 5th/early release +@item +Update flashrom +@item +Update GRUB +@item +Updated coreboot-libre +@itemize +@item +i945: permanently set tft_brightness to 0xff (fixes bug on X60 where turning up brightness at max would make it loop back to low brightness) +@end itemize + +@item +getcb: Revert X60/T60 to legacy backlight controls +@itemize +@item +The ACPI brightness patches were abandoned and obsolete. +@end itemize + +@item +grub.cfg: Only load initrd.img if it exists. Add rw to linux line (for ProteanOS) +@item +build: Only generate the GRUB configurations once (re-use on all images) +@item +Only build 2 GRUB payload executables, re-use on all boards. +@item +resources/utilities/grub-assemble/gen.txtmode.sh: Use GNU BASH@* resources/utilities/grub-assemble/gen.vesafb.sh: Use GNU BASH +@item +scripts (error handling): Replace exit with exit 1 (make debugging easier) +@item +Move most files in CBFS to GRUB memdisk, except grub.cfg and grubtest.cfg +@itemize +@end itemize + +@item +docs/release.html Add DMP vortex86ex to list of candidates. +@item +docs/release.html Add ThinkPad X201 to list of candidates. +@item +New links added to docs/security/x60_security and docs/security/t60_security +@item +lenovobios_secondflash: Warn if BUCTS is not present. (not a dealbreaker. Can just pull out nvram battery/coin). +@item +lenovobios_firstflash: Fail if BUCTS fails. (anti-bricking precaution) +@item +Removed obnoxious warnings from flashing scripts, improved documentation instead. +@item +scripts (all): add proper error checking (fail fast, fail early. Do not continue if there are errors) +@item +buildrom-withgrub: rename image to boardname_layout_romtype.rom +@item +buildrom-withgrub: don't move cbfstool, execute directly +@item +resources/utilities/grub-assemble: add French Dvorak (BEPO) keyboard layout. +@item +Documentation: add docs/hardware/x60_keyboard.html (show how to replace keyboard on X60/X60T) +@item +Documentation: major cleanup (better structure, easier to find things) +@item +docs/release.html: Remove Acer CB5 from list of future candidates. +@itemize +@item +Too many issues. Chromebooks are crippled (soldered RAM/storage/wifi) and have too many usability issues for the libreboot project. +@end itemize + +@item +docs/gnulinux/grub_cbfs.html Major cleanup. Usability improvements. +@item +hocs/gnulinux/encrypted_trisquel.html: Fixed mistakes/typos. General improvements +@item +flash (flashrom script): remove boardmismatch=force +@itemize +@item +This was put there before for users upgrading from libreboot r5 to r6, but also allows the user to flash the wrong image. For example, the user could flash a T60 image on an X60, thus bricking the system. It's almost certain that most people have upgraded by now, so remove this potentially dangerous option. +@end itemize + +@item +Documentation: update compatibility list for X60T LCD panels. +@item +docs/release.html: add note about X60 Tablet board in X60/X60s +@item +docs/howtos/grub_boot_installer.html: small corrections +@item +docs/howtos/grub_boot_installer.html: improved readability, fixed html errors +@item +Documentation (macbook21 related): clean up +@end itemize + +@node Release 20141015 +@chapter Release 20141015 +@anchor{#release-20141015} +@menu +* Machines supported in this release:: +* Changes for this release latest changes first earliest changes last:: +@end menu + +@node Machines supported in this release +@section Machines supported in this release: +@anchor{#machines-supported-in-this-release-2} +@itemize +@item +@strong{Lenovo ThinkPad X60/X60s} +@itemize +@item +You can also remove the motherboard from an X61/X61s and replace it with an X60/X60s motherboard. An X60 Tablet motherboard will also fit inside an X60/X60s. +@end itemize + +@item +@strong{Lenovo ThinkPad X60 Tablet} (1024x768 and 1400x1050) with digitizer support +@itemize +@item +See @strong{hcl/index.html#supported_x60t_list} for list of supported LCD panels +@item +It is unknown whether an X61 Tablet can have its mainboard replaced with an X60 Tablet motherboard. +@end itemize + +@item +@strong{Lenovo ThinkPad T60} (Intel GPU) (there are issues; see below): +@itemize +@item +See notes below for exceptions, and @strong{hcl/index.html#supported_t60_list} for known working LCD panels. +@item +It is unknown whether a T61 can have its mainboard replaced with a T60 motherboard. +@item +See @strong{future/index.html#t60_cpu_microcode}. +@item +T60P (and T60s with ATI GPU) will likely never be supported: @strong{hcl/index.html#t60_ati_intel} +@end itemize + +@item +@strong{Apple MacBook1,1} (MA255LL/A, MA254LL/A, MA472LL/A) +@itemize +@item +See @strong{hcl/index.html#macbook11}. +@end itemize + +@item +@strong{Apple MacBook2,1} (MA699LL/A, MA701LL/A, MB061LL/A, MA700LL/A, MB063LL/A, MB062LL/A) +@itemize +@item +See @strong{hcl/index.html#macbook21}. +@end itemize + +@end itemize + +@node Changes for this release latest changes first earliest changes last +@section Changes for this release (latest changes first, earliest changes last) +@anchor{#changes-for-this-release-latest-changes-first-earliest-changes-last-1} +@itemize +@item +Updated coreboot (git commit 8ffc085e1affaabbe3dca8ac6a89346b71dfc02e), the latest at the time of writing. +@item +Updated SeaBIOS (git commit 67d1fbef0f630e1e823f137d1bae7fa5790bcf4e), the latest at the time of writing. +@item +Updated Flashrom (svn revision 1850), the latest at the time of writing. +@item +Updated GRUB (git commit 9a67e1ac8e92cd0b7521c75a734fcaf2e58523ad), the latest at the time of writing. +@item +Cleaned up the documentation, removed unneeded files. +@item +ec/lenovo/h8 (x60/x60s/x60t/t60): Enable wifi/bluetooth/wwan/touchpad/trackpoint by default. +@item +Documentation: Updated list of T60 LCDs (Samsung LTN150XG 15" XGA listed as non-working). +@item +builddeps-coreboot: Don't build libpayload (not needed. This was leftover by mistake, when trying out the TINT payload). +@item +Replaced most diff files (patches) for coreboot with gerrit checkouts (cherry-pick). +@item +Documentation: x60_security.html and t60_security.html: added links to info about the ethernet controller (Intel 82573). +@item +Documentation: x60_security.html and t60_security.html: added notes about DMA and the docking station. +@item +Documentation: configuring_parabola.html: basic post-install steps for Parabola GNU/Linux (helpful, since libreboot development is being moved to Parabola at the time of writing). +@item +builddeps-coreboot: use 'make crossgcc-i386' instead of 'make crossgcc'. Libreboot only targets x86 at the time of writing. +@item +ROM images no longer include SeaBIOS. Instead, the user adds it afterwards. Documentation and scripts updated. +@item +docs/images/encrypted_parabola.html: Notes about linux-libre-grsec +@item +Documentation: encrypted_parabola.html: add tutorial for encrypted Parabola GNU/Linux installation. +@item +Documentation: added more info about wifi chipsets +@end itemize + +@ref{#pagetop,Back to top of page.} + +@node 6th release pre-release 7th beta +@chapter 6th release (pre-release, 7th beta) +@anchor{#th-release-pre-release-7th-beta} +@itemize +@item +Released 11th July 2014 (pre-release) 1st beta +@item +Revised (pre-release, 2nd beta) 16th July 2014 +@item +Revised (pre-release, 3rd beta) 20th July 2014 +@item +Revised (pre-release, 4th beta) 29th July 2014 +@item +Revised (pre-release, 5th beta) 11th August 2014 (corrected 11th August 2014) +@item +Revised (pre-release, 6th beta) 3rd September 2014 +@item +Revised (pre-release, 7th beta) 11th September 2014 +@end itemize + +@menu +* Machines still supported compared to previous release:: +* New systems supported in this release:: +* Machines no longer supported compared to previous release:: +* Revisions for r20140911 7th beta 11th September 2014:: +* Revisions for r20140903 6th beta 3rd September 2014:: +* Corrections to r20140811 5th beta 11th August 2014:: +* Revisions for r20140811 5th beta 11th August 2014:: +* Revisions for r20140729 4th beta 29th July 2014:: +* Revisions for r20140720 3rd beta 20th July 2014:: +* Revisions for r20140716 2nd beta 16th July 2014:: +* Revisions for r20140711 1st beta 11th July 2014:: +@end menu + +@node Machines still supported compared to previous release +@section Machines still supported (compared to previous release): +@anchor{#machines-still-supported-compared-to-previous-release} +@itemize +@item +@strong{Lenovo ThinkPad X60/X60s} +@itemize +@item +You can also remove the motherboard from an X61/X61s and replace it with an X60/X60s motherboard. +@end itemize + +@end itemize + +@node New systems supported in this release +@section New systems supported in this release: +@anchor{#new-systems-supported-in-this-release} +@itemize +@item +@strong{Lenovo ThinkPad X60 Tablet} (1024x768 and 1400x1050) with digitizer support +@itemize +@item +See @strong{hcl/index.html#supported_x60t_list} for list of supported LCD panels +@item +It is unknown whether an X61 Tablet can have its mainboard replaced with an X60 Tablet motherboard. +@end itemize + +@item +@strong{Lenovo ThinkPad T60} (Intel GPU) (there are issues; see below) +@itemize +@item +See notes below for exceptions, and @strong{hcl/index.html#supported_t60_list} for known working LCD panels. +@item +It is unknown whether a T61 can have its mainboard replaced with a T60 motherboard. +@item +T60P (and T60s with ATI GPU) will likely never be supported: @strong{hcl/index.html#t60_ati_intel} +@end itemize + +@item +@strong{Apple MacBook1,1} (MA255LL/A, MA254LL/A, MA472LL/A) +@itemize +@item +See @strong{hcl/index.html#macbook11}. +@end itemize + +@item +@strong{Apple MacBook2,1} (MA699LL/A, MA701LL/A, MB061LL/A, MA700LL/A, MB063LL/A, MB062LL/A) +@itemize +@item +See @strong{hcl/index.html#macbook21}. +@end itemize + +@end itemize + +@node Machines no longer supported compared to previous release +@section Machines no longer supported (compared to previous release): +@anchor{#machines-no-longer-supported-compared-to-previous-release} +@itemize +@item +@strong{All previous systems still supported!} +@end itemize + +@node Revisions for r20140911 7th beta 11th September 2014 +@section Revisions for r20140911 (7th beta) (11th September 2014) +@anchor{#revisions-for-r20140911-7th-beta-11th-september-2014} +@itemize +@item +The changes below were made in a git repository, unlike in previous releases. Descriptions below are copied from 'git log'. +@item +Update .gitignore for new dependencies. +@item +Use a submodule for i945-pwm. +@item +Don't clean packages that fail or don't need cleaning. +@item +Don't clean i945-pwm, it's not needed. +@item +Regression fix: Parabola live ISO boot issues +@item +Re-enable background images in ISOLINUX/SYSLINUX GRUB parser menus +@item +Regression fix: Re-add CD-ROM (ata0) in GRUB +@item +Documentation: add notes about performance penalty when using ecryptfs. +@item +Documentation: Fixed spelling and grammatical errors. +@item +Documentation: macbook21: add new system as tested +@item +Documentation: macbook21: add info about improving touchpad sensitivity +@item +Documentation: X60 Tablet: add more information about finger input +@item +Documentation: release.html: Add information about recently merged commit in coreboot +@end itemize + +@node Revisions for r20140903 6th beta 3rd September 2014 +@section Revisions for r20140903 (6th beta) (3rd September 2014) +@anchor{#revisions-for-r20140903-6th-beta-3rd-september-2014} +@itemize +@item +Added modified builddeb* scripts for Parabola GNU/Linux-libre: buildpac, buildpac-flashrom, buildpac-bucts (courtesy of Noah Vesely) +@item +Documentation: updated all relevant areas to mention use of buildpac* scripts for Parabola users. +@item +Documentation: added information showing how to enable or disable bluetooth on the X60 +@item +MacBook1,1 tested! See @strong{hcl/index.html#macbook11} +@item +Documentation: fixed typo in index.html#get_edid_panelname (get-edit changed to get-edid) +@item +Documentation: added images/x60_lcd_change/ (pics only for now) +@item +Added gcry_serpent and gcry_whirlpool to the GRUB module list in the 'build' script (for luks users) +@item +@strong{Libreboot is now based on a new coreboot version from August 23rd, 2014:@* Merged commits (relates to boards that were already supported in libreboot):} +@itemize +@item +@uref{http://review.coreboot.org/#/c/6697/,http://review.coreboot.org/#/c/6697/} +@item +@uref{http://review.coreboot.org/#/c/6698/,http://review.coreboot.org/#/c/6698/} (merged already) +@item +@uref{http://review.coreboot.org/#/c/6699/,http://review.coreboot.org/#/c/6699/} (merged already) +@item +@uref{http://review.coreboot.org/#/c/6696/,http://review.coreboot.org/#/c/6696/} (merged already) +@item +@uref{http://review.coreboot.org/#/c/6695/,http://review.coreboot.org/#/c/6695/} (merged already) +@item +@strong{@uref{http://review.coreboot.org/#/c/5927/,http://review.coreboot.org/#/c/5927/} (merged already)} +@item +@uref{http://review.coreboot.org/#/c/6717/,http://review.coreboot.org/#/c/6717/} (merged already) +@item +@uref{http://review.coreboot.org/#/c/6718/,http://review.coreboot.org/#/c/6718/} (merged already) +@item +@uref{http://review.coreboot.org/#/c/6723/,http://review.coreboot.org/#/c/6723/} (merged already) (text-mode patch, might enable memtest. macbook21) +@item +@uref{http://review.coreboot.org/#/c/6732/,http://review.coreboot.org/#/c/6732/} (MERGED) (remove useless ps/2 keyboard delay from macbook21. already merged) +@end itemize + +@item +These were also merged in coreboot (relates to boards that libreboot already supported): +@itemize +@item +@uref{http://review.coreboot.org/#/c/5320/,http://review.coreboot.org/#/c/5320/} (merged) +@item +@uref{http://review.coreboot.org/#/c/5321/,http://review.coreboot.org/#/c/5321/} (merged) +@item +@uref{http://review.coreboot.org/#/c/5323/,http://review.coreboot.org/#/c/5323/} (merged) +@item +@uref{http://review.coreboot.org/#/c/6693/,http://review.coreboot.org/#/c/6693/} (merged) +@item +@uref{http://review.coreboot.org/#/c/6694/,http://review.coreboot.org/#/c/6694/} (merged) +@item +@uref{http://review.coreboot.org/#/c/5324/,http://review.coreboot.org/#/c/5324/} (merged) +@end itemize + +@item +Documentation: removed the section about tft_brightness on X60 (new code makes it obsolete) +@item +Removed all patches from resources/libreboot/patch/ and added new patch: 0000_t60_textmode.git.diff +@item +Updated getcb script and DEBLOB script. +@item +Updated configuration files under resources/libreboot/config/ to accomodate new coreboot version. +@item +Removed grub_serial*.cfg and libreboot_serial*.rom, all configs/rom files are now unified (containing same configuration as serial rom files from before). +@itemize +@item +Documentation: updated index.html#rom to reflect the above. +@end itemize + +@item +Updated GRUB to new version from August 14th, 2014. +@item +Unified all grub configurations for all systems to a single grub.cfg under resources/grub/config/ +@item +Updated flashrom to new version from August 20th, 2014 +@item +Added getseabios and builddeps-seabios (builddeps and getall were also updated) +@itemize +@item +Added instructions to 'buildrom-withgrub' to include bios.bin.elf and vgaroms/vgabios.bin from SeaBIOS inside the ROM. +@end itemize + +@item +Added seabios (and sgavgabios) to grub as payload option in menu +@item +Disabled serial output in Memtest86+ (no longer needed) to speed up tests. +@itemize +@item +MemTest86+ now works properly, it can output on the laptop screen (no serial port needed anymore). +@end itemize + +@item +Added getgrubinvaders, builddeps-grubinvaders scripts. Added these to getall and builddeps. +@itemize +@item +Added @uref{http://www.coreboot.org/GRUB_invaders,GRUB Invaders} menu entry in resources/grub/config/grub.cfg +@end itemize + +@item +Added rules to builddeps-coreboot to build libpayload with TinyCurses. (added appropriate instructions to cleandeps script). +@item +Commented out lines in resources/grub/config/grub.cfg for loading font/background (not useful anymore, now that GRUB is in text-mode). +@item +Commented out lines in buildrom-withgrub that included backgrounds/fonts (not useful anymore, now that GRUB is in text-mode). +@item +Added resources/utilities/i945-pwm/ (from git://git.mtjm.eu/i945-pwm), for debugging acpi brightness on i945 systems. +@itemize +@item +Added instructions for it in builddeps, builddeps-i945pwm, builddeb and cleandeps +@end itemize + +@item +'build' script: removed the parts that generated sha512sum manifests (not needed, since release tarballs are GPG-signed) +@item +'build' script: removed the parts that generated libreboot_meta directory (not needed anymore, since _meta will be hosted in git) +@itemize +@item +Updated index.html#build_meta (and other parts of documentation) to accomodate this change. +@end itemize + +@item +Documentation: simplified (refactored) the notes in index.html#rom +@item +'build' script: removed the parts that generated libreboot_bin and added them to a new script: 'build-release' +@itemize +@item +Documentation: index.html#build updated to reflect the above. +@end itemize + +@item +Removed 'sudo' from builddeb, builddeb-flashrom, powertop.trisquel6 and builddeb-bucts scripts (assuming that the user has it is a really bad idea). +@item +@textstrikeout{Added all gcry_* modules to grub (luks/cryptomount): gcry_arcfour gcry_camellia gcry_crc gcry_dsa gcry_md4 gcry_rfc2268 gcry_rmd160 gcry_seed gcry_sha1 gcry_sha512 gcry_twofish gcry_blowfish gcry_cast5 gcry_des gcry_idea gcry_md5 gcry_rijndael gcry_rsa gcry_serpent gcry_sha256 gcry_tiger gcry_whirlpool} +@item +Added GNUtoo's list of GRUB modules (includes all of the gcry_* modules above), cryptomount should be working now. +@item +Removed builddeb-bucts and builddeb-flashrom, merged them with builddeb (index.html updated accordingly) +@item +Removed buildpac-bucts and buildpac-flashrom, merged them with buildpac (index.html updated accordingly) +@item +Renamed builddeb to deps-trisquel (index.html updated accordingly) +@item +Renamed buildpac to deps-parabola (index.html updated accordingly) +@item +Documentation: removed all parts talking about build dependencies, replaced them with links to index.html#build_dependencies +@item +Documentation: emphasized more strongly on the documentation, the need to re-build bucts and/or flashrom before flashing a ROM image. +@item +build-release: flashrom, nvramtool, cbfstool and bucts are no longer provided pre-compiled in binary archives, and are now in source form only. (to maximize distro compatibility). +@item +Documentation: added gnulinux/encrypted_trisquel.html showing how to setup a fully encrypted Trisquel installation (including /boot) and boot it from the GRUB payload. +@item +'build' script: replaced grub.elf assembly instructons, it is now handled by a utility added under resources/utilities/grub-assemble +@item +Moved resources/grub/keymap to resources/utilities/grub-assemble/keymap, and updated that utility to use it +@item +Documentation: removed useless links to pictures of keyboard layouts and unmodified layouts. +@item +Removed all unused fonts from dejavu-fonts-ttf-2.34/ directory +@item +'buildrom-withgrub' script: updated it to create 2 sets of ROMs for each system: one with text-mode, one with coreboot framebuffer. +@item +Documentation: updated index.html#rom to reflect the above +@item +Deleted unused README and COPYING file from main directory +@item +Removed some rm -Rf .git* instructions from the get* scripts and moved them to build-release script +@item +Split up default grub.cfg into 6 parts: extra/@{common.cfg,txtmode.cfg,vesafb.cfg@} and menuentries/@{common.cfg,txtmode.cfg,vesafb.cfg@} +@itemize +@item +buildrom-withgrub script uses these to generate the correct grub.cfg for each type of configuration. +@end itemize + +@item +grub_memdisk.cfg (used inside grub.elf) now only loads grub.cfg from cbfs. It no longer enables serial output or sets prefix. (menuentries/common.cfg does instead) +@item +resources/grub/config/extra/common.cfg, added: +@itemize +@item +insmod instructions to load those modules: nativedisk, ehci, ohci, uhci, usb, usbserial_pl2303, usbserial_ftdi, usbserial_usbdebug +@item +set prefix=(memdisk)/boot/grub +@item +For native graphics (recommended by coreboot wiki):@* gfxpayload=keep@* terminal_output --append gfxterm +@item +Play a beep on startup:@* play 480 440 1 +@end itemize + +@item +Documentation: added note about 'fb=false' workaround for text-mode debian-installer (Trisquel net install) to gnulinux/grub_boot_installer.html +@item +Documentation: updated gnulinux/grub_cbfs.html to make it safer (and easier) to follow. +@end itemize + +@node Corrections to r20140811 5th beta 11th August 2014 +@section Corrections to r20140811 (5th beta) (11th August 2014) +@anchor{#corrections-to-r20140811-5th-beta-11th-august-2014} +@itemize +@item +Fixed typo where revision list for 5th beta was listed as March 11th 2014, when in fact it was August 11th 2014 +@item +Fixed incorrect grub.cfg that was actually placed in resources/grub/config/x60/grub_usqwerty.cfg which broke the default GRUB menu entry on X60 +@end itemize + +@node Revisions for r20140811 5th beta 11th August 2014 +@section Revisions for r20140811 (5th beta) (11th August 2014) +@anchor{#revisions-for-r20140811-5th-beta-11th-august-2014} +@itemize +@item +build: added 'luks', 'lvm', 'cmosdump' and 'cmostest' to the list of modules for grub.elf +@item +Documentation: added pics showing T60 unbricking (still need to write a tutorial) +@item +build: include cmos.layout (coreboot/src/mainboard/manufacturer/model/cmos.layout) files in libreboot_bin +@item +Documentation: added @strong{install/x60tablet_unbrick.html} +@item +Documentation: added @strong{install/t60_unbrick.html} +@item +Documentation: added @strong{install/t60_lcd_15.html} +@item +Documentation: added @strong{install/t60_security.html} +@item +Documentation: added @strong{install/t60_heatsink.html} +@item +Documentation: Renamed RELEASE.html to release.html +@item +Documentation: removed pcmcia reference in x60_security.html (it's cardbus) +@item +Documentation: added preliminary information about randomized seal (for physical intrusion detection) in x60_security.html and t60_security.html +@item +Documentation: added preliminary information about preventing/mitigating cold-boot attack in x60_security.html and t60_security.html +@item +Documentation: added info to index.html#macbook21 warning about issues with macbook21 +@item +Documentation: X60/T60: added information about checking custom ROMs using dd to see whether or not the top 64K region is duplicated below top or not. Advise caution about this in the tutorial that deals with flashing on top of Lenovo BIOS, citing the correct dd commands necessary if it is confirmed that the ROM has not been applied with dd yet. (in the case that the user compiled their own ROMs from libreboot, without using the build scripts, or if they forgot to use dd, etc). +@item +Split resources/libreboot/patch/gitdiff into separate patch files (getcb script updated to accomodate this change). +@item +Re-added .git files to bucts +@item +Fixed the oversight where macbook21_firstflash wasn't included in binary archives +@item +Release archives are now compressed using .tar.xz for better compression +@end itemize + +@node Revisions for r20140729 4th beta 29th July 2014 +@section Revisions for r20140729 (4th beta) (29th July 2014) +@anchor{#revisions-for-r20140729-4th-beta-29th-july-2014} +@itemize +@item +Documentation: improved (more explanations, background info) in docs/security/x60_security.html (courtesy of Denis Carikli) +@item +MacBook2,1 tested (confirmed) +@item +macbook21: Added script 'macbook21_firstflash' for flashing libreboot while Apple EFI firmware is running. +@item +Documentation: macbook21: added software-based flashing instructions for flashing libreboot while Apple EFI firmware is running. +@item +Reduced size of libreboot_src.tar.gz: +@itemize +@item +Removed .git and .gitignore from grub directory (libreboot_src); not needed. Removing them reduces the size of the archive (by a lot). GRUB development should be upstream. +@item +Removed .git and .gitignore from bucts directory (libreboot_src); not needed. Removing them reduces the size of the archive. bucts development should be upstream. +@item +Removed .svn from flashrom directory (libreboot_src); not needed. Removing it reduces the size of the archive. flashrom development should be upstream. +@end itemize + +@item +Added ROMs with Qwerty (Italian) layout in GRUB (libreboot*itqwerty.rom) +@item +Added resources/utilities/i945gpu/intel-regs.py for debugging issues related to LCD panel compatibility on X60 Tablet and T60. (courtesy of @uref{http://mtjm.eu,Michał Masłowski}) +@end itemize + +@node Revisions for r20140720 3rd beta 20th July 2014 +@section Revisions for r20140720 (3rd beta) (20th July 2014) +@anchor{#revisions-for-r20140720-3rd-beta-20th-july-2014} +@itemize +@item +Fixed typo that existed in 2nd beta where the release date of the 2nd beta was listed as being in year 2016, when in actual fact it was 2014. +@item +Documentation: added (preliminary) details about (rare) buggy CPUs on the ThinkPad T60 that were found to fail (instability, kernel panics, etc) without the microcode updates. +@item +Documentation: added docs/hardware/x60_heatsink.html for showing how to change the heatsink on the Thinkpad X60 +@item +Added ROM images for Azerty (French) keyboard layout in GRUB (courtesy of Olivier Mondoloni) +@item +Tidied up some scripts: +@itemize +@item +@textstrikeout{Re-factored those scripts (made easier to read/maintain): build-x60, build-x60t, build-t60, build-macbook21} +@item +@textstrikeout{Reduced the number of grub configs to 2 (or 1, for macbook21), the build scripts now generate the other configs at build time.} +@item +Deleted build-x60, build-x60t, build-t60, build-macbook21 and replaced with intelligent (generic) buildrom-withgrub script +@item +Updated build to use buildrom-withgrub script for building the ROM images. +@item +coreboot.rom and coreboot_serial.rom renamed to coreboot_usqwerty.rom and coreboot_serial_usqwerty.rom +@item +coreboot_dvorak and coreboot_serial_dvorak.rom renamed to coreboot_usdvorak.rom and coreboot_serial_usdvorak.rom +@item +Renamed coreboot*rom to libreboot*rom +@item +Made flash, lenovobios_firstflash and lenovobios_secondflash scripts fail if the specified file does not exist. +@item +Updated all relevant parts of the documentation to reflect the above. +@end itemize + +@item +Replaced background.png with background.jpg. added gnulove.jpg. (resources/grub/background/) +@item +Updated buildrom-withgrub to use background.jpg instead of background.png +@item +Updated buildrom-withgrub to use gnulove.jpg aswell +@item +Updated resources/grub/config/macbook21/grub*cfg to use gnulove.jpg background. +@item +Updated resources/grub/config/@{x60,t60,x60t@}/grub*cfg to use background.jpg background. +@item +Documentation: updated docs/index.html#grub_custom_keyboard to be more generally useful. +@item +nvramtool: +@itemize +@item +Updated builddeps-coreboot script to build it +@item +Updated build script to include it in libreboot_bin +@end itemize + +@item +Documentation: added docs/security/x60_security.html (security hardening for X60) +@end itemize + +@node Revisions for r20140716 2nd beta 16th July 2014 +@section Revisions for r20140716 (2nd beta) (16th July 2014) +@anchor{#revisions-for-r20140716-2nd-beta-16th-july-2014} +@itemize +@item +Deleted all git-related files from the coreboot directory. This was necessary because with those it is possible to run 'git diff' which shows the changes made in the form of a patch (diff format); this includes the blobs that were deleted during deblobbing. +@end itemize + +@node Revisions for r20140711 1st beta 11th July 2014 +@section Revisions for r20140711 (1st beta) (11th July 2014) +@anchor{#revisions-for-r20140711-1st-beta-11th-july-2014} +@itemize +@item +Initial release (new coreboot base, dated 1st June 2014. See 'getcb' script for reference) +@item +DEBLOBBED coreboot +@item +Removed the part from memtest86+ 'make' where it tried to connect to some scp server while compiling. (commented out line 24 in the Makefile) +@item +X60 now uses a single .config (for coreboot) +@item +X60 now uses a single grub.cfg (for grub memdisk) +@item +X60 now uses a single grub.elf (payload) +@item +Added new native graphics code for X60 (replaces the old 'replay' code) from Vladimir Serbinenko: 5320/9 from review.coreboot.org +@item +T60 is now supported, with native graphics. (5345/4 from review.coreboot.org, cherry-picked on top of 5320/9 checkout) +@item +Added macbook2,1 support (from Mono Moosbart and Vladimir Serbinenko) from review.coreboot.org (see 'getcb' script to know how that was done) +@itemize +@item +Documentation: added information linking to correct page and talking about which models are supported. +@item +Added resources/libreboot/config/macbook21config +@item +macbook21: Added 'build-macbook21' script and linked to it in 'build' (ROMs included under bin/macbook21/) +@item +macbook21: Removed dd instructions from build-macbook21 script (macbook21 does not need bucts when flashing libreboot while Apple EFI firmware is running) +@item +Documentation: Added macbook21 ROMs to the list of ROMs in docs/index.html#rom +@item +Documentation: Write documentation linking to Mono Moosbart's macbook21 and parabola page (and include a copy) +@end itemize + +@item +Documentation: added a copy of Mono's Parabola install guide (for macbook21 with Apple EFI firmware) and linked in in main index. +@item +Documentation: added a copy of Mono's Coreboot page (for macbook21) and linked it in main index. +@item +T60: Copy CD option from the grub.cfg files for T60 *serial*.rom images into the grub configs for non-serial images. (T60s have CD/DVD drive on main laptop) +@item +macbook21: remove options in build-macbook21 for *serial*.rom (there is no dock or serial port available for macbook21) +@item +Added patches for backlight controls on X60 and T60 with help from Denis Carikli (see ./resources/libreboot/patch/gitdiff and ./getcb and docs/i945_backlight.html) +@itemize +@item +Documentation: added docs/i945_backlight.html showing how backlight controls were made to work on X60/T60 +@end itemize + +@item +Documentation: Added info about getting LCD panel name based on EDID data. +@itemize +@item +Documentation: Added a link to this from the list of supported T60s and LCD panels for T60 (so that the user can check what LCD panel they have). +@end itemize + +@item +X60/T60: Merged patches for 3D fix (from Paul Menzel) when using kernel 3.12 or higher (see ./resources/libreboot/patch/gitdiff and ./getcb) +@itemize +@item +based on 5927/11 and 5932/5 from review.coreboot.org +@end itemize + +@item +Improved thinkpad_acpi support (from coreboot ): xsensors shows more information. +@itemize +@item +From 4650/29 in review.coreboot.org (merged in coreboot 'master' on June 1st 2014) +@end itemize + +@item +Merged changes for digitizer (X60 Tablet) and IR (X60 and T60) based on 5243/17, 5242/17 and 5239/19 from review.coreboot.org +@itemize +@item +(see ./resources/libreboot/patch/gitdiff and ./getcb) +@end itemize + +@item +Documentation: added information about building flashrom using 'builddeps-flashrom' script. +@item +Re-created resources/libreboot/config/x60config +@item +Re-created resources/libreboot/config/t60config +@item +Added 'x60tconfig' in resources/libreboot/config (because X60 Tablet has different information about serial/model/version in 'dmidecode') +@itemize +@item +Added 'build-x60t' script +@item +Updated 'build' script to use 'build-x60t' +@item +Documentation: added to #config section the section #config_x60t (libreboot configuration and dmidecode info) +@item +Documentation: added x60t ROMs to the list of ROMs +@end itemize + +@item +Tidied up the 'builddeps' script (easier to read) +@item +Tidied up the 'cleandeps' script (easier to read) +@item +Annotated the 'buildall' script +@item +Added 'getcb' script for getting coreboot revision used from git, and patching it. +@item +Added 'getgrub' script for getting the GRUB revision used from git, and patching it. +@item +Added 'getmt86' script for getting the memtest86+ version used, and patching it. +@item +Added 'getbucts' script for getting the bucts version used. +@item +Added 'getflashrom' script for getting the flashrom version used, and patching it +@item +Added 'getall' script which runs all of the other 'get' scripts. +@item +Add instructions to the 'build' script to prepare libreboot_meta.tar.gz +@itemize +@item +New archive: libreboot_meta.tar.gz - minimal archive, using the 'get' scripts to download all the dependencies (coreboot, memtest, grub and so on). +@end itemize + +@item +Documentation: added information about where 'build' script prepares the libreboot_meta.tar.gz archive. +@item +Documentation: added information about how to use the 'get' scripts in libreboot_meta.tar.gz (to generate libreboot_src.tar.gz) +@itemize +@item +Documentation: mention that meta doesn't create libreboot_src/ directory, but that libreboot_meta itself becomes the same. +@item +Documentation: advise to rename libreboot_meta to libreboot_src after running 'getall'. +@end itemize + +@item +Annotated the 'builddeb' script, to say what each set of dependencies are for. +@item +Separated bucts/flashrom builddeb sections into separate scripts: builddeb-flashrom, builddeb-bucts. +@item +Documentation: Updated relevant parts based on the above. +@item +Added instructions to 'build' script for including builddeb-bucts and builddeb-flashrom in libreboot_bin +@item +Updated flashrom checkout (r1822 2014-06-16) from SVN (http://flashrom.org/Downloads). +@itemize +@item +Updated flashing instructions in docs/index.html for new commands needed (Macronix chip on X60/T60) +@item +For X60/T60 (flashrom): Patched flashchips.c_lenovobios_macronix and flashchips.c_lenovobios_sst executables for SST/macronix (included in resources/flashrom/patch) +@item +Updated builddeps to build flashrom_lenovobios_sst and flashrom_lenovobios_macronix, for X60/T60 users with Lenovo BIOS +@item +moved the flashrom build instructions from 'builddeps' and put them in 'builddeps-flashrom', excecuting that from 'builddeps'. +@item +Added builddeps-flashrom to libreboot_bin.tar.gz +@end itemize + +@item +flashrom: added patched flashchips.c to resources/flashrom/patch (automatically use correct macronix chip on libreboot, without using '-c' switch) +@itemize +@item +removed 'MX25L1605' and 'MX25L1605A/MX25L1606E' entries in flashchips.c for the patched version of flashchips.c +@item +added instructions to 'builddeps-flashrom' to automatically use this modified flashchips.c in the default build +@end itemize + +@item +Added builddeb to libreboot_bin.tar.gz +@item +Moved 'bucts' build instructions from builddeps to builddeps-bucts +@itemize +@item +builddeps now runs 'builddeps-bucts' instead +@item +Added 'builddeps-bucts' to libreboot_bin.tar.gz +@item +Documentation: Added information about using 'builddep-bucts' to build the BUC.TS utility. +@end itemize + +@item +Added 'lenovobios_firstflash' and 'lenovobios_secondflash' scripts +@itemize +@item +Added instructions to 'build' script for including those files in libreboot_bin +@item +Documentation: Add tutorial for flashing while Lenovo BIOS is running (on X60/T60) +@end itemize + +@item +Added 'flash' script (make sure to run builddeps-flashrom first) which (while libreboot is already running) can use flashrom to flash a ROM +@itemize +@item +eg: "sudo ./flash bin/x60/coreboot_serial_ukdvorak.rom" equivalent to "sudo ./flashrom/flashrom -p internal -w bin/x60/coreboot_uk_dvorak.rom" +@item +updated 'build' script to include the 'flash' script in libreboot_bin.tar.gz +@end itemize + +@item +Documentation: replaced default flashrom tutorial to recommend the 'flash' script instead. +@item +Re-add cbfstool source code back into libreboot_bin.tar.gz, as cbfstool_standalone +@itemize +@item +Patched that version to work (able to be built and used) without requiring the entire coreboot source code. +@item +Created patched version of the relevant source files and added it into resources/cbfstool/patch +@itemize +@item +see coreboot/util/cbfstool/rmodule.c and then the patched version in resources/cbfstool/patch/rmodule.c +@item +see coreboot/src/include/rmodule-defs.h and the rule in 'build' for including this in ../libreboot_bin/cbfstool_standalone +@end itemize + +@item +Added instructions to 'build' script for applying this patch to the cbfstool_standalone source in libreboot_bin +@item +Added instructions to 'build' script for then re-compiling cbfstool_standalone in libreboot_bin after applying the patch +@item +Added a 'builddeps-cbfstool' script (in src, but only used in bin and put in bin by 'build') that compiles cbfstool_standalone in libreboot_bin (make), moves the cbfstool and rmodtool binaries into libreboot_bin/ and then does 'make clean' in libreboot_bin/cbfstool_standalone +@item +Updated the 'build' script to put 'builddeps-cbfstool' in libreboot_bin +@item +Updated the 'build' script in the cbfstool (standalone) part to accomodate the above. +@item +Documentation: added notes about cbfstool (standalone) in libreboot_bin +@end itemize + +@item +Documentation: made docs/gnulinux/grub_cbfs.html slightly easier to follow. +@item +Annotate the 'build*' scripts with 'echo' commands, to help the user understand what it actually happening during the build process. +@item +Documentation: added information about how 'dmidecode' data was put in the coreboot configs +@itemize +@item +Documentation: In fact, document how the 'config' files in resources/libreboot/config/ were created +@end itemize + +@item +Documentation: Added information about which ThinkPad T60s are supported, and which are not. +@item +Documentation: added information about LCD inverters (for upgrading the LCD panel on a T60 14.1' XGA or 15.1' XGA) +@itemize +@item +it's FRU P/N 41W1478 (on T60 14.1") so this was added to the docs. +@item +it's P/N 42T0078 FRU 42T0079 or P/N 41W1338 (on T60 15.1") so this was added to the docs. +@end itemize + +@item +Documentation: added information about names of LCD panels for T60 to the relevant parts of the documentation. +@item +Documentation: added information (with pictures) about the differences between T60 with Intel GPU and T60 with ATI GPU. +@item +Documentation: added pictures of keyboard layouts (US/UK Qwerty/Dvorak) to the ROM list, to let the user compare with their own keyboard. +@item +Move the coreboot build instructions in 'builddeps' into 'builddeps-coreboot' and link it in 'builddeps' +@itemize +@item +Link to 'builddeps-coreboot' in final stage of 'getcb' +@end itemize + +@item +Move GRUB build instructions from 'builddeps' into 'builddeps-grub', link from 'builddeps' +@itemize +@item +Link to 'builddeps-grub' in final stage of 'getgrub' +@end itemize + +@item +Move MemTest86+ build instructions from 'builddeps' into 'builddeps-memtest86', link from 'builddeps' +@itemize +@item +Link to 'builddeps-memtest86' in final stage of 'getmt86' +@end itemize + +@item +made 'build' script put resources/ directory in libreboot_bin, to make builddeps-flashrom work in libreboot_bin +@item +Removed instructions for building source code in the 'get' script (they don't really belong there) +@item +Added libfuse-dev and liblzma-dev to the list of GRUB dependencies in 'builddeb' script. +@item +Converted the 'RELEASE' file to 'docs/RELEASE.html' +@item +Added those dependencies to builddeb script (for GRUB part): gawk libdevmapper-dev libtool libfreetype6-dev +@item +Added to build script the instruction at the end to create a sha512sum.txt with a file manifest plus checksums. +@item +Deleted the RELEASE and BACKPORT files (no longer needed) +@item +Documentation: added information about X60/T60 dock (ultrabase x6 and advanced mini dock) to relevant sections. +@itemize +@item +Added to docs/index.html#serial +@end itemize + +@end itemize + +@ref{#pagetop,Back to top of page.} + +@node Release 20140622 5th release +@chapter Release 20140622 (5th release) +@anchor{#release-20140622-5th-release} +@itemize +@item +7th March 2014 +@item +revised 22nd June 2014 +@end itemize + +@menu +* Officially supported:: +* Revision 22nd June 2014 - extra:: +* Revision 22nd June 2014 - extra:: +* Revision notes 22nd June 2014:: +* Revision notes 11th June 2014:: +* Revision notes 5th June 2014:: +* Revision notes 9th March 2015:: +* Development notes:: +@end menu + +@node Officially supported +@section Officially supported +@anchor{#officially-supported} +@itemize +@item +ThinkPad X60 +@item +ThinkPad X60s +@end itemize + +@node Revision 22nd June 2014 - extra +@section Revision (22nd June 2014 - extra) +@anchor{#revision-22nd-june-2014---extra} +@itemize +@item +Documentation: added X60 Unbricking tutorial +@item +Documentation: added info about enabling or disabling wifi +@item +Documentation: added info about enabling or disabling trackpoint +@end itemize + +@node Revision 22nd June 2014 - extra +@section Revision (22nd June 2014 - extra) +@anchor{#revision-22nd-june-2014---extra-1} +@itemize +@item +Documentation: Improved the instructions for using flashrom +@item +Documentation: Improved the instructions for using cbfstool (to change the default GRUB menu) +@item +Documentation: Numerous small fixes. +@end itemize + +@node Revision notes 22nd June 2014 +@section Revision notes (22nd June 2014) +@anchor{#revision-notes-22nd-june-2014} +@itemize +@item +updated GRUB (git 4b8b9135f1676924a8458da528d264bbc7bbb301, 20th April 2014) +@item +Made "DeJavu Sans Mono" the default font in GRUB (fixes border corruption). +@item +re-added background image in GRUB (meditating GNU) +@item +added 6 more images: +@itemize +@item +coreboot_ukqwerty.rom (UK Qwerty keyboard layout in GRUB) +@item +coreboot_serial_ukqwerty.rom (UK Qwerty keyboard layout in GRUB) +@item +coreboot_dvorak.rom (US Dvorak keyboard layout in GRUB) +@item +coreboot_serial_dvorak.rom (US Dvorak keyboard layout in GRUB) +@item +coreboot_ukdvorak.rom (UK Dvorak keyboard layout in GRUB) +@item +coreboot_serial_ukdvorak.rom (UK Dvorak keyboard layout in GRUB) +@item +(coreboot.rom and coreboot_serial.rom have US Qwerty keyboard layout in GRUB, as usual) +@end itemize + +@item +improved the documentation: +@itemize +@item +removed FLASH_INSTRUCTION and README.powertop and merged them with README +@item +removed obsolete info from README and tidied it up +@item +deleted README (replaced with docs/index.html) +@end itemize + +@item +tidied up the menu entries in GRUB +@item +tidied up the root directory of X60_source/, sorted more files into subdirectories +@item +added 'pkg-config' to the list of dependencies for building powertop on Trisquel +@item +wrote a script (powertop.trisquel6) to automatically setup Powertop to run at boot time (for Trisquel 6 users) +@item +improved the commenting inside the 'build' script (should make modifying it easier) +@item +Renamed X60_binary.tar.gz and X60_source.tar.gz to libreboot_bin.tar.gz and libreboot_src.tar.gz, respectively. +@item +Replaced "GNU GRUB version" with "FREE AS IN FREEDOM" on GNU GRUB start screen. +@item +Added sha512.txt files in libreboot_src and libreboot_bin. (inside the archives) +@item +Added libreboot_bin.tar.gz.sha512.txt and libreboot_src.tar.gz.sha512.txt files (outside of the archives) +@end itemize + +@node Revision notes 11th June 2014 +@section Revision notes (11th June 2014): +@anchor{#revision-notes-11th-june-2014} +@itemize +@item +removed 'CD' boot option from coreboot.rom (not needed) +@item +removed 'processor.max_cstate=2' and 'idle=halt' options (see README.powertop file) +@end itemize + +@node Revision notes 5th June 2014 +@section Revision notes (5th June 2014): +@anchor{#revision-notes-5th-june-2014} +@itemize +@item +added backlight support (Fn+Home and Fn+End) on X60 +@item +fixed broken/unstable 3D when using kernel 3.12 or higher +@item +(see 'BACKPORT' file) +@end itemize + +@node Revision notes 9th March 2015 +@section Revision notes (9th March 2015): +@anchor{#revision-notes-9th-march-2015} +@itemize +@item +recreated coreboot config from scratch +@item +GRUB loads even faster now (less than 2 seconds). +@item +Total boot time reduced by further ~5 seconds. +@item +Added crypto and cryptodisk modules to GRUB +@item +cbfstool now included in the binary archives +@end itemize + +@node Development notes +@section Development notes +@anchor{#development-notes} +@itemize +@item +Binary archive now have 2 images: +@itemize +@item +With serial output enabled and memtest86+ included (debug level 8 in coreboot) +@item +With serial output disabled and memtest86+ excluded (faster boot speeds) (debugging disabled) +@end itemize + +@item +Reduced impact on battery life: +@itemize +@item +'processor.max_cstate=2' instead of 'idle=halt' for booting default kernel +@end itemize + +@item +coreboot.rom (faster boot speeds, debugging disabled): +@itemize +@item +Disabled coreboot serial output (Console-> in "make menuconfig") +@item +Set coreboot debug level to 0 instead of 8 (Console-> in "make menuconfig") +@item +Changed GRUB timeout to 1 second instead of 2 (in grub.cfg +@item +Removed background image in GRUB. +@item +Removed memtest86+ payload (since it relies on serial output) +@end itemize + +@item +coreboot_serial.rom (slower boot speeds, debugging enabled): +@itemize +@item +Boot time still reduced, but only by ~2 seconds +@item +has the memtest86+ payload included in the ROM +@item +has serial port enabled. How this is achieved (from X60_source): Turn on debugging level to 8, and enable serial output +@end itemize + +@item +(in Console-> in coreboot "make menuconfig") +@item +(and build with grub_serial.cfg and grub_memdisk_serial.cfg) +@end itemize + +@ref{#pagetop,Back to top of page.} + +@node Release 20140221 4th release +@chapter Release 20140221 (4th release) +@anchor{#release-20140221-4th-release} +@itemize +@item +21st February 2014 +@end itemize + +@menu +* Officially supported:: +* Development notes:: +@end menu + +@node Officially supported +@section Officially supported +@anchor{#officially-supported-1} +@itemize +@item +ThinkPad X60 +@item +ThinkPad X60s +@end itemize + +@node Development notes +@section Development notes +@anchor{#development-notes-1} +@itemize +@item +Removed SeaBIOS (redundant) +@item +New GRUB version (2.02~beta2) +@itemize +@item +Fixes some USB issues +@item +Includes ISOLINUX/SYSLINUX parser +@end itemize + +@item +New grub.cfg +@item +Removed useless options: +@itemize +@item +options for booting sda 2/3/4 +@item +seabios boot option +@end itemize + +@item +Added new menu entries: +@itemize +@item +Parse ISOLINUX config (USB) +@item +Parse ISOLINUX config (CD) +@item +Added 'cat' module for use on GRUB command line. +@end itemize + +@item +"set pager=1" is set in grub.cfg, for less-like functionality +@end itemize + +The "Parse" options read ./isolinux/isolinux.cfg on a CD or USB, and automatically converts it to a grub config and switches to the boot menu of that distro. This makes booting ISOs *much* easier than before. + +@ref{#pagetop,Back to top of page.} + +@node r20131214 3rd release +@chapter r20131214 (3rd release) +@anchor{#r20131214-3rd-release} +@itemize +@item +14th December 2013 +@end itemize + +@menu +* Supported:: +* Development notes:: +@end menu + +@node Supported +@section Supported: +@anchor{#supported} +@itemize +@item +ThinkPad X60 +@item +ThinkPad X60s +@end itemize + +@node Development notes +@section Development notes +@anchor{#development-notes-2} +@itemize +@item +Added SeaBIOS payload to GRUB2 (for booting USB drives) +@item +new grub.cfg +@end itemize + +@ref{#pagetop,Back to top of page.} + +@node r20131213 2nd release +@chapter r20131213 (2nd release) +@anchor{#r20131213-2nd-release} +@itemize +@item +13th December 2013 +@end itemize + +@menu +* Supported:: +* Development notes:: +@end menu + +@node Supported +@section Supported: +@anchor{#supported-1} +@itemize +@item +ThinkPad X60 +@item +ThinkPad X60s +@end itemize + +@node Development notes +@section Development notes +@anchor{#development-notes-3} +@itemize +@item +added background image to GRUB2 +@item +added memtest86+ payload to grub2 +@item +improvements to the documentation +@item +new grub.cfg +@end itemize + +@ref{#pagetop,Back to top of page.} + +@node r20131212 1st release +@chapter r20131212 (1st release) +@anchor{#r20131212-1st-release} +@itemize +@item +12th December 2013 +@end itemize + +@menu +* Supported:: +* Development notes:: +@end menu + +@node Supported +@section Supported: +@anchor{#supported-2} +@itemize +@item +ThinkPad X60 +@item +ThinkPad X60s +@end itemize + +@node Development notes +@section Development notes +@anchor{#development-notes-4} +@itemize +@item +initial release +@item +source code deblobbed +@end itemize + +@ref{#pagetop,Back to top of page.} + +Copyright © 2014, 2015 Francis Rowe <info@@gluglug.org.uk>@* Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license can be found at @uref{gfdl-1.3.txt,gfdl-1.3.txt} + +Updated versions of the license (when available) can be found at @uref{https://www.gnu.org/licenses/licenses.html,https://www.gnu.org/licenses/licenses.html} + +UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. + +TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. + +The disclaimer of warranties and limitation of liability provided above shall be interpreted in a manner that, to the extent possible, most closely approximates an absolute disclaimer and waiver of all liability. + +@bye diff --git a/docs/depthcharge/index.html b/docs/depthcharge/index.html @@ -1,362 +0,0 @@ -<!DOCTYPE html> -<html> -<head> - <meta charset="utf-8"> - <meta name="viewport" content="width=device-width, initial-scale=1"> - - <style type="text/css"> - @import url('../css/main.css'); - </style> - - <title>Depthcharge payload</title> -</head> - -<body> - - <div class="section"> - - <h1 id="pagetop">Depthcharge payload</h1> - - <p> - This section relates to the depthcharge payload used in libreboot. - </p> - - <p> - Or <a href="../index.html">Back to main index</a>. - </p> - - <ul> - <li><a href="#cros_security_model">CrOS security model</a></li> - <li><a href="#developer_mode_screen">Developer mode screen</a> - <ul> - <li><a href="#holding_developer_mode_screen">Holding the developer mode screen</li> - <li><a href="#booting_normally">Booting normally</li> - <li><a href="#booting_different_mediums">Booting from different mediums</li> - <li><a href="#showing_device_information">Showing device information</li> - <li><a href="#warnings">Warnings</li> - </ul> - </li> - <li><a href="#recovery_mode_screen">Recovery mode screen</a> - <ul> - <li><a href="#recovering_bad_state">Recovering from a bad state</a></li> - <li><a href="#enabling_developer_mode">Enabling developer mode</a></li> - </ul> - </li> - <li><a href="#configuring_verified_boot_parameters">Configuring verified boot parameters</a></li> - </ul> - - </div> - - <div class="section"> - - <h1 id="cros_security_model">CrOS security model</h1> - - <p> - CrOS (Chromium OS/Chrome OS) devices such as Chromebooks implement a strict security model to ensure that these devices do not become compromised, - that is implemented as the verified boot (vboot) reference, most of which is executed within depthcharge. - A detailed overview of the CrOS security model is available on the dedicated page. - </p> - - <div class="subsection"> - - <p> - In spite of the CrOS security model, depthcharge won't allow booting kernels without verifying their signature and booting from external media or legacy payload unless explicitly allowed: see <a href="#configuring_verified_boot_parameters">configuring verified boot parameters</a>. - </p> - - </div> - - </div> - - <div class="section"> - - <h1 id="developer_mode_screen">Developer mode screen</h1> - - <p> - The developer mode screen can be accessed in depthcharge when developer mode is enabled.<br /> - Developer mode can be enabled from the <a href="#recovery_mode_screen">recovery mode screen</a>. - </p> - - <p> - It allows booting normally, booting from internal storage, booting from external media (when enabled), booting from legacy payload (when enabled), showing information about the device and disabling developer mode. - </p> - - <div class="subsection"> - - <h2 id="holding_developer_mode_screen">Holding the developer mode screen</h2> - - <p> - As instructed on the developer mode screen, the screen can be held by pressing <b>Ctrl + H</b> in the first 3 seconds after the screen is shown. - After that delay, depthcharge will resume booting normally. - </p> - - </div> - - <div class="subsection"> - - <h2 id="booting_normally">Booting normally</h2> - - <p> - As instructed on the developer mode screen, a regular boot will happen after <b>3 seconds</b> (if developer mode screen is not held).<br /> - The default boot medium (internal storage, external media, legacy payload) is shown on screen. - </p> - - </div> - - <div class="subsection"> - - <h2 id="booting_different_mediums">Booting from different mediums</h2> - - <p> - Depthcharge allows booting from different mediums, when they are allowed (see <a href="#configuring_verified_boot_parameters">configuring verified boot parameters</a> to enable or disable boot mediums).<br /> - As instructed on the developer mode screen, booting from various mediums can be triggered by pressing various key combinations: - </p> - - <ul> - <li>Internal storage: <b>Ctrl + D</b></li> - <li>External media: <b>Ctrl + U</b> (when enabled)</li> - <li>Legacy payload: <b>Ctrl + L</b> (when enabled)</li> - </ul> - - </div> - - <div class="subsection"> - - <h2 id="showing_device_information">Showing device information</h2> - - <p> - As instructed on the developer mode screen, showing device information can be triggered by pressing <b>Ctrl + I</b> or <b>Tab</b>.<br /> - Various information is shown, including vboot non-volatile data, TPM status, GBB flags and key hashes.<br /> - </p> - - </div> - - <div class="subsection"> - - <h2 id="warnings">Warnings</h2> - - <p> - The developer mode screen will show warnings when: - - <ul> - <li>Booting kernels without verifying their signature is enabled</li> - <li>Booting from external media is enabled</li> - <li>Booting legacy payloads is enabled</li> - </ul> - - </p> - - </div> - - </div> - - <div class="section"> - - <h1 id="recovery_mode_screen">Recovery mode screen</h1> - - <p> - The recovery mode screen can be accessed in depthcharge, by pressing <b>Escape + Refresh + Power</b> when the device is off. - </p> - - <p> - It allows recovering the device from a bad state by booting from a trusted recovery media. - When accessed with the device in a good state, it also allows enabling developer mode. - </p> - - <div class="subsection"> - - <h2 id="recovering_bad_state">Recovering from a bad state</h2> - - <p> - When the device fails to verify the signature of a piece of the boot software or when an error occurs, - it is considered to be in a bad state and will instruct the user to reboot to recovery mode.<br /> - Recovery mode boots using only software located in write-protected memory, that is considered to be trusted and safe. - </p> - - <p> - Recovery mode then allows recovering the device by booting from a trusted recovery media, that is automatically detected when recovery mode starts. - When no external media is found or when the recovery media is invalid, instructions are shown on screen. <br /> - Trusted recovery media are external media (USB drives, SD cards, etc) that hold a kernel signed with the recovery key. - </p> - - <p> - Google provides images of such recovery media for Chrome OS (which are not advised to users as they contain proprietary software). <br /> - They are signed with Google's recovery keys, that are pre-installed on the device when it ships. - </p> - - <p> - When replacing the full flash of the device, the pre-installed keys are replaced. - When the recovery private key is available (e.g. when using self-generated keys), it can be used to sign a kernel for recovery purposes. - </p> - - </div> - - <div class="subsection"> - - <h2 id="enabling_developer_mode">Enabling developer mode</h2> - - <p> - As instructed on the recovery mode screen, developer mode can be enabled by pressing <b>Ctrl + D</b>.<br /> - Instructions to confirm enabling developer mode are then shown on screen. - </p> - - </div> - - </div> - - <div class="section"> - - <h1 id="configuring_verified_boot_parameters">Configuring verified boot parameters</h1> - - <p> - Depthcharge's behavior relies on the verified boot (vboot) reference implementation, - that can be configured with parameters stored in the verified boot non-volatile storage.<br /> - These parameters can be modified with the <b>crossystem</b> tool, that requires sufficient privileges to access the verified boot non-volatile storage. - </p> - - <p> - <b>crossystem</b> relies on <b>mosys</b>, that is used to access the verified boot non-volatile storage on some devices. - <b>crossystem</b> and <b>mosys</b> are both free software and their source code is made available by Google: <a href="https://chromium.googlesource.com/chromiumos/platform/vboot_reference/">crossystem</a>. <a href="https://chromium.googlesource.com/chromiumos/platform/mosys/">mosys</a>.<br /> - These tools are not distributed along with Libreboot yet. However, they are preinstalled on the device, with ChromeOS. - </p> - - <p> - Some of these parameters have the potential of <b>weakening the security of the device</b>. - In particular, disabling kernels signature verification, external media boot and legacy payload boot can weaken the security of the device. - </p> - - <div class="subsection"> - - <p> - The following parameters can be configured: - </p> - - <ul> - - <li> - Kernels signature verification: - <ul> - - <li> - Enabled with:<br /> - # <b>crossystem dev_boot_signed_only=1</b> - </li> - - <li> - Disabled with:<br /> - # <b>crossystem dev_boot_signed_only=0</b> - </li> - - </ul> - </li> - - <li> - External media boot: - <ul> - - <li> - Enabled with:<br /> - # <b>crossystem dev_boot_usb=1</b> - </li> - - <li> - Disabled with:<br /> - # <b>crossystem dev_boot_usb=0</b> - </li> - - </ul> - </li> - - <li> - Legacy payload boot: - <ul> - - <li> - Enabled with:<br /> - # <b>crossystem dev_boot_legacy=1</b> - </li> - - <li> - Disabled with:<br /> - # <b>crossystem dev_boot_legacy=0</b> - </li> - - </ul> - </li> - - <li> - Default boot medium: - <ul> - - <li> - Internal storage:<br /> - # <b>crossystem dev_default_boot=disk</b> - </li> - - <li> - External media:<br /> - # <b>crossystem dev_default_boot=usb</b> - </li> - - <li> - Legacy payload:<br /> - # <b>crossystem dev_default_boot=legacy</b> - </li> - - </ul> - - </ul> - - </div> - - </div> - - <div class="section"> - - <p> - Copyright &copy; 2015 Paul Kocialkowski &lt;contact@paulk.fr&gt;<br/> - Permission is granted to copy, distribute and/or modify this document - under the terms of the GNU Free Documentation License, Version 1.3 - or any later version published by the Free Software Foundation; - with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. - A copy of the license can be found at <a href="../gfdl-1.3.txt">../gfdl-1.3.txt</a> - </p> - - <p> - Updated versions of the license (when available) can be found at - <a href="https://www.gnu.org/licenses/licenses.html">https://www.gnu.org/licenses/licenses.html</a> - </p> - - <p> - UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE - EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS - AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF - ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, - IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, - WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR - PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, - ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT - KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT - ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. - </p> - <p> - TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE - TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, - NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, - INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, - COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR - USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN - ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR - DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR - IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. - </p> - <p> - The disclaimer of warranties and limitation of liability provided - above shall be interpreted in a manner that, to the extent - possible, most closely approximates an absolute disclaimer and - waiver of all liability. - </p> - - </div> - -</body> -</html> diff --git a/docs/depthcharge/index.texi b/docs/depthcharge/index.texi @@ -0,0 +1,213 @@ +\input texinfo +@documentencoding UTF-8 + +@ifnottex +@paragraphindent 0 +@end ifnottex +@titlepage +@title Depthcharge payload +@end titlepage + +@node Top +@top Depthcharge payload + +@menu +* Depthcharge payload:: +* CrOS security model:: +* Developer mode screen:: +* Recovery mode screen:: +* Configuring verified boot parameters:: +@end menu + +@node Depthcharge payload +@chapter Depthcharge payload +@anchor{#depthcharge-payload} +This section relates to the depthcharge payload used in libreboot. + +Or @uref{../index.html,Back to main index}. + +@itemize +@item +@ref{#cros_security_model,CrOS security model} +@item +@ref{#developer_mode_screen,Developer mode screen} +@itemize +@item +Holding the developer mode screen +@item +Booting normally +@item +Booting from different mediums +@item +Showing device information +@item +Warnings +@end itemize + +@item +@ref{#recovery_mode_screen,Recovery mode screen} +@itemize +@item +@ref{#recovering_bad_state,Recovering from a bad state} +@item +@ref{#enabling_developer_mode,Enabling developer mode} +@end itemize + +@item +@ref{#configuring_verified_boot_parameters,Configuring verified boot parameters} +@end itemize + +@node CrOS security model +@chapter CrOS security model +@anchor{#cros-security-model} +CrOS (Chromium OS/Chrome OS) devices such as Chromebooks implement a strict security model to ensure that these devices do not become compromised, that is implemented as the verified boot (vboot) reference, most of which is executed within depthcharge. A detailed overview of the CrOS security model is available on the dedicated page. + +In spite of the CrOS security model, depthcharge won't allow booting kernels without verifying their signature and booting from external media or legacy payload unless explicitly allowed: see @ref{#configuring_verified_boot_parameters,configuring verified boot parameters}. + +@node Developer mode screen +@chapter Developer mode screen +@anchor{#developer-mode-screen} +The developer mode screen can be accessed in depthcharge when developer mode is enabled.@* Developer mode can be enabled from the @ref{#recovery_mode_screen,recovery mode screen}. + +It allows booting normally, booting from internal storage, booting from external media (when enabled), booting from legacy payload (when enabled), showing information about the device and disabling developer mode. +@menu +* Holding the developer mode screen:: +* Booting normally:: +* Booting from different mediums:: +* Showing device information:: +* Warnings:: +@end menu + +@node Holding the developer mode screen +@section Holding the developer mode screen +@anchor{#holding-the-developer-mode-screen} +As instructed on the developer mode screen, the screen can be held by pressing @strong{Ctrl + H} in the first 3 seconds after the screen is shown. After that delay, depthcharge will resume booting normally. + +@node Booting normally +@section Booting normally +@anchor{#booting-normally} +As instructed on the developer mode screen, a regular boot will happen after @strong{3 seconds} (if developer mode screen is not held).@* The default boot medium (internal storage, external media, legacy payload) is shown on screen. + +@node Booting from different mediums +@section Booting from different mediums +@anchor{#booting-from-different-mediums} +Depthcharge allows booting from different mediums, when they are allowed (see @ref{#configuring_verified_boot_parameters,configuring verified boot parameters} to enable or disable boot mediums).@* As instructed on the developer mode screen, booting from various mediums can be triggered by pressing various key combinations: + +@itemize +@item +Internal storage: @strong{Ctrl + D} +@item +External media: @strong{Ctrl + U} (when enabled) +@item +Legacy payload: @strong{Ctrl + L} (when enabled) +@end itemize + +@node Showing device information +@section Showing device information +@anchor{#showing-device-information} +As instructed on the developer mode screen, showing device information can be triggered by pressing @strong{Ctrl + I} or @strong{Tab}.@* Various information is shown, including vboot non-volatile data, TPM status, GBB flags and key hashes.@* + +@node Warnings +@section Warnings +@anchor{#warnings} +The developer mode screen will show warnings when: + +@itemize +@item +Booting kernels without verifying their signature is enabled +@item +Booting from external media is enabled +@item +Booting legacy payloads is enabled +@end itemize + +@node Recovery mode screen +@chapter Recovery mode screen +@anchor{#recovery-mode-screen} +The recovery mode screen can be accessed in depthcharge, by pressing @strong{Escape + Refresh + Power} when the device is off. + +It allows recovering the device from a bad state by booting from a trusted recovery media. When accessed with the device in a good state, it also allows enabling developer mode. +@menu +* Recovering from a bad state:: +* Enabling developer mode:: +@end menu + +@node Recovering from a bad state +@section Recovering from a bad state +@anchor{#recovering-from-a-bad-state} +When the device fails to verify the signature of a piece of the boot software or when an error occurs, it is considered to be in a bad state and will instruct the user to reboot to recovery mode.@* Recovery mode boots using only software located in write-protected memory, that is considered to be trusted and safe. + +Recovery mode then allows recovering the device by booting from a trusted recovery media, that is automatically detected when recovery mode starts. When no external media is found or when the recovery media is invalid, instructions are shown on screen. @* Trusted recovery media are external media (USB drives, SD cards, etc) that hold a kernel signed with the recovery key. + +Google provides images of such recovery media for Chrome OS (which are not advised to users as they contain proprietary software). @* They are signed with Google's recovery keys, that are pre-installed on the device when it ships. + +When replacing the full flash of the device, the pre-installed keys are replaced. When the recovery private key is available (e.g. when using self-generated keys), it can be used to sign a kernel for recovery purposes. + +@node Enabling developer mode +@section Enabling developer mode +@anchor{#enabling-developer-mode} +As instructed on the recovery mode screen, developer mode can be enabled by pressing @strong{Ctrl + D}.@* Instructions to confirm enabling developer mode are then shown on screen. + +@node Configuring verified boot parameters +@chapter Configuring verified boot parameters +@anchor{#configuring-verified-boot-parameters} +Depthcharge's behavior relies on the verified boot (vboot) reference implementation, that can be configured with parameters stored in the verified boot non-volatile storage.@* These parameters can be modified with the @strong{crossystem} tool, that requires sufficient privileges to access the verified boot non-volatile storage. + +@strong{crossystem} relies on @strong{mosys}, that is used to access the verified boot non-volatile storage on some devices. @strong{crossystem} and @strong{mosys} are both free software and their source code is made available by Google: @uref{https://chromium.googlesource.com/chromiumos/platform/vboot_reference/,crossystem}. @uref{https://chromium.googlesource.com/chromiumos/platform/mosys/,mosys}.@* These tools are not distributed along with Libreboot yet. However, they are preinstalled on the device, with ChromeOS. + +Some of these parameters have the potential of @strong{weakening the security of the device}. In particular, disabling kernels signature verification, external media boot and legacy payload boot can weaken the security of the device. + +The following parameters can be configured: + +@itemize +@item +Kernels signature verification: +@itemize +@item +Enabled with:@* # @strong{crossystem dev_boot_signed_only=1} +@item +Disabled with:@* # @strong{crossystem dev_boot_signed_only=0} +@end itemize + +@item +External media boot: +@itemize +@item +Enabled with:@* # @strong{crossystem dev_boot_usb=1} +@item +Disabled with:@* # @strong{crossystem dev_boot_usb=0} +@end itemize + +@item +Legacy payload boot: +@itemize +@item +Enabled with:@* # @strong{crossystem dev_boot_legacy=1} +@item +Disabled with:@* # @strong{crossystem dev_boot_legacy=0} +@end itemize + +@item +Default boot medium: +@itemize +@item +Internal storage:@* # @strong{crossystem dev_default_boot=disk} +@item +External media:@* # @strong{crossystem dev_default_boot=usb} +@item +Legacy payload:@* # @strong{crossystem dev_default_boot=legacy} +@end itemize + +@end itemize + +Copyright © 2015 Paul Kocialkowski <contact@@paulk.fr>@* Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license can be found at @uref{../gfdl-1.3.txt,../gfdl-1.3.txt} + +Updated versions of the license (when available) can be found at @uref{https://www.gnu.org/licenses/licenses.html,https://www.gnu.org/licenses/licenses.html} + +UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. + +TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. + +The disclaimer of warranties and limitation of liability provided above shall be interpreted in a manner that, to the extent possible, most closely approximates an absolute disclaimer and waiver of all liability. + +@bye diff --git a/docs/future/index.html b/docs/future/index.html @@ -1,599 +0,0 @@ -<!DOCTYPE html> -<html lang="en"> -<head> - <meta charset="utf-8"> - <title>libreboot tutorials</title> - - <style type="text/css"> - @import url('../css/main.css'); - </style> - - <meta name="viewport" content="width=device-width, initial-scale=1.0"> - <meta name="author" content="glugman"> - <meta name="description" content="tutorials for libreboot, the reboot library."> - <meta name="robots" content="all"> -</head> - -<body> - - <div class="section"> - - <h1 id="pagetop">Development notes</h1> - <p> - These are development notes, for future use. For old (obselete) notes, see <a href="old.html">old.html</a>. - </p> - <p> - Or go <a href="../tasks.html">back to main task list</a>. - </p> - - </div> - - <div class="section"> - - <h1>Table of contents</h1> - <ul> - <li><a href="#standard_test">Standard test</a></li> - <li><a href="#t60_cpu_microcode">T60 cpu microcode</a></li> - <li><a href="#i945_vram_size">i945 VRAM size</a></li> - <li><a href="#lcd_i945_incompatibility">LCD panels on i945 - fix incompatible panels</a></li> - <li><a href="#i945_vbt">i945 X60/T60 VBT implementation (experimental: testing)</a></li> - <li><a href="#intelvbttool_results">IntelVbtTool results</a></li> - <li><a href="#fallback_patches">Fallback patches for i945</a></li> - </ul> - - </div> - - <div class="section"> - - <h1 id="standard_test">standard test</h1> - <p> - These logs are usually obtained when testing changes related to graphics on i945 (X60 and T60). - </p> - <ul> - <li> - Make a copy of these files: - <ul> - <li>/var/log/dmesg</li> - <li>/var/log/kern.log</li> - <li>/var/log/Xorg.0.log</li> - <li>/proc/ioports</li> - <li>/proc/iomem</li> - <li>/sys/class/drm/card0/error</li> - </ul> - </li> - <li> - Record these outputs: - <ul> - <li>sudo intel_reg_dumper</li> - <li>uname -r</li> - <li>lspci -vvvvnnnnxxxx</li> - <li>sudo modprobe msr</li> - <li>sudo inteltool -a</li> - <li>sudo cbmem -c</li> - </ul> - </li> - <li> - Try some 3D games with latest kernel. - </li> - </ul> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="t60_cpu_microcode">T60 cpu microcode</h1> - - <p> - TODO: T60: find (for rare buggy CPUs that are unstable without microcode updates) if there is a workaround (patched kernel, special parameter, etc) So far, only 1 processor has been found to have issues. See microcode errata sheets http://download.intel.com/design/mobile/SPECUPDT/31407918.pdf and http://download.intel.com/design/mobile/SPECUPDT/30922214.pdf and then look at the debugging results collected in <a href="../t7200q">t7200q</a> directory (q means quirk). - </p> - - <p> - Every other T7200 tested so far has worked without microcode updates. - </p> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="i945_vram_size">i945 VRAM size</h1> - - <p> - Apparently, only 8MB VRAM is available on i945 GPUs (though it could do 64MB):<br/> - phcoder: No. Hardware default is 8 MiB. When I wanted to make it configurable, I saw that docs mention only one other alternative: 1MiB. Later isn't event enough for 1024x768 at 24bpp without any acceleration or double buffering. It's possible that there are undocumented values. Which options do you have in vendor BIOS? - How to find out how much vram you have:<br/> - phcoder: TOM - BSM<br/> - phcoder: check what vendor BIOS offers as options<br/> - fchmmr: I thought it could do 64MB usually<br/> - phcoder: not accorging to doc.<br/> - phcoder: see mobile-945-express-chipset-datasheet page 93<br/> - phcoder: see also src/northbridge/intel/i945/{early_init,northbridge,gma}.c<br/> - fchmmr: "011 = DVMT (UMA) mode, 8 MB of memory pre-allocated for<br/> - fchmmr: frame buffer."<br/> - fchmmr: "Others - reserved"<br/> - phcoder: the easiest way is a loop at this position which tries different values and reads (and prints) BSM with them<br/> - stefanct: fchmmr: they suggest that you change the value and look how BSM reacts to that<br/> - stefanct: as they pointed out earlier vram size = TOM - BSM<br/> - stefanct: different values of GMS<br/> - stefanct: phcoder: hm... this could be a hint. look at the text description of TOLUD at page 103<br/> - stefanct: it mentions 64 MB in the text about BSM as well<br/> - stefanct: table 18...<br/> - phcoder: stefanct: I have a guess which value make is 64 but I will not tell to avoid skewing test results<br/> - stefanct: phcoder: sure... i assumed you were not sure if it supports it at all. testing it properly is of course a good idea :)<br/> - stefanct: test the various possible (but reserved) values of GMS and see what the resulting VRAM size is<br/> - fchmmr: so, TOM - BSM - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - - </div> - - <div class="section"> - - <h1 id="lcd_i945_incompatibility">LCD panels on i945 - fix incompatible panels</h1> - - <p> - Fix T60 issues (see incompatible panels listed at <a href="../hcl/index.html#supported_t60_list">../hcl/index.html#supported_t60_list</a>). - </p> - - <p> - Run that tool (resources/utilities/i945gpu/intel-regs.py) as root on systems with the offending panels in: - </p> - <ul> - <li>Coreboot (or libreboot, whatever) with VBIOS (disable native graphics also)</li> - <li>(Factory BIOS also?)</li> - </ul> - - <p> - This shows values in devicetree.cb and src/northbridge/intel/i945/gma.c, the idea is that you run it on factory bios or vbios - and that it will (might) show different values: then you try those in the native graphics (in libreboot). - </p> - - <p> - Other values/registers might also need to be added to the script for these tests. - </p> - - <p> - check if intel_bios_reader from intel-gpu-tools reports the same value (BIOS has a hardcoded value) for PWM modulation frequency. - This file can read the VBIOS (64K dump). - </p> - - <p> - Check other tools in intel-gpu-tools aswell, compare outputs. Possibly add more information to intel-regs.py output (submit changes to mtjm). - Do oprom trace / replay (<a href="http://www.coreboot.org/User:GNUtoo#How_to_get_rid_of_the_vbios_of_the_x60_.5BNew_Version.5D">http://www.coreboot.org/User:GNUtoo#How_to_get_rid_of_the_vbios_of_the_x60_.5BNew_Version.5D</a>) - </p> - - <p> - Study how EDID works and how gma.c handles it. - </p> - - <p> - Original getregs.py script can be found at <a href="http://hg.mtjm.eu/scripts/file/tip/intel-regs.py">http://hg.mtjm.eu/scripts/file/tip/intel-regs.py</a> - written by Michał Masłowski. - </p> - - <p> - About fixing remaining LCD panels on 5345:<br/> - 'polarity' is mentioned in coreboot log (cbmem -c). compare output (with working and non-working panel). (and see the other notes in docs/future/index.html) - </p> - <p> - There was a theory that working panels are - 6bpc (bits per colour) and nonworking are - 8bpc, but all EDIDs that we have here are - for 6bpc panels. - </p> - <p>We should compare coreboot logs - (from <code>cbmem -c</code> from systems with - working and nonworking panels.</p> - <p>How to dump EDID:</p> - <p> - # <b>apt-get install i2c-tools</b><br/> - # <b>modprobe i2c-dev</b><br/> - Find out the correct ID to use:<br/> - # <b>i2cdetect -l</b><br/> - Example:<br/> - # <b>i2cdump -y 2 0x50</b> - </p> - - <p> - Working panel: EDID dump from LG-Philips LP150E05-A2K1: - </p> -<pre> -No size specified (using byte-data access) - 0 1 2 3 4 5 6 7 8 9 a b c d e f 0123456789abcdef -00: XX ff ff ff ff ff ff 00 30 ae 43 40 00 00 00 00 X.......0?C@.... -10: 00 0f 01 03 80 1e 17 78 ea af 00 99 58 53 8c 2a .??????x??.?XS?* -20: 25 50 54 21 08 00 81 80 01 01 01 01 01 01 01 01 %PT!?.?????????? -30: 01 01 01 01 01 01 30 2a 78 20 51 1a 10 40 30 70 ??????0*x Q??@0p -40: 13 00 31 e4 10 00 00 18 28 23 78 20 51 1a 10 40 ?.1??..?(#x Q??@ -50: 30 70 13 00 31 e4 10 00 00 18 00 00 00 0f 00 90 0p?.1??..?...?.? -60: 43 32 90 43 28 14 06 00 32 0c 00 00 00 00 00 fe C2?C(??.2?.....? -70: 00 4c 50 31 35 30 45 30 35 2d 41 32 0a 20 00 9b .LP150E05-A2? .? -80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -90: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -</pre> - - <p> - Working panel: EDID dump from Boe-Hydis HT14P12-100 FRU: 13N7061 (Inverter FRU: 41W1010) - </p> - -<pre> - 0 1 2 3 4 5 6 7 8 9 a b c d e f 0123456789abcdef -00: 00 ff ff ff ff ff ff 00 30 ae 22 40 00 00 00 00 ........0?"@.... -10: 00 0f 01 03 80 1c 15 78 ea af 40 95 56 4a 8f 25 .??????x??@?VJ?% -20: 20 50 54 21 08 00 81 80 01 01 01 01 01 01 01 01 PT!?.?????????? -30: 01 01 01 01 01 01 30 2a 78 20 51 1a 10 40 30 70 ??????0*x Q??@0p -40: 13 00 1d d6 10 00 00 19 25 23 78 20 51 1a 10 40 ?.???..?%#x Q??@ -50: 30 70 13 00 1d d6 10 00 00 19 00 00 00 0f 00 90 0p?.???..?...?.? -60: 43 32 90 43 28 0f 01 00 09 e5 00 00 00 00 00 fe C2?C(??.??.....? -70: 00 48 54 31 34 50 31 32 2d 31 30 30 0a 20 00 3f .HT14P12-100? .? -80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -90: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -</pre> - -<p>LTN141XA-L01: revert to libreboot git commit c943281 to see this</p> - - <p> - <b>Non-</b>working panel: EDID dump from Samsung LTN150XG-L08: - </p> -<pre> - 0 1 2 3 4 5 6 7 8 9 a b c d e f 0123456789abcdef -00: 00 ff ff ff ff ff ff 00 30 ae 40 40 00 00 00 00 ........0?@@.... -10: 00 0f 01 03 80 1f 17 78 ea 2d 05 97 57 51 8a 27 .??????x?-??WQ?' -20: 23 50 54 21 08 00 01 01 01 01 01 01 01 01 01 01 #PT!?.?????????? -30: 01 01 01 01 01 01 64 19 00 40 41 00 26 30 18 88 ??????d?.@A.&amp;0?? -40: 36 00 30 e4 10 00 00 19 28 15 00 40 41 00 26 30 6.0??..?(?.@A.&amp;0 -50: 18 88 36 00 30 e4 10 00 00 19 00 00 00 0f 00 61 ??6.0??..?...?.a -60: 43 32 61 43 28 14 01 00 4c a3 58 47 00 00 00 fe C2aC(??.L?XG...? -70: 00 4c 54 4e 31 35 30 58 47 2d 4c 30 38 0a 00 6d .LTN150XG-L08?.m -80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -90: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -</pre> - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="i945_vbt">i945 gfx: X60/T60 VBT implementation (experimental: testing)</h1> - - <p> - intel_bios_dumper in intel-gpu-tools seems interesting. - </p> - <p> - <b>Use 'drm.debug=0x06' kernel parameter when booting in grub!</b> - </p> - <p> - Before each test run, boot a live USB and delete the old logs in /var/log (kernel log, xorg log, dmesg and so on). - </p> - <p> - Load (from the ROM) the runningvga.bin for each LCD panel on each system; do not execute it, only load it! (coreboot will have to be modified). - Rename the ROM appropriately, based on the system name and the panel name. coreboot_nativegfx_5868_plusrunningvga_t60_14_LTD141ECMB.rom, - for instance. Keep a copy for later use. - </p> - - <p>You are supposed to:</p> - <ul> - <li>enable native graphics in menuconfig</li> - <li>include the self-modified VGA ROM (load, but not execute) - for reverse engineering the correct VBT tables.</li> - </ul> - - <p> - With each boot, make notes about what you see and get logs using the <a href="#standard_test">standard test</a>. - You will need the files from <a href="#intelvbttool_results">#intelvbttool_results</a> for each system. - </p> - - Results (# means untested): - <ul> - <li> - <b>X60/X60s:</b> - <ul> - <li>TMD-Toshiba LTD121ECHB: #</li> - <li>CMO N121X5-L06: #</li> - <li>Samsung LTN121XJ-L07: #</li> - <li>BOE-Hydis HT121X01-101: #</li> - </ul> - </li> - <li> - <b>X60T XGA:</b> - <ul> - <li>BOE-Hydis HV121X03-100: #</li> - </ul> - </li> - <li> - <b>X60T SXGA+:</b> - <ul> - <li>BOE-Hydis HV121P01-100: #</li> - </ul> - </li> - <li> - <b>T60 14&quot; XGA:</b> - <ul> - <li>Samsung LTN141XA-L01: #</li> - <li>CMO N141XC: #</li> - <li>BOE-Hydis HT14X14: #</li> - <li>TMD-Toshiba LTD141ECMB: #</li> - </ul> - </li> - <li> - <b>T60 14&quot; SXGA+</b> - <ul> - <li>TMD-Toshiba LTD141EN9B: #</li> - <li>Samsung LTN141P4-L02: #</li> - <li>Boe-Hydis HT14P12: #</li> - </ul> - </li> - <li> - <b>T60 15&quot; XGA</b> - <ul> - <li>Samsung LTN150XG-L08: #</li> - <li>LG-Philips LP150X09: #</li> - <li>13N7068 (IDtech): #</li> - <li>13N7069 (CMO): #</li> - - </ul> - </li> - <li> - <b>T60 15&quot; SXGA+</b> - <ul> - <li>LG-Philips LP150E05-A2K1: #</li> - <li>BOE-Hydis HV150P01-100: #</li> - </ul> - </li> - <li> - <b>T60 15&quot; UXGA</b> - <ul> - <li>BOE-Hydis HV150UX1-100: #</li> - <li>IDTech N150U3-L01: #</li> - <li>BOE-Hydis HV150UX1-102: #</li> - </ul> - </li> - <li> - <b>T50 15&quot; QXGA</b> - <ul> - <li>IDtech IAQX10N: #</li> - <li>IDtech IAQX10S: #</li> - </ul> - </li> - </ul> - - <p><a href="#pagetop">Back to top of page</a></p> - - </div> - - <div class="section"> - - <h1 id="intelvbttool_results">intelvbttool test results (VGA ROM dumps)</h1> - <p> - The VBIOS on i945 (intel gpu) platforms is self-modifying; that is, - its contents change when you run it. intelvbttool takes a dump of - the currently running vbios, and parses it. - </p> - - <p> - The idea is that we can extract the VBT tables using this knowledge, on the X60, X60 Tablet and T60 (Intel GPU). - </p> - - <p> - Here is an example of how VBT was implemented on the ThinkPad X230: - <a href="http://review.coreboot.org/#/c/5396">http://review.coreboot.org/#/c/5396</a>. - </p> - - <p> - You'll need to build a T60 ROM with SeaBIOS and the VGA ROM (for Intel GPU). An X60 ROM is also needed (same configuration, using the VGA ROM for X60). - </p> - - <p> - T60 has DVI on its dock, make sure that the dock is attached when getting this output. - </p> - - <p> - Get intelvbttool here: <a href="http://review.coreboot.org/#/c/5842">http://review.coreboot.org/#/c/5842</a> (util/intelvbttool). - </p> - - <p> - Now dump a copy of the running VGA BIOS: - <b>$ sudo dd if=/dev/mem bs=64k of=runningvga.bin skip=12 count=1</b><br/> - Then do (and record the output):<br/> - <b>$ ./intelvbttool runningvga.bin &gt; intelvbttool_out</b> - </p> - - <p> - Backup both files (runningvga.bin and intelvbttool_out), renaming them to match the system and LCD panel used. - <a href="../misc/index.html#get_edid_panelname">../misc/index.html#get_edid_panelname</a> will show you how to get the name (model) of the LCD panel used. - </p> - - <h2>Test results (# means untested and all had docks, unless noted).</h2> - - <ul> - <li> - <b>X60/X60s:</b> - <ul> - <li>TMD-Toshiba LTD121ECHB: #</li> - <li>CMO N121X5-L06: #</li> - <li>Samsung LTN121XJ-L07: #</li> - <li>BOE-Hydis HT121X01-101: #</li> - </ul> - </li> - <li> - <b>X60T XGA (1024x768):</b> - <ul> - <li>BOE-Hydis HV121X03-100: #</li> - </ul> - </li> - <li> - <b>X60T SXGA+ (1400x1050):</b> - <ul> - <li>BOE-Hydis HV121P01-100: #</li> - </ul> - </li> - <li> - <b>T60 14&quot; XGA (1024x768):</b> - <ul> - <li>Samsung LTN141XA-L01: #</li> - <li>CMO N141XC: #</li> - <li>BOE-Hydis HT14X14: #</li> - <li>TMD-Toshiba LTD141ECMB: #</li> - </ul> - </li> - <li> - <b>T60 14&quot; SXGA+ (1400x1050):</b> - <ul> - <li>TMD-Toshiba LTD141EN9B: #</li> - <li>Samsung LTN141P4-L02: #</li> - <li>Boe-Hydis HT14P12: #</li> - </ul> - </li> - <li> - <b>T60 15&quot; XGA (1024x768):</b> - <ul> - <li>Samsung LTN150XG-L08: #</li> - <li>LG-Philips LP150X09: #</li> - <li>13N7068 (IDtech): #</li> - <li>13N7069 (CMO): #</li> - </ul> - </li> - <li> - <b>T60 15&quot; SXGA+ (1400x1050):</b> - <ul> - <li>LG-Philips LP150E05-A2K1: #</li> - <li>BOE-Hydis HV150P01-100: #</li> - </ul> - </li> - <li> - <b>T60 15&quot; UXGA (1600x1200):</b> - <ul> - <li>BOE-Hydis HV150UX1-100: #</li> - <li>IDTech N150U3-L01: #</li> - <li>BOE-Hydis HV150UX1-102: #</li> - </ul> - </li> - <li> - <b>T60 15&quot; QXGA (2048x1536):</b> - <ul> - <li>IDtech IAQX10N: #</li> - <li>IDtech IAQX10S: #</li> - </ul> - </li> - </ul> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="fallback_patches">Fallback patches</h1> - - <ul> - <li> - Todo: test gnutoo's fallback patches: <a href="http://www.coreboot.org/Fallback_mechanism">http://www.coreboot.org/Fallback_mechanism</a> - (some parts use systemd. adapt for upstart, which is what trisquel uses)<br/> - see <a href="gnutoo_fallback_patch">this IRC log</a> (warning, not cleaned up) - </li> - </ul> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="other">Other - unlisted (low priority)</h1> - - <ul> - <li> - PTE errors still exist on i945 with 6718 (which is merged). <a href="http://review.coreboot.org/#/c/6718/">http://review.coreboot.org/#/c/6718/</a> - <ul> - <li><a href="future/dumps/pte_x60_6718/dmesg">dmesg</a></li> - <li><a href="future/dumps/pte_x60_6718/kern.log">kern.log</a></li> - <li>This doesn't seem to cause any issues for general use.</li> - </ul> - </li> - <li> - Implement INT 10H support in i945 native graphics. (this will be a lot of work. SeaBIOS has code for some geode boards, to get a general idea). - </li> - <li> - T60 15&quot; QXGA (2048x1536): fixed issue where GRUB wouldn't show any graphics. (Not many people have this panel) - <ul> - <li>It might be the same issue I ran into with Paul on the X60 (not enough memory being allocated) since the same code works on T60 SXGA+ and UXGA, where GRUB actually display graphics.</li> - </ul> - </li> - </ul> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <p> - Copyright &copy; 2014, 2015 Francis Rowe &lt;info@gluglug.org.uk&gt;<br/> - Permission is granted to copy, distribute and/or modify this document - under the terms of the GNU Free Documentation License, Version 1.3 - or any later version published by the Free Software Foundation; - with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. - A copy of the license can be found at <a href="../gfdl-1.3.txt">../gfdl-1.3.txt</a> - </p> - - <p> - Updated versions of the license (when available) can be found at - <a href="https://www.gnu.org/licenses/licenses.html">https://www.gnu.org/licenses/licenses.html</a> - </p> - - <p> - UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE - EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS - AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF - ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, - IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, - WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR - PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, - ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT - KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT - ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. - </p> - <p> - TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE - TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, - NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, - INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, - COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR - USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN - ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR - DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR - IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. - </p> - <p> - The disclaimer of warranties and limitation of liability provided - above shall be interpreted in a manner that, to the extent - possible, most closely approximates an absolute disclaimer and - waiver of all liability. - </p> - - </div> - -</body> -</html> diff --git a/docs/future/index.texi b/docs/future/index.texi @@ -0,0 +1,516 @@ +\input texinfo +@documentencoding UTF-8 + +@ifnottex +@paragraphindent 0 +@end ifnottex +@titlepage +@title libreboot tutorials +@end titlepage + +@node Top +@top libreboot tutorials + +@menu +* Development notes:: +* Table of contents:: +* standard test:: +* T60 cpu microcode:: +* i945 VRAM size:: +* LCD panels on i945 - fix incompatible panels:: +* i945 gfx X60/T60 VBT implementation experimental testing:: +* intelvbttool test results VGA ROM dumps:: +* Fallback patches:: +* Other - unlisted low priority:: +@end menu + +@node Development notes +@chapter Development notes +@anchor{#development-notes} +These are development notes, for future use. For old (obselete) notes, see @uref{old.html,old.html}. + +Or go @uref{../tasks.html,back to main task list}. + +@node Table of contents +@chapter Table of contents +@anchor{#table-of-contents} +@itemize +@item +@ref{#standard_test,Standard test} +@item +@ref{#t60_cpu_microcode,T60 cpu microcode} +@item +@ref{#i945_vram_size,i945 VRAM size} +@item +@ref{#lcd_i945_incompatibility,LCD panels on i945 - fix incompatible panels} +@item +@ref{#i945_vbt,i945 X60/T60 VBT implementation (experimental: testing)} +@item +@ref{#intelvbttool_results,IntelVbtTool results} +@item +@ref{#fallback_patches,Fallback patches for i945} +@end itemize + +@node standard test +@chapter standard test +@anchor{#standard-test} +These logs are usually obtained when testing changes related to graphics on i945 (X60 and T60). + +@itemize +@item +Make a copy of these files: +@itemize +@item +/var/log/dmesg +@item +/var/log/kern.log +@item +/var/log/Xorg.0.log +@item +/proc/ioports +@item +/proc/iomem +@item +/sys/class/drm/card0/error +@end itemize + +@item +Record these outputs: +@itemize +@item +sudo intel_reg_dumper +@item +uname -r +@item +lspci -vvvvnnnnxxxx +@item +sudo modprobe msr +@item +sudo inteltool -a +@item +sudo cbmem -c +@end itemize + +@item +Try some 3D games with latest kernel. +@end itemize + +@ref{#pagetop,Back to top of page.} + +@node T60 cpu microcode +@chapter T60 cpu microcode +@anchor{#t60-cpu-microcode} +TODO: T60: find (for rare buggy CPUs that are unstable without microcode updates) if there is a workaround (patched kernel, special parameter, etc) So far, only 1 processor has been found to have issues. See microcode errata sheets http://download.intel.com/design/mobile/SPECUPDT/31407918.pdf and http://download.intel.com/design/mobile/SPECUPDT/30922214.pdf and then look at the debugging results collected in @uref{../t7200q,t7200q} directory (q means quirk). + +Every other T7200 tested so far has worked without microcode updates. + +@ref{#pagetop,Back to top of page.} + +@node i945 VRAM size +@chapter i945 VRAM size +@anchor{#i945-vram-size} +Apparently, only 8MB VRAM is available on i945 GPUs (though it could do 64MB):@* phcoder: No. Hardware default is 8 MiB. When I wanted to make it configurable, I saw that docs mention only one other alternative: 1MiB. Later isn't event enough for 1024x768 at 24bpp without any acceleration or double buffering. It's possible that there are undocumented values. Which options do you have in vendor BIOS? How to find out how much vram you have:@* phcoder: TOM - BSM@* phcoder: check what vendor BIOS offers as options@* fchmmr: I thought it could do 64MB usually@* phcoder: not accorging to doc.@* phcoder: see mobile-945-express-chipset-datasheet page 93@* phcoder: see also src/northbridge/intel/i945/@{early_init,northbridge,gma@}.c@* fchmmr: "011 = DVMT (UMA) mode, 8 MB of memory pre-allocated for@* fchmmr: frame buffer."@* fchmmr: "Others - reserved"@* phcoder: the easiest way is a loop at this position which tries different values and reads (and prints) BSM with them@* stefanct: fchmmr: they suggest that you change the value and look how BSM reacts to that@* stefanct: as they pointed out earlier vram size = TOM - BSM@* stefanct: different values of GMS@* stefanct: phcoder: hm... this could be a hint. look at the text description of TOLUD at page 103@* stefanct: it mentions 64 MB in the text about BSM as well@* stefanct: table 18...@* phcoder: stefanct: I have a guess which value make is 64 but I will not tell to avoid skewing test results@* stefanct: phcoder: sure... i assumed you were not sure if it supports it at all. testing it properly is of course a good idea :)@* stefanct: test the various possible (but reserved) values of GMS and see what the resulting VRAM size is@* fchmmr: so, TOM - BSM + +@ref{#pagetop,Back to top of page.} + +@node LCD panels on i945 - fix incompatible panels +@chapter LCD panels on i945 - fix incompatible panels +@anchor{#lcd-panels-on-i945---fix-incompatible-panels} +Fix T60 issues (see incompatible panels listed at @uref{../hcl/index.html#supported_t60_list,../hcl/index.html#supported_t60_list}). + +Run that tool (resources/utilities/i945gpu/intel-regs.py) as root on systems with the offending panels in: + +@itemize +@item +Coreboot (or libreboot, whatever) with VBIOS (disable native graphics also) +@item +(Factory BIOS also?) +@end itemize + +This shows values in devicetree.cb and src/northbridge/intel/i945/gma.c, the idea is that you run it on factory bios or vbios and that it will (might) show different values: then you try those in the native graphics (in libreboot). + +Other values/registers might also need to be added to the script for these tests. + +check if intel_bios_reader from intel-gpu-tools reports the same value (BIOS has a hardcoded value) for PWM modulation frequency. This file can read the VBIOS (64K dump). + +Check other tools in intel-gpu-tools aswell, compare outputs. Possibly add more information to intel-regs.py output (submit changes to mtjm). Do oprom trace / replay (@uref{http://www.coreboot.org/User:GNUtoo#How_to_get_rid_of_the_vbios_of_the_x60_.5BNew_Version.5D,http://www.coreboot.org/User:GNUtoo#How_to_get_rid_of_the_vbios_of_the_x60_.5BNew_Version.5D}) + +Study how EDID works and how gma.c handles it. + +Original getregs.py script can be found at @uref{http://hg.mtjm.eu/scripts/file/tip/intel-regs.py,http://hg.mtjm.eu/scripts/file/tip/intel-regs.py} written by Michał Masłowski. + +About fixing remaining LCD panels on 5345:@* 'polarity' is mentioned in coreboot log (cbmem -c). compare output (with working and non-working panel). (and see the other notes in docs/future/index.html) + +There was a theory that working panels are 6bpc (bits per colour) and nonworking are 8bpc, but all EDIDs that we have here are for 6bpc panels. + +We should compare coreboot logs (from @code{cbmem -c} from systems with working and nonworking panels. + +How to dump EDID: + +# @strong{apt-get install i2c-tools}@* # @strong{modprobe i2c-dev}@* Find out the correct ID to use:@* # @strong{i2cdetect -l}@* Example:@* # @strong{i2cdump -y 2 0x50} + +Working panel: EDID dump from LG-Philips LP150E05-A2K1: + +@verbatim +No size specified (using byte-data access) + 0 1 2 3 4 5 6 7 8 9 a b c d e f 0123456789abcdef +00: XX ff ff ff ff ff ff 00 30 ae 43 40 00 00 00 00 X.......0?C@.... +10: 00 0f 01 03 80 1e 17 78 ea af 00 99 58 53 8c 2a .??????x??.?XS?* +20: 25 50 54 21 08 00 81 80 01 01 01 01 01 01 01 01 %PT!?.?????????? +30: 01 01 01 01 01 01 30 2a 78 20 51 1a 10 40 30 70 ??????0*x Q??@0p +40: 13 00 31 e4 10 00 00 18 28 23 78 20 51 1a 10 40 ?.1??..?(#x Q??@ +50: 30 70 13 00 31 e4 10 00 00 18 00 00 00 0f 00 90 0p?.1??..?...?.? +60: 43 32 90 43 28 14 06 00 32 0c 00 00 00 00 00 fe C2?C(??.2?.....? +70: 00 4c 50 31 35 30 45 30 35 2d 41 32 0a 20 00 9b .LP150E05-A2? .? +80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +90: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +@end verbatim + +Working panel: EDID dump from Boe-Hydis HT14P12-100 FRU: 13N7061 (Inverter FRU: 41W1010) + +@verbatim + 0 1 2 3 4 5 6 7 8 9 a b c d e f 0123456789abcdef +00: 00 ff ff ff ff ff ff 00 30 ae 22 40 00 00 00 00 ........0?"@.... +10: 00 0f 01 03 80 1c 15 78 ea af 40 95 56 4a 8f 25 .??????x??@?VJ?% +20: 20 50 54 21 08 00 81 80 01 01 01 01 01 01 01 01 PT!?.?????????? +30: 01 01 01 01 01 01 30 2a 78 20 51 1a 10 40 30 70 ??????0*x Q??@0p +40: 13 00 1d d6 10 00 00 19 25 23 78 20 51 1a 10 40 ?.???..?%#x Q??@ +50: 30 70 13 00 1d d6 10 00 00 19 00 00 00 0f 00 90 0p?.???..?...?.? +60: 43 32 90 43 28 0f 01 00 09 e5 00 00 00 00 00 fe C2?C(??.??.....? +70: 00 48 54 31 34 50 31 32 2d 31 30 30 0a 20 00 3f .HT14P12-100? .? +80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +90: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +@end verbatim + +LTN141XA-L01: revert to libreboot git commit c943281 to see this + +@strong{Non-}working panel: EDID dump from Samsung LTN150XG-L08: + +@verbatim + 0 1 2 3 4 5 6 7 8 9 a b c d e f 0123456789abcdef +00: 00 ff ff ff ff ff ff 00 30 ae 40 40 00 00 00 00 ........0?@@.... +10: 00 0f 01 03 80 1f 17 78 ea 2d 05 97 57 51 8a 27 .??????x?-??WQ?' +20: 23 50 54 21 08 00 01 01 01 01 01 01 01 01 01 01 #PT!?.?????????? +30: 01 01 01 01 01 01 64 19 00 40 41 00 26 30 18 88 ??????d?.@A.&0?? +40: 36 00 30 e4 10 00 00 19 28 15 00 40 41 00 26 30 6.0??..?(?.@A.&0 +50: 18 88 36 00 30 e4 10 00 00 19 00 00 00 0f 00 61 ??6.0??..?...?.a +60: 43 32 61 43 28 14 01 00 4c a3 58 47 00 00 00 fe C2aC(??.L?XG...? +70: 00 4c 54 4e 31 35 30 58 47 2d 4c 30 38 0a 00 6d .LTN150XG-L08?.m +80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +90: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ +@end verbatim + +@ref{#pagetop,Back to top of page.} + +@node i945 gfx X60/T60 VBT implementation experimental testing +@chapter i945 gfx: X60/T60 VBT implementation (experimental: testing) +@anchor{#i945-gfx-x60t60-vbt-implementation-experimental-testing} +intel_bios_dumper in intel-gpu-tools seems interesting. + +@strong{Use 'drm.debug=0x06' kernel parameter when booting in grub!} + +Before each test run, boot a live USB and delete the old logs in /var/log (kernel log, xorg log, dmesg and so on). + +Load (from the ROM) the runningvga.bin for each LCD panel on each system; do not execute it, only load it! (coreboot will have to be modified). Rename the ROM appropriately, based on the system name and the panel name. coreboot_nativegfx_5868_plusrunningvga_t60_14_LTD141ECMB.rom, for instance. Keep a copy for later use. + +You are supposed to: + +@itemize +@item +enable native graphics in menuconfig +@item +include the self-modified VGA ROM (load, but not execute) - for reverse engineering the correct VBT tables. +@end itemize + +With each boot, make notes about what you see and get logs using the @ref{#standard_test,standard test}. You will need the files from @ref{#intelvbttool_results,#intelvbttool_results} for each system. + +Results (# means untested): + +@itemize +@item +@strong{X60/X60s:} +@itemize +@item +TMD-Toshiba LTD121ECHB: # +@item +CMO N121X5-L06: # +@item +Samsung LTN121XJ-L07: # +@item +BOE-Hydis HT121X01-101: # +@end itemize + +@item +@strong{X60T XGA:} +@itemize +@item +BOE-Hydis HV121X03-100: # +@end itemize + +@item +@strong{X60T SXGA+:} +@itemize +@item +BOE-Hydis HV121P01-100: # +@end itemize + +@item +@strong{T60 14" XGA:} +@itemize +@item +Samsung LTN141XA-L01: # +@item +CMO N141XC: # +@item +BOE-Hydis HT14X14: # +@item +TMD-Toshiba LTD141ECMB: # +@end itemize + +@item +@strong{T60 14" SXGA+} +@itemize +@item +TMD-Toshiba LTD141EN9B: # +@item +Samsung LTN141P4-L02: # +@item +Boe-Hydis HT14P12: # +@end itemize + +@item +@strong{T60 15" XGA} +@itemize +@item +Samsung LTN150XG-L08: # +@item +LG-Philips LP150X09: # +@item +13N7068 (IDtech): # +@item +13N7069 (CMO): # +@end itemize + +@item +@strong{T60 15" SXGA+} +@itemize +@item +LG-Philips LP150E05-A2K1: # +@item +BOE-Hydis HV150P01-100: # +@end itemize + +@item +@strong{T60 15" UXGA} +@itemize +@item +BOE-Hydis HV150UX1-100: # +@item +IDTech N150U3-L01: # +@item +BOE-Hydis HV150UX1-102: # +@end itemize + +@item +@strong{T50 15" QXGA} +@itemize +@item +IDtech IAQX10N: # +@item +IDtech IAQX10S: # +@end itemize + +@end itemize + +@ref{#pagetop,Back to top of page} + +@node intelvbttool test results VGA ROM dumps +@chapter intelvbttool test results (VGA ROM dumps) +@anchor{#intelvbttool-test-results-vga-rom-dumps} +The VBIOS on i945 (intel gpu) platforms is self-modifying; that is, its contents change when you run it. intelvbttool takes a dump of the currently running vbios, and parses it. + +The idea is that we can extract the VBT tables using this knowledge, on the X60, X60 Tablet and T60 (Intel GPU). + +Here is an example of how VBT was implemented on the ThinkPad X230: @uref{http://review.coreboot.org/#/c/5396,http://review.coreboot.org/#/c/5396}. + +You'll need to build a T60 ROM with SeaBIOS and the VGA ROM (for Intel GPU). An X60 ROM is also needed (same configuration, using the VGA ROM for X60). + +T60 has DVI on its dock, make sure that the dock is attached when getting this output. + +Get intelvbttool here: @uref{http://review.coreboot.org/#/c/5842,http://review.coreboot.org/#/c/5842} (util/intelvbttool). + +Now dump a copy of the running VGA BIOS: @strong{$ sudo dd if=/dev/mem bs=64k of=runningvga.bin skip=12 count=1}@* Then do (and record the output):@* @strong{$ ./intelvbttool runningvga.bin > intelvbttool_out} + +Backup both files (runningvga.bin and intelvbttool_out), renaming them to match the system and LCD panel used. @uref{../misc/index.html#get_edid_panelname,../misc/index.html#get_edid_panelname} will show you how to get the name (model) of the LCD panel used. +@menu +* Test results # means untested and all had docks unless noted:: +@end menu + +@node Test results # means untested and all had docks unless noted +@section Test results (# means untested and all had docks, unless noted). +@anchor{#test-results-means-untested-and-all-had-docks-unless-noted.} +@itemize +@item +@strong{X60/X60s:} +@itemize +@item +TMD-Toshiba LTD121ECHB: # +@item +CMO N121X5-L06: # +@item +Samsung LTN121XJ-L07: # +@item +BOE-Hydis HT121X01-101: # +@end itemize + +@item +@strong{X60T XGA (1024x768):} +@itemize +@item +BOE-Hydis HV121X03-100: # +@end itemize + +@item +@strong{X60T SXGA+ (1400x1050):} +@itemize +@item +BOE-Hydis HV121P01-100: # +@end itemize + +@item +@strong{T60 14" XGA (1024x768):} +@itemize +@item +Samsung LTN141XA-L01: # +@item +CMO N141XC: # +@item +BOE-Hydis HT14X14: # +@item +TMD-Toshiba LTD141ECMB: # +@end itemize + +@item +@strong{T60 14" SXGA+ (1400x1050):} +@itemize +@item +TMD-Toshiba LTD141EN9B: # +@item +Samsung LTN141P4-L02: # +@item +Boe-Hydis HT14P12: # +@end itemize + +@item +@strong{T60 15" XGA (1024x768):} +@itemize +@item +Samsung LTN150XG-L08: # +@item +LG-Philips LP150X09: # +@item +13N7068 (IDtech): # +@item +13N7069 (CMO): # +@end itemize + +@item +@strong{T60 15" SXGA+ (1400x1050):} +@itemize +@item +LG-Philips LP150E05-A2K1: # +@item +BOE-Hydis HV150P01-100: # +@end itemize + +@item +@strong{T60 15" UXGA (1600x1200):} +@itemize +@item +BOE-Hydis HV150UX1-100: # +@item +IDTech N150U3-L01: # +@item +BOE-Hydis HV150UX1-102: # +@end itemize + +@item +@strong{T60 15" QXGA (2048x1536):} +@itemize +@item +IDtech IAQX10N: # +@item +IDtech IAQX10S: # +@end itemize + +@end itemize + +@ref{#pagetop,Back to top of page.} + +@node Fallback patches +@chapter Fallback patches +@anchor{#fallback-patches} +@itemize +@item +Todo: test gnutoo's fallback patches: @uref{http://www.coreboot.org/Fallback_mechanism,http://www.coreboot.org/Fallback_mechanism} (some parts use systemd. adapt for upstart, which is what trisquel uses)@* see @uref{gnutoo_fallback_patch,this IRC log} (warning, not cleaned up) +@end itemize + +@ref{#pagetop,Back to top of page.} + +@node Other - unlisted low priority +@chapter Other - unlisted (low priority) +@anchor{#other---unlisted-low-priority} +@itemize +@item +PTE errors still exist on i945 with 6718 (which is merged). @uref{http://review.coreboot.org/#/c/6718/,http://review.coreboot.org/#/c/6718/} +@itemize +@item +@uref{future/dumps/pte_x60_6718/dmesg,dmesg} +@item +@uref{future/dumps/pte_x60_6718/kern.log,kern.log} +@item +This doesn't seem to cause any issues for general use. +@end itemize + +@item +Implement INT 10H support in i945 native graphics. (this will be a lot of work. SeaBIOS has code for some geode boards, to get a general idea). +@item +T60 15" QXGA (2048x1536): fixed issue where GRUB wouldn't show any graphics. (Not many people have this panel) +@itemize +@item +It might be the same issue I ran into with Paul on the X60 (not enough memory being allocated) since the same code works on T60 SXGA+ and UXGA, where GRUB actually display graphics. +@end itemize + +@end itemize + +@ref{#pagetop,Back to top of page.} + +Copyright © 2014, 2015 Francis Rowe <info@@gluglug.org.uk>@* Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license can be found at @uref{../gfdl-1.3.txt,../gfdl-1.3.txt} + +Updated versions of the license (when available) can be found at @uref{https://www.gnu.org/licenses/licenses.html,https://www.gnu.org/licenses/licenses.html} + +UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. + +TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. + +The disclaimer of warranties and limitation of liability provided above shall be interpreted in a manner that, to the extent possible, most closely approximates an absolute disclaimer and waiver of all liability. + +@bye diff --git a/docs/future/old.html b/docs/future/old.html @@ -1,319 +0,0 @@ -<!DOCTYPE html> -<html lang="en"> -<head> - <meta charset="utf-8"> - <title>libreboot tutorials</title> - - <style type="text/css"> - @import url('../css/main.css'); - </style> - - <meta name="viewport" content="width=device-width, initial-scale=1.0"> - <meta name="author" content="glugman"> - <meta name="description" content="tutorials for libreboot, the reboot library."> - <meta name="robots" content="all"> -</head> - -<body> - - <div class="section"> - - <h1 id="pagetop">Development notes (old/obsolete notes)</h1> - <p> - For current notes, see <a href="index.html">index.html</a>. - </p> - - <p> - These are old (obsolete) notes that mare kept because they might become useful again in the future. - </p> - - </div> - - <div class="section"> - - <h1>Table of contents</h1> - <ul> - <li><a href="#x60_native_notes">X60 native graphics initialization (backlight controls)</a></li> - <li><a href="#t60_native_notes">T60 native graphics initialization (backlight controls)</a></li> - <li><a href="#5320_kernel312fix">i945: 3D fix (based on 5927) for kernel 3.12+ on 5320</a></li> - <li><a href="#x60_cb5927_testing">i945/x60: coreboot 5927 testing (3D fix for kernel 3.12+ on replay code)</a></li> - </ul> - - </div> - - <div class="section"> - - <h1 id="x60_native_notes">X60 native graphics initialization (with backlight controls)</h1> - - <p> - <b> - This is now obsolete. A better way was found (included in libreboot): <a href="http://review.coreboot.org/#/c/6731/">http://review.coreboot.org/#/c/6731/</a> - </b> - </p> - - <p> - <b><i>Also check <a href="#5320_kernel312fix">#5320_kernel312fix</a> (to fix 3D on kernel 3.12/higher)</i></b> - </p> - <p> - <b>The fix below was done on 5320/6 (from review.coreboot.org) but should work just fine on later versions of 5320.</b> - </p> - <p> - Native gpu init + backlight controls! (Fn keys). Also confirmed on X60 Tablet (1024x768) and X60 Tablet (1400x1050) - </p> - <p> - <b>Add backlight controls:</b> in <i>src/mainboard/lenovo/x60/devicetree.cb</i>, change <b>gpu_backlight</b> to <b>0x879F879E</b> - </p> - <p> - That's all! <b>This has also been backported into libreboot 5th release (line 1233 in src/mainboard/lenovo/x60/i915io.c)</b>. GNUtoo (Denis Carikli) - told me about the register <b>BLC_PWM_CTL</b> and that you could set it to control backlight. I read that address using devmem2 while running the VBIOS:<br/> - <b># devmem2 0xe4361254 w</b> - </p> - <p> - The change is also included in libreboot 6. - </p> - <p> - When doing this, it gave back that value. The same trick was used to get backlight controls for T60 (see <a href="#t60_native_notes">#t60_native_notes</a>). - </p> - - <h2>Further notes</h2> - <p> - Reading <b>0xe4361254</b> (address) in Lenovo BIOS always yields FFFFFFFF, even when writing to it (and writing to it doesn't affect brightness controls). - 'mtjm' on IRC found that the buttons (Fn keys) control /sys/class/backlight/acpi_video0 which has no affect on 61254 (BLC_PWM_CTL). This person says - intel_backlight has different values and uses the register. devmem2 works, needs checking <b>lspci -vv</b> for where the memory is mapped, - which is different than on coreboot; mtjm found that it was 0xec061254 on his system (X60 Tablet), and the register value is different too. - <b>This is relevant, because we still don't know how backlight controls are actually handled. We got it working by accident. We need to know more.</b>. - </p> - <p> - Intel-gpu-tools may prove useful for further debugging: <a href="http://cgit.freedesktop.org/xorg/app/intel-gpu-tools/">http://cgit.freedesktop.org/xorg/app/intel-gpu-tools/</a> - </p> - <p> - mtjm says 0xe4300000 is an MMIO region of the gpu (lspci -vv shows it), 0x61254 (BLC_PWM_CTL) is a documented register. Searching the kernel driver for backlight - shows that in intel_panel.c this register is used (there is an XXX comment about finding the right value, where recent kernels get it from. - </p> - <p> - What we want to do is calculate a good value, instead of setting it in devicetree.cb. mtjm says about backlight physics: - it has a light source , uses pulse width modulation (PWM) to turn it on/off, dimming is done by spending less time on. - <b>Note: this may not be correct; this person says that their understanding is based on how the Lenote yeeloong works</b>. - </p> - <p> - mtjm goes on to say, that the register specifies the frequency used for PWM in its depending on the GPU core frequency, so it - might be possible to calculate it without hardcoded laptop-specific values. Therefore, I am supposed to find out the 'display core frequency' - (mtjm says there might be a register for it; also, it might be in 5320 or the replay code) and the PWM modulation frequency. - https://en.wikipedia.org/wiki/Backlight#Flicker_due_to_backlight_dimming - </p> - <p> - phcoder (Vladimir Serbinenko) who is author of 5320 (review.coreboot.org) talks about 'duty cycle limit' and 'flickering frequency'. - </p> - - <p><a href="#pagetop">Back to top of page</a></p> - - </div> - - <div class="section"> - - <h1 id="t60_native_notes">T60 native graphics initialization (with backlight controls)</h1> - - <p> - <b> - This is now obsolete. A better way was found (included in libreboot): <a href="http://review.coreboot.org/#/c/6731/">http://review.coreboot.org/#/c/6731/</a> - </b> - </p> - <p> - <b><i>Also check <a href="#5320_kernel312fix">#5320_kernel312fix</a> (to fix 3D on kernel 3.12/higher)</i></b> - </p> - <p> - <b>The fix below was done on an earlier version of 5345 changeset (review.coreboot.org), but should work on the current version. it is included in libreboot 6</b> - </p> - <p> - <b>Add backlight controls:</b> in <i>src/mainboard/lenovo/t60/devicetree.cb</i>, change <b>gpu_backlight</b> to <b>0x58BF58BE</b> - </p> - <p> - Hold on! Check <a href="../misc/index.html#get_edid_panelname">../misc/index.html#get_edid_panelname</a> to know what LCD panel you have. This is important for the next step! - </p> - - <h2>Supported panels</h2> - <p> - <a href="../hcl/index.html#supported_t60_list">../hcl/index.html#supported_t60_list</a>. - </p> - - <p> - See <a href="index.html#lcd_i945_incompatibility">index.html#lcd_i945_incompatibility</a>. - </p> - - <p><a href="#pagetop">Back to top of page</a></p> - - </div> - - <div class="section"> - - <h1 id="5320_kernel312fix">i945: 3D fix (based on 5927) for kernel 3.12+ on 5320</h1> - - <p> - <b> - This is now obsolete. Merged in coreboot: <a href="http://review.coreboot.org/#/c/5927/">http://review.coreboot.org/#/c/5927/</a> - </b> - </p> - - <p><b>This needs to be rewritten (or better organized, or deleted?)</b>. This is also now included in libreboot 6 (using the proper way, not the 7c0000 method which was a hack)</p> - - <p> - <b>This was done on 5320/6 so far. The fix below is for 5320/6 which is now obsolete. This needs to be re-done for the latest version - of 5320. The fix below is (in practise) only for reference, therefore.</b> - </p> - - <p> - See <a href="#x60_cb5927_testing">#x60_cb5927_testing</a> for the original (and current) fix, for the replay code. Now we want - to implement that on top of <a href="http://review.coreboot.org/#/c/5320">http://review.coreboot.org/#/c/5320</a> - which is the current code for native graphics initialization on i945. - </p> - - <p> - src/northbridge/intel/i945/gma.c (using the 7c0000 hack) on 5320: <a href="dumps/5320_7c0000_gma.c">5320_7c0000_gma.c</a> (rename it to gma.c, - replacing the current one). - </p> - - <p> - The above is a hack (as is the original). A better (more correct) method is implemented in later versions of 5927, so - that should also be adapted for 5320. For now, you can use the above fix. - </p> - - <p> - The correct way to do it is to set gtt address to (end of stolen memory - gtt size), which is what later versions of 5927 do (successfully). - </p> - - <p> - Here is some debugging output using intel_gpu_tools v1.2-1 (from trisquel repositories) using tool "intel_gtt": - </p> - - <ul> - <li> - Trisquel 6. kernel 3.14.4: - <ul> - <li>with libreboot 5th release (using the 7c0000 gtt hack from 5927/3): <a href="http://paste.debian.net/104306">http://paste.debian.net/104306</a></li> - <li>with coreboot+vgarom: <a href="http://paste.debian.net/104309">http://paste.debian.net/104309</a></li> - </ul> - </li> - <li> - Trisquel 6. kernel 3.2.0-60 (from Trisquel repositories): - <ul> - <li>with coreboot (no vbios or native init): <a href="http://paste.debian.net/104341">http://paste.debian.net/104341</a></li> - </ul> - </li> - </ul> - - <p><a href="#pagetop">Back to top of page</a></p> - - </div> - - <div class="section"> - - <h1 id="x60_cb5927_testing">i945/X60: Coreboot 5927 testing (3D fix for kernel 3.12+ on replay code)</h1> - - <p> - <b> - This is now obsolete. Merged in coreboot: <a href="http://review.coreboot.org/#/c/5927/">http://review.coreboot.org/#/c/5927/</a> - </b> - </p> - - <p><b>The latest version as-is (5927/11) has not been tested by me yet. Always boot with 'drm.debug=0x06' kernel parameter when testing this.</b></p> - - <p> - This is the fix for 3D on kernel 3.12 and higher on i945 (ThinkPad X60 in this case). This is for the replay code. - Libreboot 5th release has a version of this backported already (based on 5927/3 using the '7c0000' hack). - </p> - - <p> - <b> - The replay code is obsolete (see 5320 changeset on review.coreboot.org for better version - which supports more systems/screens, and then 5345 for T60). Information here for reference since that is where the fix was first applied. - </b> - </p> - - <p> - Read the information on <a href="http://review.coreboot.org/#/c/5927/">http://review.coreboot.org/#/c/5927/</a>. - </p> - - <p> - For historical purposes, here is a collection of IRC logs that once existed on this page, related to the issue: - <a href="dumps/kernel312_irc">kernel312_irc</a>. - </p> - - <p> - PGETBL_CTL differs between VBIOS (-) and native graphics init (+).<br/> - - - PGETBL_CTL: 0x3ffc0001<br/> - + PGETBL_CTL: 0x3f800001 - </p> - - <p>GTT (graphics translation table) size is PGETBL_save, max 256 KiB. BSM (Base of Stolen Memory) is given by the bios.</p> - - <ul> - <li>5927/7: <a href="dumps/5927_7.tar.gz">5927_7.tar.gz</a> (GRUB graphics are correct now, and 3D still works)</li> - <li>5927/6: <a href="dumps/5927_6.tar.gz">5927_6.tar.gz</a> (GRUB graphics still corrupt, 3D/everything still works after GRUB)</li> - <li>5927/5: <a href="dumps/5927_5.tar.gz">5927_5.tar.gz</a> (GRUB graphics corrupt, 3D/everything still works after GRUB)</li> - <li>5927/3: <a href="dumps/5927_3.tar.gz">5927_3.tar.gz</a> (3D still works! kernel 3.14.4) - the '7c0000' hack</li> - <li>5927/2: <a href="dumps/5927_2.tar.gz">5927_2.tar.gz</a> (3D works! kernel 3.14.4) - the '7c0000' hack</li> - <li> - 5927/1 (didn't fix the 3D issue): - <ul> - <li><a href="dumps/5927_cbmemc">cbmem -c</a></li> - <li><a href="dumps/5927_crashdump">/sys/class/drm/card0/error</a></li> - <li><a href="dumps/5927_config">.config</a></li> - </ul> - </li> - </ul> - - <p><a href="#pagetop">Back to top of page</a></p> - - </div> - - <div class="section"> - - <p> - Copyright &copy; 2014, 2015 Francis Rowe &lt;info@gluglug.org.uk&gt;<br/> - Permission is granted to copy, distribute and/or modify this document - under the terms of the GNU Free Documentation License, Version 1.3 - or any later version published by the Free Software Foundation; - with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. - A copy of the license can be found at <a href="../gfdl-1.3.txt">../gfdl-1.3.txt</a> - </p> - - <p> - Updated versions of the license (when available) can be found at - <a href="https://www.gnu.org/licenses/licenses.html">https://www.gnu.org/licenses/licenses.html</a> - </p> - - <p> - UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE - EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS - AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF - ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, - IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, - WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR - PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, - ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT - KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT - ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. - </p> - <p> - TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE - TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, - NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, - INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, - COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR - USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN - ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR - DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR - IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. - </p> - <p> - The disclaimer of warranties and limitation of liability provided - above shall be interpreted in a manner that, to the extent - possible, most closely approximates an absolute disclaimer and - waiver of all liability. - </p> - - </div> - -</body> -</html> diff --git a/docs/future/old.texi b/docs/future/old.texi @@ -0,0 +1,203 @@ +\input texinfo +@documentencoding UTF-8 + +@ifnottex +@paragraphindent 0 +@end ifnottex +@titlepage +@title libreboot tutorials +@end titlepage + +@node Top +@top libreboot tutorials + +@menu +* Development notes old/obsolete notes:: +* Table of contents:: +* X60 native graphics initialization with backlight controls:: +* T60 native graphics initialization with backlight controls:: +* i945 3D fix based on 5927 for kernel 312+ on 5320:: +* i945/X60 Coreboot 5927 testing 3D fix for kernel 312+ on replay code:: +@end menu + +@node Development notes old/obsolete notes +@chapter Development notes (old/obsolete notes) +@anchor{#development-notes-oldobsolete-notes} +For current notes, see @uref{index.html,index.html}. + +These are old (obsolete) notes that mare kept because they might become useful again in the future. + +@node Table of contents +@chapter Table of contents +@anchor{#table-of-contents} +@itemize +@item +@ref{#x60_native_notes,X60 native graphics initialization (backlight controls)} +@item +@ref{#t60_native_notes,T60 native graphics initialization (backlight controls)} +@item +@ref{#5320_kernel312fix,i945: 3D fix (based on 5927) for kernel 3.12+ on 5320} +@item +@ref{#x60_cb5927_testing,i945/x60: coreboot 5927 testing (3D fix for kernel 3.12+ on replay code)} +@end itemize + +@node X60 native graphics initialization with backlight controls +@chapter X60 native graphics initialization (with backlight controls) +@anchor{#x60-native-graphics-initialization-with-backlight-controls} +@strong{This is now obsolete. A better way was found (included in libreboot): @uref{http://review.coreboot.org/#/c/6731/,http://review.coreboot.org/#/c/6731/}} + +@strong{@emph{Also check @ref{#5320_kernel312fix,#5320_kernel312fix} (to fix 3D on kernel 3.12/higher)}} + +@strong{The fix below was done on 5320/6 (from review.coreboot.org) but should work just fine on later versions of 5320.} + +Native gpu init + backlight controls! (Fn keys). Also confirmed on X60 Tablet (1024x768) and X60 Tablet (1400x1050) + +@strong{Add backlight controls:} in @emph{src/mainboard/lenovo/x60/devicetree.cb}, change @strong{gpu_backlight} to @strong{0x879F879E} + +That's all! @strong{This has also been backported into libreboot 5th release (line 1233 in src/mainboard/lenovo/x60/i915io.c)}. GNUtoo (Denis Carikli) told me about the register @strong{BLC_PWM_CTL} and that you could set it to control backlight. I read that address using devmem2 while running the VBIOS:@* @strong{# devmem2 0xe4361254 w} + +The change is also included in libreboot 6. + +When doing this, it gave back that value. The same trick was used to get backlight controls for T60 (see @ref{#t60_native_notes,#t60_native_notes}). +@menu +* Further notes:: +@end menu + +@node Further notes +@section Further notes +@anchor{#further-notes} +Reading @strong{0xe4361254} (address) in Lenovo BIOS always yields FFFFFFFF, even when writing to it (and writing to it doesn't affect brightness controls). 'mtjm' on IRC found that the buttons (Fn keys) control /sys/class/backlight/acpi_video0 which has no affect on 61254 (BLC_PWM_CTL). This person says intel_backlight has different values and uses the register. devmem2 works, needs checking @strong{lspci -vv} for where the memory is mapped, which is different than on coreboot; mtjm found that it was 0xec061254 on his system (X60 Tablet), and the register value is different too. @strong{This is relevant, because we still don't know how backlight controls are actually handled. We got it working by accident. We need to know more.}. + +Intel-gpu-tools may prove useful for further debugging: @uref{http://cgit.freedesktop.org/xorg/app/intel-gpu-tools/,http://cgit.freedesktop.org/xorg/app/intel-gpu-tools/} + +mtjm says 0xe4300000 is an MMIO region of the gpu (lspci -vv shows it), 0x61254 (BLC_PWM_CTL) is a documented register. Searching the kernel driver for backlight shows that in intel_panel.c this register is used (there is an XXX comment about finding the right value, where recent kernels get it from. + +What we want to do is calculate a good value, instead of setting it in devicetree.cb. mtjm says about backlight physics: it has a light source , uses pulse width modulation (PWM) to turn it on/off, dimming is done by spending less time on. @strong{Note: this may not be correct; this person says that their understanding is based on how the Lenote yeeloong works}. + +mtjm goes on to say, that the register specifies the frequency used for PWM in its depending on the GPU core frequency, so it might be possible to calculate it without hardcoded laptop-specific values. Therefore, I am supposed to find out the 'display core frequency' (mtjm says there might be a register for it; also, it might be in 5320 or the replay code) and the PWM modulation frequency. https://en.wikipedia.org/wiki/Backlight#Flicker_due_to_backlight_dimming + +phcoder (Vladimir Serbinenko) who is author of 5320 (review.coreboot.org) talks about 'duty cycle limit' and 'flickering frequency'. + +@ref{#pagetop,Back to top of page} + +@node T60 native graphics initialization with backlight controls +@chapter T60 native graphics initialization (with backlight controls) +@anchor{#t60-native-graphics-initialization-with-backlight-controls} +@strong{This is now obsolete. A better way was found (included in libreboot): @uref{http://review.coreboot.org/#/c/6731/,http://review.coreboot.org/#/c/6731/}} + +@strong{@emph{Also check @ref{#5320_kernel312fix,#5320_kernel312fix} (to fix 3D on kernel 3.12/higher)}} + +@strong{The fix below was done on an earlier version of 5345 changeset (review.coreboot.org), but should work on the current version. it is included in libreboot 6} + +@strong{Add backlight controls:} in @emph{src/mainboard/lenovo/t60/devicetree.cb}, change @strong{gpu_backlight} to @strong{0x58BF58BE} + +Hold on! Check @uref{../misc/index.html#get_edid_panelname,../misc/index.html#get_edid_panelname} to know what LCD panel you have. This is important for the next step! +@menu +* Supported panels:: +@end menu + +@node Supported panels +@section Supported panels +@anchor{#supported-panels} +@uref{../hcl/index.html#supported_t60_list,../hcl/index.html#supported_t60_list}. + +See @uref{index.html#lcd_i945_incompatibility,index.html#lcd_i945_incompatibility}. + +@ref{#pagetop,Back to top of page} + +@node i945 3D fix based on 5927 for kernel 312+ on 5320 +@chapter i945: 3D fix (based on 5927) for kernel 3.12+ on 5320 +@anchor{#i945-3d-fix-based-on-5927-for-kernel-3.12-on-5320} +@strong{This is now obsolete. Merged in coreboot: @uref{http://review.coreboot.org/#/c/5927/,http://review.coreboot.org/#/c/5927/}} + +@strong{This needs to be rewritten (or better organized, or deleted?)}. This is also now included in libreboot 6 (using the proper way, not the 7c0000 method which was a hack) + +@strong{This was done on 5320/6 so far. The fix below is for 5320/6 which is now obsolete. This needs to be re-done for the latest version of 5320. The fix below is (in practise) only for reference, therefore.} + +See @ref{#x60_cb5927_testing,#x60_cb5927_testing} for the original (and current) fix, for the replay code. Now we want to implement that on top of @uref{http://review.coreboot.org/#/c/5320,http://review.coreboot.org/#/c/5320} which is the current code for native graphics initialization on i945. + +src/northbridge/intel/i945/gma.c (using the 7c0000 hack) on 5320: @uref{dumps/5320_7c0000_gma.c,5320_7c0000_gma.c} (rename it to gma.c, replacing the current one). + +The above is a hack (as is the original). A better (more correct) method is implemented in later versions of 5927, so that should also be adapted for 5320. For now, you can use the above fix. + +The correct way to do it is to set gtt address to (end of stolen memory - gtt size), which is what later versions of 5927 do (successfully). + +Here is some debugging output using intel_gpu_tools v1.2-1 (from trisquel repositories) using tool "intel_gtt": + +@itemize +@item +Trisquel 6. kernel 3.14.4: +@itemize +@item +with libreboot 5th release (using the 7c0000 gtt hack from 5927/3): @uref{http://paste.debian.net/104306,http://paste.debian.net/104306} +@item +with coreboot+vgarom: @uref{http://paste.debian.net/104309,http://paste.debian.net/104309} +@end itemize + +@item +Trisquel 6. kernel 3.2.0-60 (from Trisquel repositories): +@itemize +@item +with coreboot (no vbios or native init): @uref{http://paste.debian.net/104341,http://paste.debian.net/104341} +@end itemize + +@end itemize + +@ref{#pagetop,Back to top of page} + +@node i945/X60 Coreboot 5927 testing 3D fix for kernel 312+ on replay code +@chapter i945/X60: Coreboot 5927 testing (3D fix for kernel 3.12+ on replay code) +@anchor{#i945x60-coreboot-5927-testing-3d-fix-for-kernel-3.12-on-replay-code} +@strong{This is now obsolete. Merged in coreboot: @uref{http://review.coreboot.org/#/c/5927/,http://review.coreboot.org/#/c/5927/}} + +@strong{The latest version as-is (5927/11) has not been tested by me yet. Always boot with 'drm.debug=0x06' kernel parameter when testing this.} + +This is the fix for 3D on kernel 3.12 and higher on i945 (ThinkPad X60 in this case). This is for the replay code. Libreboot 5th release has a version of this backported already (based on 5927/3 using the '7c0000' hack). + +@strong{The replay code is obsolete (see 5320 changeset on review.coreboot.org for better version which supports more systems/screens, and then 5345 for T60). Information here for reference since that is where the fix was first applied.} + +Read the information on @uref{http://review.coreboot.org/#/c/5927/,http://review.coreboot.org/#/c/5927/}. + +For historical purposes, here is a collection of IRC logs that once existed on this page, related to the issue: @uref{dumps/kernel312_irc,kernel312_irc}. + +PGETBL_CTL differs between VBIOS (-) and native graphics init (+).@* - PGETBL_CTL: 0x3ffc0001@* + PGETBL_CTL: 0x3f800001 + +GTT (graphics translation table) size is PGETBL_save, max 256 KiB. BSM (Base of Stolen Memory) is given by the bios. + +@itemize +@item +5927/7: @uref{dumps/5927_7.tar.gz,5927_7.tar.gz} (GRUB graphics are correct now, and 3D still works) +@item +5927/6: @uref{dumps/5927_6.tar.gz,5927_6.tar.gz} (GRUB graphics still corrupt, 3D/everything still works after GRUB) +@item +5927/5: @uref{dumps/5927_5.tar.gz,5927_5.tar.gz} (GRUB graphics corrupt, 3D/everything still works after GRUB) +@item +5927/3: @uref{dumps/5927_3.tar.gz,5927_3.tar.gz} (3D still works! kernel 3.14.4) - the '7c0000' hack +@item +5927/2: @uref{dumps/5927_2.tar.gz,5927_2.tar.gz} (3D works! kernel 3.14.4) - the '7c0000' hack +@item +5927/1 (didn't fix the 3D issue): +@itemize +@item +@uref{dumps/5927_cbmemc,cbmem -c} +@item +@uref{dumps/5927_crashdump,/sys/class/drm/card0/error} +@item +@uref{dumps/5927_config,.config} +@end itemize + +@end itemize + +@ref{#pagetop,Back to top of page} + +Copyright © 2014, 2015 Francis Rowe <info@@gluglug.org.uk>@* Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license can be found at @uref{../gfdl-1.3.txt,../gfdl-1.3.txt} + +Updated versions of the license (when available) can be found at @uref{https://www.gnu.org/licenses/licenses.html,https://www.gnu.org/licenses/licenses.html} + +UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. + +TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. + +The disclaimer of warranties and limitation of liability provided above shall be interpreted in a manner that, to the extent possible, most closely approximates an absolute disclaimer and waiver of all liability. + +@bye diff --git a/docs/git/index.html b/docs/git/index.html @@ -1,1078 +0,0 @@ -<!DOCTYPE html> -<html> -<head> - <meta charset="utf-8"> - <meta name="viewport" content="width=device-width, initial-scale=1"> - - <style type="text/css"> - @import url('../css/main.css'); - </style> - - <title>Building libreboot from source</title> -</head> - -<body> - - <div class="section"> - <h1 id="pagetop">Building libreboot from source</h1> - <p> - This section relates to building libreboot from source, and - working with the git repository. - </p> - <p> - Or <a href="../index.html">Back to main index</a>. - </p> - <ul> - <li><a href="#build_dependencies">Install build dependencies</a></li> - <li><a href="#build_meta">Get the full source code from metadata (git clone)</a></li> - <li><a href="#build_bucts">How to build &quot;bucts&quot; (for LenovoBIOS X60/X60S/X60T/T60)</a></li> - <li><a href="#build_flashrom">How to build &quot;flashrom&quot;</a></li> - <li> - <a href="#config">Configuring libreboot</a> - <ul> - <li><a href="#config_dmidecode">dmidecode</a></li> - <li> - <a href="#config_grub">GRUB payload</a> - <ul> - <li><a href="#config_kfsn4-dre">ASUS KFSN4-DRE</a></li> - <li><a href="#config_x60">ThinkPad X60, X60S and X60 Tablet</a></li> - <li><a href="#config_t60">ThinkPad T60</a></li> - <li><a href="#config_x200">ThinkPad X200</a></li> - <li><a href="#config_r400">ThinkPad R400</a></li> - <li><a href="#config_r500">ThinkPad R500</a></li> - <li><a href="#config_t400">ThinkPad T400</a></li> - <li><a href="#config_t500">ThinkPad T500</a></li> - <li><a href="#config_macbook21">MacBook2,1</a></li> - <li><a href="#config_qemu_i440fx_piix4">QEMU (x86 i440fx/piix4)</a></li> - <li><a href="#config_qemu_q35_ich9">QEMU (x86 q35/ich9)</a></li> - </ul> - </li> - <li> - <a href="#config_depthcharge">Depthcharge payload</a> - <ul> - <li><a href="#config_c201">ASUS Chromebook C201</a></li> - </ul> - </li> - </ul> - </li> - <li><a href="#build">How to build the ROM images</a></li> - </ul> - </div> - - <div class="section"> - - <h1 id="build_dependencies">Install build dependencies</h1> - - <p> - Before doing anything, you need the dependencies first. This is true if - you want to build libreboot from source, with either libreboot_src.tar.xz or git. - <b>If you are using libreboot_util.tar.xz (binary archive) then you can ignore this, because - ROM images and statically compiled executables for the utilities are included.</b> - </p> - - <div class="important"> - <p> - For Trisquel 7, you can run the following command:<br/> - $ <b>sudo ./build dependencies trisquel7</b> - </p> - <p> - For Parabola, you can run the following command:<br/> - $ <b>sudo ./build dependencies parabola</b><br/> - or:<br/> - # <b>./build dependencies parabola</b> - </p> - </div> - - <p> - For other GNU/Linux distributions, you can adapt the existing scripts. - </p> - - <p><a href="#pagetop">Back to top of page</a></p> - - </div> - - <div class="section"> - - <h1 id="build_meta">Get the full source code from metadata (git clone)</h1> - - <p> - If you downloaded libreboot from git, then there are some steps to download and patch - the source code for all relevant dependencies. The archive in the git repository used to be - available as a tarball called 'libreboot_meta.tar.gz'. It contains 'metadata' (scripts) - which define how the source was created (where it came from). - </p> - - <p> - You can use the scripts included to download everything. - </p> - - <p> - First, <a href="#build_dependencies">install the build dependencies</a>. - </p> - - <p> - Since libreboot makes extensive use of git, you need to configure git properly. If you have not yet configured - git, then the minimum requirement is:<br/> - $ <b>git config --global user.name "Your Name"</b><br/> - $ <b>git config --global user.email your@emailaddress.com</b><br/> - This is what will also appear in git logs if you ever commit your own changes to a given repository. For - more information, see <a href="http://git-scm.com/doc">http://git-scm.com/doc</a>. - </p> - - <p> - Another nice config for you (optional, but recommended):<br/> - $ <b>git config --global core.editor nano</b><br/> - $ <b>git config --global color.status auto</b><br/> - $ <b>git config --global color.branch auto</b><br/> - $ <b>git config --global color.interactive auto</b><br/> - $ <b>git config --global color.diff auto</b> - </p> - - <p> - After that, run the script:<br/> - $ <b>./download all</b> - </p> - - <p> - What this did was download everything (grub, coreboot, memtest86+, bucts, flashrom) - at the versions last tested for this release, and patch them. Read the script - in a text editor to learn more. - </p> - - <p> - To build the ROM images, see <a href="#build">#build</a>. - </p> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="build_bucts">How to build &quot;bucts&quot; (for LenovoBIOS X60/X60S/X60T/T60)</h1> - - <p> - <b>This is for Lenovo BIOS users on the ThinkPad X60/X60S, X60 Tablet and T60. If you have coreboot or libreboot running already, ignore this.</b> - </p> - - <p> - BUC.TS isn't really specific to these laptops, but is a bit inside the a register in the chipset on some Intel systems. - </p> - - <p> - Bucts is needed when flashing in software the X60/X60S/X60T/T60 ROM while Lenovo BIOS is running; - external flashing will be safe regardless. - Each ROM contains identical data inside the two final 64K region in the file*. - This corresponds to the final two 64K regions in the flash chip. Lenovo BIOS will prevent you from writing the - final one, so running &quot;<b>bucts 1</b>&quot; will set the system to boot from the other block instead (which - is writeable along with everything beneath it when using a patched flashrom. see <a href="#build_flashrom">#build_flashrom</a>). - After shutting down and booting up after the first flash of libreboot, - the final 64K block is writeable so you flash the ROM again with an unpatched flashrom and run "<b>bucts 0</b>" to - make the system boot from the normal (highest) block again. - </p> - - <p> - *Libreboot ROM images have identical data in those two 64KiB regions because dd is used to do that, by the build system. - If you're building from upstream (coreboot), you have to do it manually. - </p> - - <p> - BUC.TS is backed up (powered) by the NVRAM battery (or CMOS battery, as some people call it). On thinkpads, - this is typically in a yellow plastic package with the battery inside, connected via power lines to the - mainboard. Removing that battery removes power to BUC.TS, resetting the bit back to 0 (if you previously set - it to 1). - </p> - - <p> - BUC.TS utility is included in libreboot_src.tar.xz and libreboot_util.tar.xz.<br/> - <b>If you downloaded from git, follow <a href="#build_meta">#build_meta</a> before you proceed.</b> - </p> - - <p> - &quot;BUC&quot; means &quot;<b>B</b>ack<b>u</b>p <b>C</b>ontrol&quot; (it's a register) and &quot;TS&quot; means &quot;<b>T</b>op <b>S</b>wap&quot; - (it's a status bit). Hence &quot;bucts&quot; (BUC.TS). TS 1 and TS 0 corresponds to bucts 1 and bucts 0. - </p> - - <p> - If you have the binary release archive, you'll find executables under ./bucts/. Otherwise if you need to build from source, continue reading. - </p> - - <p> - First, <a href="#build_dependencies">install the build dependencies</a>. - </p> - - <p> - To build bucts, do this in the main directory:<br/> - $ <b>./build module bucts</b> - </p> - - <p> - To statically compile it, do this:<br/> - $ <b>./build module bucts static</b> - </p> - - <p> - The &quot;builddeps&quot; script in libreboot_src also makes use of builddeps-bucts. - </p> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="build_flashrom">How to build &quot;flashrom&quot;</h1> - - <p> - Flashrom is the utility for flashing/dumping ROM images. This is what you will use to install libreboot. - </p> - - <p> - Flashrom source code is included in libreboot_src.tar.xz and libreboot_util.tar.xz.<br/> - <b>If you downloaded from git, follow <a href="#build_meta">#build_meta</a> before you proceed.</b> - </p> - - <p> - If you are using the binary release archive, then there are already binaries included - under ./flashrom/. The flashing scripts will try to choose the correct one for you. Otherwise - if you wish to re-build flashrom from source, continue reading. - </p> - - <p> - First, <a href="#build_dependencies">install the build dependencies</a>. - </p> - - <p> - To build it, do the following in the main directory:<br/> - $ <b>./build module flashrom</b> - </p> - - <p> - To statically compile it, do the following in the main directory:<br/> - $ <b>./build module flashrom static</b> - </p> - - <p> - After you've done that, under ./flashrom/ you will find the following executables: - </p> - <ul> - <li> - <b>flashrom</b> - <ul> - <li>For flashing while coreboot or libreboot is running.</li> - </ul> - </li> - <li> - <b>flashrom_lenovobios_sst</b> - <ul> - <li>This is patched for flashing while Lenovo BIOS is running on an X60 or T60 with the SST25VF016B (SST) flash chip.</li> - </ul> - </li> - <li> - <b>flashrom_lenovobios_macronix</b> - <ul> - <li>This is patched for flashing while Lenovo BIOS is running on an X60 or T60 with the MX25L1605D (Macronix) flash chip.</li> - </ul> - </li> - </ul> - - <p> - The &quot;builddeps&quot; script in libreboot_src also makes use of builddeps-flashrom. - </p> - - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="config">Configuring libreboot</h1> - - <p> - Before building a ROM in libreboot (or coreboot, for that matter), you need to configure it. - Configuration files should already be included, so you don't need to do anything. This information - is only for reference. If you are updating or modifying coreboot-libre, and need to update the configs - in any way, refer to <a href="../maintain/index.html#newboard_libreboot">../maintain/index.html#newboard_libreboot</a>. - </p> - - <p> - If you've already built a kernel before, you know how to use this interface. - </p> - - <div class="subsection"> - <h2 id="config_dmidecode"> - dmidecode - </h2> - <p> - There is certain information that can be useful to enter in particular: - </p> - <ul> - <li>Local version string</li> - <li>SMBIOS Serial Number</li> - <li>SMBIOS Manufacturer</li> - <li>SMBIOS Version</li> - <li>SMBIOS Product name</li> - </ul> - <p> - This information can be obtained using:<br/> - <b>$ sudo dmidecode</b><br/> - <b># dmidecode</b> - </p> - <p> - Specifically, it's good practise to enter the same information for libreboot that you found when running this - with the original BIOS or firmware. <b>libreboot has already done this for you. This information is for reference, - in the hope that it will be useful.</b> - </p> - <p> - In practise, this information is useless and you can - just leave it on the defaults that coreboot uses (this - is what libreboot does, on most boards). - </p> - </div> - - <h2 id="config_grub">GRUB payload</h2> - - <p> - GRUB is one of the payloads that libreboot targets. - </p> - - <p> - Configurations are then saved as files called <b>&quot;.config&quot;</b>. Copies of each configuration used - for each system type by the libreboot build scripts are stored in resources/libreboot/config/grub/ - </p> - - <div class="subsection"> - <h3 id="config_kfsn4-dre"> - ASUS KFSN4-DRE configuration (file: resources/libreboot/config/grub/kfsn4-dre/config) - </h3> - <ul> - <li>General setup / Expert mode = <i>enable</i></li> - <li>General / Use CMOS for configuration values = <i>enable</i></li> - <li>Mainboard / Mainboard vendor = <i>ASUS</i></li> - <li>Mainboard / Mainboard model = <i>KFSN4-DRE</i></li> - <li>Mainboard / ROM chip size = <i>1024 KB (1 MB)</i></li> - <li>Chipset / Include CPU microcode in CBFS = <i>Do not include microcode updates</i></li> - <li>Devices / Use native graphics initialization = <i>enable</i></li> - <li> - Display / Keep VESA framebuffer = <i>disable</i> (disable for text-mode graphics, enable for coreboot vesa framebuffer) - <ul> - <li>Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time - to enable coreboot framebuffer for a separate set of ROM images, in each system.</li> - </ul> - </li> - <li>Generic Drivers / USB 2.0 EHCI debug dongle support = <i>Enable</i></li> - <li>Generic Drivers / Enable early (pre-RAM) usbdebug = <i>Enable</i></li> - <li>Generic Drivers / Type of dongle = <i>Net20DC or compatible</i></li> - <li>Generic Drivers / Digitizer = <i>Present</i></li> - - <li>Console / USB dongle console output = <i>enable</i></li> - <li>Payload / Add a payload = <i>An ELF executable payload</i></li> - <li>Payload / Payload path and filename = <i>grub.elf</i></li> - </ul> - <p> - Now go back into Devices: - </p> - <ul> - <li>Devices / Run VGA Option ROMs = <i>disable</i></li> - <li>Devices / Run Option ROMs on PCI devices = <i>disable</i></li> - </ul> - <p> - The resulting .config file was saved as resources/libreboot/config/<b>grub/kfsn4-dre/config</b> and is used by the build - scripts for this system. - </p> - </div> - - <div class="subsection"> - <h3 id="config_x60"> - ThinkPad X60, X60S and X60 Tablet configuration (file: resources/libreboot/config/grub/x60/config) - </h3> - <ul> - <li>General setup / Expert mode = <i>enable</i></li> - <li>General / Use CMOS for configuration values = <i>enable</i></li> - - <li>Mainboard / Mainboard vendor = <i>Lenovo</i></li> - <li>Mainboard / Mainboard model = <i>ThinkPad X60 / X60s / X60t</i></li> - <li>Mainboard / ROM chip size = <i>2048 KB (2 MB)</i></li> - <li>Chipset / Include CPU microcode in CBFS = <i>Do not include microcode updates</i></li> - <li>Devices / Use native graphics initialization = <i>enable</i></li> - <li> - Display / Keep VESA framebuffer = <i>disable</i> (disable for text-mode graphics, enable for coreboot vesa framebuffer) - <ul> - <li>Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time - to enable coreboot framebuffer for a separate set of ROM images, in each system.</li> - </ul> - </li> - <li>Generic Drivers / USB 2.0 EHCI debug dongle support = <i>Enable</i></li> - <li>Generic Drivers / Enable early (pre-RAM) usbdebug = <i>Enable</i></li> - <li>Generic Drivers / Type of dongle = <i>Net20DC or compatible</i></li> - <li>Generic Drivers / Digitizer = <i>Present</i></li> - - <li>Console / USB dongle console output = <i>enable</i></li> - <li>Payload / Add a payload = <i>An ELF executable payload</i></li> - <li>Payload / Payload path and filename = <i>grub.elf</i></li> - </ul> - <p> - Now go back into Devices: - </p> - <ul> - <li>Devices / Run VGA Option ROMs = <i>disable</i></li> - <li>Devices / Run Option ROMs on PCI devices = <i>disable</i></li> - </ul> - <p> - The resulting .config file was saved as resources/libreboot/config/<b>grub/x60/config</b> and is used by the build - scripts for this system. - </p> - <p> - This configuration is used on all variants: X60, X60S and X60 Tablet. - </p> - </div> - - <div class="subsection"> - <h3 id="config_t60"> - ThinkPad T60 configuration (file: resources/libreboot/config/grub/t60/config) - </h3> - <ul> - <li>General setup / Expert mode = <i>enable</i></li> - <li>General setup / Local version string = <i>79ETE7WW (2.27 )</i></li> - <li>General / Use CMOS for configuration values = <i>enable</i></li> - - <li>Mainboard / Mainboard vendor = <i>Lenovo</i></li> - <li>Mainboard / Mainboard model = <i>ThinkPad T60 / T60p</i></li> - <li>Mainboard / ROM chip size = <i>2048 KB (2 MB)</i></li> - <li>System tables / SMBIOS Serial Number = <i>L3DKE06</i></li> - <li>System tables / SMBIOS Version Number = <i>ThinkPad T60</i></li> - <li>System tables / SMBIOS Manufacturer = <i>LENOVO</i></li> - <li>System tables / SMBIOS Product name = <i>1951FEG</i></li> - <li>Chipset / Include CPU microcode in CBFS = <i>Do not include microcode updates</i></li> - <li>Devices / Use native graphics initialization = <i>enable</i></li> - <li> - Display / Keep VESA framebuffer = <i>disable</i> (disable for text-mode graphics, enable for coreboot vesa framebuffer) - <ul> - <li>Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time - to enable coreboot framebuffer for a separate set of ROM images, in each system.</li> - </ul> - </li> - <li>Generic Drivers / USB 2.0 EHCI debug dongle support = <i>Enable</i></li> - <li>Generic Drivers / Enable early (pre-RAM) usbdebug = <i>Enable</i></li> - <li>Generic Drivers / Type of dongle = <i>Net20DC or compatible</i></li> - - <li>Console / USB dongle console output = <i>enable</i></li> - <li>Payload / Add a payload = <i>An ELF executable payload</i></li> - <li>Payload / Payload path and filename = <i>grub.elf</i></li> - </ul> - <p> - Go back into Devices: - </p> - <ul> - <li>Devices / Run VGA Option ROMs = <i>disable</i></li> - <li>Devices / Run Option ROMs on PCI devices = <i>disable</i></li> - </ul> - <p> - The resulting .config file was saved as resources/libreboot/config/<b>grub/t60/config</b> and is used by the build - scripts for this system. - </p> - <p> - It is believed that the motherboards on 14.1&quot; and 15.1&quot; T60s are the same, so the same configuration is used - on both the 14.1&quot; and 15.1&quot; T60s. - </p> - </div> - - <div class="subsection"> - <h3 id="config_x200"> - ThinkPad X200 configuration (file: resources/libreboot/config/grub/x200_4mb/config and resources/libreboot/config/grub/x200_8mb/config) - </h3> - <p> - These are saved as two configs, because there are 2 size flash chips: 4MB or 8MB. - </p> - <ul> - <li>General / Expert mode = <i>enable</i></li> - <li>General / Use CMOS for configuration values = <i>enable</i></li> - - <li>Mainboard / Mainboard vendor = <i>Lenovo</i></li> - <li>Mainboard / Mainboard model = <i>ThinkPad X200</i></li> - <li>Mainboard / ROM chip size = <i>4096 KB (4 MB)</i> or <i>8192 KB (8 MB)</i> depending on flash chip size</li> - <li>Chipset / Include CPU microcode in CBFS = <i>Do not include microcode updates</i></li> - <li>Chipset / Size of CBFS filesystem in ROM = byte size <i>0x7FD000</i> (for 8MB flash chip) or <i>3FD000</i> (for 4MB flash chip)</li> - <li>Devices / Use native graphics initialization = <i>enable</i></li> - <li> - Display / Keep VESA framebuffer = <i>disable</i> (disable for text-mode graphics, enable for coreboot vesa framebuffer) - <ul> - <li>Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time - to enable coreboot framebuffer for a separate set of ROM images, in each system.</li> - </ul> - </li> - <li>Generic Drivers / USB 2.0 EHCI debug dongle support = <i>Enable</i></li> - <li>Generic Drivers / Enable early (pre-RAM) usbdebug = <i>Enable</i></li> - <li>Generic Drivers / Type of dongle = <i>Net20DC or compatible</i></li> - <li>Generic Drivers / Digitizer = <i>Present</i></li> - - <li>Console / USB dongle console output = <i>enable</i></li> - <li>Payload / Add a payload = <i>An ELF executable payload</i></li> - <li>Payload / Payload path and filename = <i>grub.elf</i></li> - </ul> - <p> - Go back and disable option ROMs: - </p> - <ul> - <li>Devices / Run VGA Option ROMs = <i>disable</i></li> - <li>Devices / Run Option ROMs on PCI devices = <i>disable</i></li> - </ul> - <p> - The resulting .config file was saved as resources/libreboot/config/<b>grub/x200_8mb/config</b> and - resources/libreboot/config/<b>grub/x200_4mb/config</b> and is used by the build - scripts for this system. - </p> - </div> - - <div class="subsection"> - <h3 id="config_r400"> - ThinkPad R400 configuration (file: resources/libreboot/config/grub/r400_4mb/config and resources/libreboot/config/grub/r400_8mb/config) - </h3> - <p> - These are saved as two configs, because there are 2 size flash chips: 4MB or 8MB. - </p> - <ul> - <li>General / Expert mode = <i>enable</i></li> - <li>General / Use CMOS for configuration values = <i>enable</i></li> - - <li>Mainboard / Mainboard vendor = <i>Lenovo</i></li> - <li>Mainboard / Mainboard model = <i>ThinkPad R400</i></li> - <li>Mainboard / ROM chip size = <i>4096 KB (4 MB)</i> or <i>8192 KB (8 MB)</i> depending on flash chip size</li> - <li>Chipset / Include CPU microcode in CBFS = <i>Do not include microcode updates</i></li> - <li>Chipset / Size of CBFS filesystem in ROM = byte size <i>0x7FD000</i> (for 8MB flash chip) or <i>3FD000</i> (for 4MB flash chip)</li> - <li>Devices / Use native graphics initialization = <i>enable</i></li> - <li> - Display / Keep VESA framebuffer = <i>disable</i> (disable for text-mode graphics, enable for coreboot vesa framebuffer) - <ul> - <li>Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time - to enable coreboot framebuffer for a separate set of ROM images, in each system.</li> - </ul> - </li> - <li>Generic Drivers / USB 2.0 EHCI debug dongle support = <i>Enable</i></li> - <li>Generic Drivers / Enable early (pre-RAM) usbdebug = <i>Enable</i></li> - <li>Generic Drivers / Type of dongle = <i>Net20DC or compatible</i></li> - - <li>Console / USB dongle console output = <i>enable</i></li> - <li>Payload / Add a payload = <i>An ELF executable payload</i></li> - <li>Payload / Payload path and filename = <i>grub.elf</i></li> - </ul> - <p> - Go back and disable option ROMs: - </p> - <ul> - <li>Devices / Run VGA Option ROMs = <i>disable</i></li> - <li>Devices / Run Option ROMs on PCI devices = <i>disable</i></li> - </ul> - <p> - The resulting .config file was saved as resources/libreboot/config/<b>grub/r400_8mb/config</b> and - resources/libreboot/config/<b>grub/r400_4mb/config</b> and is used by the build - scripts for this system. - </p> - </div> - - <div class="subsection"> - <h3 id="config_r500"> - ThinkPad R500 configuration (file: resources/libreboot/config/grub/r500_4mb/config) - </h3> - <ul> - <li>General / Expert mode = <i>enable</i></li> - <li>General / Use CMOS for configuration values = <i>enable</i></li> - - <li>Mainboard / Mainboard vendor = <i>Lenovo</i></li> - <li>Mainboard / Mainboard model = <i>ThinkPad R500</i></li> - <li>Mainboard / ROM chip size = <i>4096 KB (4 MB)</i></li> - <li>Chipset / Include CPU microcode in CBFS = <i>Do not include microcode updates</i></li> - <li>Chipset / Size of CBFS filesystem in ROM = <i>0x3FF000</i></li> - <li>Devices / Use native graphics initialization = <i>enable</i></li> - <li> - Display / Keep VESA framebuffer = <i>disable</i> (disable for text-mode graphics, enable for coreboot vesa framebuffer) - <ul> - <li>Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time - to enable coreboot framebuffer for a separate set of ROM images, in each system.</li> - </ul> - </li> - <li>Generic Drivers / USB 2.0 EHCI debug dongle support = <i>Enable</i></li> - <li>Generic Drivers / Enable early (pre-RAM) usbdebug = <i>Enable</i></li> - <li>Generic Drivers / Type of dongle = <i>Net20DC or compatible</i></li> - - <li>Console / USB dongle console output = <i>enable</i></li> - <li>Payload / Add a payload = <i>An ELF executable payload</i></li> - <li>Payload / Payload path and filename = <i>grub.elf</i></li> - </ul> - <p> - Go back and disable option ROMs: - </p> - <ul> - <li>Devices / Run VGA Option ROMs = <i>disable</i></li> - <li>Devices / Run Option ROMs on PCI devices = <i>disable</i></li> - </ul> - <p> - The resulting .config file was saved as resources/libreboot/config/<b>grub/r500_4mb/config</b> and is used by the build - scripts for this system. - </p> - </div> - - <div class="subsection"> - <h3 id="config_t400"> - ThinkPad T400 configuration (file: resources/libreboot/config/grub/t400_4mb/config and resources/libreboot/config/grub/t400_8mb/config) - </h3> - <p> - These are saved as two configs, because there are 2 size flash chips: 4MB or 8MB. - </p> - <ul> - <li>General / Expert mode = <i>enable</i></li> - <li>General / Use CMOS for configuration values = <i>enable</i></li> - - <li>Mainboard / Mainboard vendor = <i>Lenovo</i></li> - <li>Mainboard / Mainboard model = <i>ThinkPad T400</i></li> - <li>Mainboard / ROM chip size = <i>4096 KB (4 MB)</i> or <i>8192 KB (8 MB)</i> depending on flash chip size</li> - <li>Chipset / Include CPU microcode in CBFS = <i>Do not include microcode updates</i></li> - <li>Chipset / Size of CBFS filesystem in ROM = byte size <i>0x7FD000</i> (for 8MB flash chip) or <i>3FD000</i> (for 4MB flash chip)</li> - <li>Devices / Use native graphics initialization = <i>enable</i></li> - <li> - Display / Keep VESA framebuffer = <i>disable</i> (disable for text-mode graphics, enable for coreboot vesa framebuffer) - <ul> - <li>Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time - to enable coreboot framebuffer for a separate set of ROM images, in each system.</li> - </ul> - </li> - <li>Generic Drivers / USB 2.0 EHCI debug dongle support = <i>Enable</i></li> - <li>Generic Drivers / Enable early (pre-RAM) usbdebug = <i>Enable</i></li> - <li>Generic Drivers / Type of dongle = <i>Net20DC or compatible</i></li> - - <li>Console / USB dongle console output = <i>enable</i></li> - <li>Payload / Add a payload = <i>An ELF executable payload</i></li> - <li>Payload / Payload path and filename = <i>grub.elf</i></li> - </ul> - <p> - Go back and disable option ROMs: - </p> - <ul> - <li>Devices / Run VGA Option ROMs = <i>disable</i></li> - <li>Devices / Run Option ROMs on PCI devices = <i>disable</i></li> - </ul> - <p> - The resulting .config file was saved as resources/libreboot/config/<b>grub/t400_8mb/config</b> and - resources/libreboot/config/<b>grub/t400_4mb/config</b> and is used by the build - scripts for this system. - </p> - </div> - - <div class="subsection"> - <h3 id="config_t500"> - ThinkPad T500 configuration (file: resources/libreboot/config/grub/t500_4mb/config and resources/libreboot/config/grub/t500_8mb/config) - </h3> - <p> - These are saved as two configs, because there are 2 size flash chips: 4MB or 8MB. - </p> - <ul> - <li>General / Expert mode = <i>enable</i></li> - <li>General / Use CMOS for configuration values = <i>enable</i></li> - - <li>Mainboard / Mainboard vendor = <i>Lenovo</i></li> - <li>Mainboard / Mainboard model = <i>ThinkPad T500</i></li> - <li>Mainboard / ROM chip size = <i>4096 KB (4 MB)</i> or <i>8192 KB (8 MB)</i> depending on flash chip size</li> - <li>Chipset / Include CPU microcode in CBFS = <i>Do not include microcode updates</i></li> - <li>Chipset / Size of CBFS filesystem in ROM = byte size <i>0x7FD000</i> (for 8MB flash chip) or <i>3FD000</i> (for 4MB flash chip)</li> - <li>Devices / Use native graphics initialization = <i>enable</i></li> - <li> - Display / Keep VESA framebuffer = <i>disable</i> (disable for text-mode graphics, enable for coreboot vesa framebuffer) - <ul> - <li>Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time - to enable coreboot framebuffer for a separate set of ROM images, in each system.</li> - </ul> - </li> - <li>Generic Drivers / USB 2.0 EHCI debug dongle support = <i>Enable</i></li> - <li>Generic Drivers / Enable early (pre-RAM) usbdebug = <i>Enable</i></li> - <li>Generic Drivers / Type of dongle = <i>Net20DC or compatible</i></li> - - <li>Console / USB dongle console output = <i>enable</i></li> - <li>Payload / Add a payload = <i>An ELF executable payload</i></li> - <li>Payload / Payload path and filename = <i>grub.elf</i></li> - </ul> - <p> - Go back and disable option ROMs: - </p> - <ul> - <li>Devices / Run VGA Option ROMs = <i>disable</i></li> - <li>Devices / Run Option ROMs on PCI devices = <i>disable</i></li> - </ul> - <p> - The resulting .config file was saved as resources/libreboot/config/<b>grub/t500_8mb/config</b> and - resources/libreboot/config/<b>grub/t500_4mb/config</b> and is used by the build - scripts for this system. - </p> - </div> - - <div class="subsection"> - <h3 id="config_macbook21"> - MacBook2,1 configuration (file: resources/libreboot/config/grub/macbook21/config) - </h3> - <ul> - <li>General / Expert mode = <i>enable</i></li> - <li>General / Local version string = <i>&quot;&nbsp;&nbsp;&nbsp;&nbsp;MB21.88Z.00A5.B07.0706270922&quot;</i> (without the quotes)</li> - <li>General / Use CMOS for configuration values = <i>enable</i></li> - - <li>Mainboard / Mainboard vendor = <i>Apple</i></li> - <li>Mainboard / Mainboard model = <i>Macbook2,1 ICH7 TESTING</i></li> - <li>Mainboard / ROM chip size = <i>2048 KB (2 MB)</i></li> - <li>System tables / SMBIOS Serial Number = <i>W8724XXXXXX</i></li> - <li>System tables / SMBIOS Version Number = <i>1.0</i></li> - <li>System tables / SMBIOS Manufacturer = <i>Apple Inc.</i></li> - <li>System tables / SMBIOS Product Name = <i>MacBook2,1</i></li> - <li>Chipset / Include CPU microcode in CBFS = <i>Do not include microcode updates</i></li> - <li>Devices / Use native graphics initialization = <i>enable</i></li> - <li> - Display / Keep VESA framebuffer = <i>disable</i> (disable for text-mode graphics, enable for coreboot vesa framebuffer) - <ul> - <li>Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time - to enable coreboot framebuffer for a separate set of ROM images, in each system.</li> - </ul> - </li> - <li>Generic Drivers / USB 2.0 EHCI debug dongle support = <i>Enable</i></li> - <li>Generic Drivers / Enable early (pre-RAM) usbdebug = <i>Enable</i></li> - <li>Generic Drivers / Type of dongle = <i></i></li> - - <li>Console / USB dongle console output = <i>enable</i></li> - <li>Payload / Add a payload = <i>An ELF executable payload</i></li> - <li>Payload / Payload path and filename = <i>grub.elf</i></li> - </ul> - <p> - Go back and disable option ROMs: - </p> - <ul> - <li>Devices / Run VGA Option ROMs = <i>disable</i></li> - <li>Devices / Run Option ROMs on PCI devices = <i>disable</i></li> - </ul> - <p> - The resulting .config file was saved as resources/libreboot/config/<b>grub/macbook21/config</b> and is used by the build - scripts for this system. <b>This config is also used for the MacBook1,1</b>. - </p> - </div> - - <div class="subsection"> - <h3 id="config_qemu_i440fx_piix4"> - QEMU (x86 i440fx/piix4) configuration (file: resources/libreboot/config/grub/qemu_i440fx_piix4/config) - </h3> - <ul> - <li>General / Expert mode = <i>enable</i></li> - <li>Mainboard / Mainboard vendor = <i>Emulation</i></li> - <li>Mainboard / Mainboard model = <i>QEMU x86 i440fx/piix4 (aka qemu -M pc)</i></li> - <li>Mainboard / ROM chip size = <i>8192 KB (8 MB)</i></li> - <li>Devices / Use native graphics initialization = <i>enable</i> (should already be enabled)</li> - <li> - Display / Keep VESA framebuffer = <i>enable</i> (disable for text-mode graphics, enable for coreboot vesa framebuffer) - <ul> - <li>Libreboot provides this with framebuffer enabled by default, but it automatically patches a copy of the config at build time - to enable coreboot text-mode for a separate set of ROM images, in each system.</li> - </ul> - </li> - - <li>Payload / Add a payload = <i>An ELF executable payload</i></li> - <li>Payload / Payload path and filename = <i>grub.elf</i></li> - </ul> - <p> - Go back and disable option ROMs: - </p> - <ul> - <li>Devices / Run VGA Option ROMs = <i>disable</i></li> - <li>Devices / Run Option ROMs on PCI devices = <i>disable</i></li> - </ul> - <p> - The resulting .config file was saved as resources/libreboot/config/<b>grub/qemu_i440fx_piix4/config</b> and is used by the build - scripts for this system. - </p> - </div> - - <div class="subsection"> - <h3 id="config_qemu_q35_ich9"> - QEMU (x86 q35/ich9) configuration (file: resources/libreboot/config/grub/qemu_q35_ich9/config) - </h3> - <ul> - <li>General / Expert mode = <i>enable</i></li> - <li>Mainboard / Mainboard vendor = <i>Emulation</i></li> - <li>Mainboard / Mainboard model = <i>QEMU x86 q35/ich9 (aka qemu -M q35)</i></li> - <li>Mainboard / ROM chip size = <i>8192 KB (8 MB)</i></li> - <li>Devices / Use native graphics initialization = <i>enable</i> (should already be enabled)</li> - <li> - Display / Keep VESA framebuffer = <i>enable</i> (disable for text-mode graphics, enable for coreboot vesa framebuffer) - <ul> - <li>Libreboot provides this with framebuffer enabled by default, but it automatically patches a copy of the config at build time - to enable coreboot text-mode for a separate set of ROM images, in each system.</li> - </ul> - </li> - - <li>Payload / Add a payload = <i>An ELF executable payload</i></li> - <li>Payload / Payload path and filename = <i>grub.elf</i></li> - </ul> - <p> - Go back and disable option ROMs: - </p> - <ul> - <li>Devices / Run VGA Option ROMs = <i>disable</i></li> - <li>Devices / Run Option ROMs on PCI devices = <i>disable</i></li> - </ul> - <p> - The resulting .config file was saved as resources/libreboot/config/<b>grub/qemu_q35_ich9/config</b> and is used by the build - scripts for this system. - </p> - </div> - - <h2 id="config_depthcharge">Depthcharge payload</h2> - <p> - Depthcharge is one of the payloads that libreboot targets. - </p> - <p> - Configurations are then saved as files called <b>&quot;.config&quot;</b>. Copies of each configuration used - for each system type by the libreboot build scripts are stored in resources/libreboot/config/depthcharge/ - </p> - <div class="subsection"> - <h3 id="config_c201"> - ASUS Chromebook C201 configuration (file: resources/libreboot/config/depthcharge/veyron_speedy/config) - </h3> - <ul> - <li>Mainboard / Mainboard vendor = <i>Google</i></li> - <li>Mainboard / Mainboard model = <i>Veyron_Speedy</i></li> - <li>Chipset / ChromeOS / Build for ChromeOS = <i>enable</i></li> - <li>Chipset / ChromeOS / Verify firmware with vboot. = <i>disable</i></li> - <li>Payload / Add a payload = <i>An ELF executable payload</i></li> - <li>Payload / Payload path and filename = <i>depthcharge.elf</i></li> - </ul> - <p> - The resulting .config file was saved as resources/libreboot/config/<b>depthcharge/veyron_speedy/config</b> and is used by the build - scripts for this system. - </p> - </div> - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h1 id="build">How to build the ROM images</h1> - - <p>You don't need to do much, as there are scripts already written for you that can build everything automatically.</p> - - <p> - You can build libreboot from source on a 32-bit (i686) or 64-bit (x86_64) system. Recommended (if possible): x86_64. - ASUS KFSN4-DRE has 64-bit CPUs. - On a ThinkPad T60, you can replace the CPU (Core 2 Duo T5600, T7200 or T7600. T5600 recommended) for 64-bit support. - On an X60s, you can replace the board with one that has a Core 2 Duo L7400 (you could also use an X60 Tablet board with the same CPU). - On an X60, you can replace the board with one that has a Core 2 Duo T5600 or T7200 (T5600 is recommended). All MacBook2,1 laptops - are 64-bit, as are all ThinkPad X200, X200S, X200 Tablet, R400, T400 and T500 laptops. Warning: MacBook1,1 laptops are all 32-bit only. - </p> - - <p> - First, <a href="#build_dependencies">install the build dependencies</a>. - </p> - <p> - If you downloaded libreboot from git, refer to <a href="#build_meta">#build_meta</a>. - </p> - - <p> - Build all of the components used in libreboot:<br/> - $ <b>./build module all</b> - </p> - - <p> - You can also build each modules separately, using <i>./build module modulename</i>. - To see the possible values for <i>modulename</i>, use:<br/> - $ <b>./build module list</b> - </p> - - <p> - After that, build the ROM images (for all boards):<br/> - $ <b>./build roms withgrub</b><br/> - Alternatively, you can build for a specific board or set of boards. - For example:<br/> - $ <b>./build roms withgrub x60</b><br/> - $ <b>./build roms withgrub x200_8mb</b><br/> - $ <b>./build roms withgrub x60 x200_8mb</b><br/> - The list of board options can be found by looking at the directory - names in <b>resources/libreboot/config/grub/</b>. - </p> - <p> - For those boards which use the depcharge payload, you must use: - $ <b>./build roms withdepthcharge</b><br/> - You can also build for a specific board or set of boards. For example:<br/> - $ <b>./build roms withdepthcharge veyron_speedy</b> - </p> - - <p> - To clean (reverse) everything, do the following:<br/> - $ <b>./build clean all</b> - </p> - - <p> - The ROM images will be stored under <b>bin/<i>payload</i>/</b>, - where <i>payload</i> could be <i>grub</i>, <i>depthcharge</i>, <i>seabios</i>, or - whatever other payload those images were built for. - </p> - - <div class="subsection"> - - <h2>Preparing release archives (optional)</h2> - - <p> - <b>This is only confirmed to work (tested) in Trisquel 7. Parabola *fails* at this stage - (for now). For all other distros, YMMV.</b> - </p> - - <p> - This is mainly intended for use with the git repository. - These commands will work in the release archive (_src), unless otherwise noted below. - </p> - - <p> - The archives will appear under <i>release/${version}/</i>; - ${version} will either be set using <i>git describe</i> or, - if a <i>version</i> file already exists (_src release archive), - then it will simply re-use that. - </p> - - <p> - Tag the current commit, and that version will appear in both the ${version} - string on the directory under <i>release/</i>, and in the file names of the - archives. Otherwise, whatever git uses for <i>git describe --tags HEAD</i> - will be used. - </p> - - <p> - Utilities (static executables):<br/> - $ <b>./build release util</b> - </p> - <p> - Archive containing flashrom and bucts source code:<br/> - $ <b>./build release tobuild</b> - </p> - <p> - Documentation archive (<b>does not work on _src release archive, only git</b>):<br/> - $ <b>./build release docs</b> - </p> - <p> - ROM image archives:<br/> - $ <b>./build release roms</b> - </p> - <p> - Source code archive:<br/> - $ <b>./build release src</b> - </p> - <p> - SHA512 sums of all other release archives that have been generated:<br/> - $ <b>./build release sha512sums</b> - </p> - - <p> - If you are building on an i686 host, this will build statically linked 32-bit binaries in - the binary release archive that you created, - for: <b>nvramtool, cbfstool, ich9deblob, cbmem</b>. - </p> - - <p> - If you are building on an x86_64 host, this will build statically linked 32- *and* 64-bit binaries for - <b>cbmem</b>, <b>ich9deblob</b>, <b>cbfstool</b> and <b>nvramtool</b>. - </p> - <p> - <b>To include statically linked i686 and x86_64 binaries for bucts and flashrom, - you will need to build them on a chroot, a virtual system or a real - system where the host uses each given architecture. These packages are difficult - to cross-compile, and the libreboot project is still figuring out how to deal - with them.</b> - </p> - <p> - The same applies if you want to include statically linked flashrom binaries for ARM. - </p> - - <p> - armv7l binaries (tested on a BeagleBone Black) are also included in libreboot_util, for: - </p> - <ul> - <li>cbfstool</li> - <li>ich9gen</li> - <li>ich9deblob</li> - <li>flashrom</li> - </ul> - - <p> - If you are building binaries on a live system or chroot (for flashrom/bucts), you can use the following to statically link them:<br/> - $ <b>./build module flashrom static</b><br/> - $ <b>./build module bucts static</b> - </p> - - <p> - The same conditions as above apply for ARM (except, building bucts on ARM is pointless, and for flashrom - you only need the normal executable since the lenovobios_sst and _macronix executables are meant - to run on an X60/T60 while lenovo bios is present, working around the security restrictions). - </p> - - <p> - The command that you used for generating the release archives will also run the following command:<br/> - $ <b>./build release tobuild</b><br/> - The archive <b>tobuild.tar.xz</b> will have been created under <b>release/</b>, containing bucts, flashrom and all other required - resources for building them. - </p> - - <p> - You'll find that the files libreboot_util.tar.xz and libreboot_src.tar.xz have been created, under <b>release/</b>. - </p> - - <p> - The ROM images will be stored in separate archives for each system, under <b>release/rom/</b>. - </p> - - </div> - - <p><a href="#pagetop">Back to top of page</a></p> - - </div> - - <div class="section"> - - <p> - Copyright &copy; 2014, 2015 Francis Rowe &lt;info@gluglug.org.uk&gt;<br/> - Permission is granted to copy, distribute and/or modify this document - under the terms of the GNU Free Documentation License, Version 1.3 - or any later version published by the Free Software Foundation; - with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. - A copy of the license can be found at <a href="../gfdl-1.3.txt">../gfdl-1.3.txt</a> - </p> - - <p> - Updated versions of the license (when available) can be found at - <a href="https://www.gnu.org/licenses/licenses.html">https://www.gnu.org/licenses/licenses.html</a> - </p> - - <p> - UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE - EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS - AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF - ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, - IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, - WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR - PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, - ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT - KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT - ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. - </p> - <p> - TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE - TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, - NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, - INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, - COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR - USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN - ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR - DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR - IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. - </p> - <p> - The disclaimer of warranties and limitation of liability provided - above shall be interpreted in a manner that, to the extent - possible, most closely approximates an absolute disclaimer and - waiver of all liability. - </p> - - </div> - -</body> -</html> diff --git a/docs/git/index.texi b/docs/git/index.texi @@ -0,0 +1,947 @@ +\input texinfo +@documentencoding UTF-8 + +@ifnottex +@paragraphindent 0 +@end ifnottex +@titlepage +@title Building libreboot from source +@end titlepage + +@node Top +@top Building libreboot from source + +@menu +* Building libreboot from source:: +* Install build dependencies:: +* Get the full source code from metadata git clone:: +* How to build "bucts" for LenovoBIOS X60/X60S/X60T/T60:: +* How to build "flashrom":: +* Configuring libreboot:: +* How to build the ROM images:: +@end menu + +@node Building libreboot from source +@chapter Building libreboot from source +@anchor{#building-libreboot-from-source} +This section relates to building libreboot from source, and working with the git repository. + +Or @uref{../index.html,Back to main index}. + +@itemize +@item +@ref{#build_dependencies,Install build dependencies} +@item +@ref{#build_meta,Get the full source code from metadata (git clone)} +@item +@ref{#build_bucts,How to build "bucts" (for LenovoBIOS X60/X60S/X60T/T60)} +@item +@ref{#build_flashrom,How to build "flashrom"} +@item +@ref{#config,Configuring libreboot} +@itemize +@item +@ref{#config_dmidecode,dmidecode} +@item +@ref{#config_grub,GRUB payload} +@itemize +@item +@ref{#config_kfsn4-dre,ASUS KFSN4-DRE} +@item +@ref{#config_x60,ThinkPad X60, X60S and X60 Tablet} +@item +@ref{#config_t60,ThinkPad T60} +@item +@ref{#config_x200,ThinkPad X200} +@item +@ref{#config_r400,ThinkPad R400} +@item +@ref{#config_r500,ThinkPad R500} +@item +@ref{#config_t400,ThinkPad T400} +@item +@ref{#config_t500,ThinkPad T500} +@item +@ref{#config_macbook21,MacBook2,1} +@item +@ref{#config_qemu_i440fx_piix4,QEMU (x86 i440fx/piix4)} +@item +@ref{#config_qemu_q35_ich9,QEMU (x86 q35/ich9)} +@end itemize + +@item +@ref{#config_depthcharge,Depthcharge payload} +@itemize +@item +@ref{#config_c201,ASUS Chromebook C201} +@end itemize + +@end itemize + +@item +@ref{#build,How to build the ROM images} +@end itemize + +@node Install build dependencies +@chapter Install build dependencies +@anchor{#install-build-dependencies} +Before doing anything, you need the dependencies first. This is true if you want to build libreboot from source, with either libreboot_src.tar.xz or git. @strong{If you are using libreboot_util.tar.xz (binary archive) then you can ignore this, because ROM images and statically compiled executables for the utilities are included.} + +For Trisquel 7, you can run the following command:@* $ @strong{sudo ./build dependencies trisquel7} + +For Parabola, you can run the following command:@* $ @strong{sudo ./build dependencies parabola}@* or:@* # @strong{./build dependencies parabola} + +For other GNU/Linux distributions, you can adapt the existing scripts. + +@ref{#pagetop,Back to top of page} + +@node Get the full source code from metadata git clone +@chapter Get the full source code from metadata (git clone) +@anchor{#get-the-full-source-code-from-metadata-git-clone} +If you downloaded libreboot from git, then there are some steps to download and patch the source code for all relevant dependencies. The archive in the git repository used to be available as a tarball called 'libreboot_meta.tar.gz'. It contains 'metadata' (scripts) which define how the source was created (where it came from). + +You can use the scripts included to download everything. + +First, @ref{#build_dependencies,install the build dependencies}. + +Since libreboot makes extensive use of git, you need to configure git properly. If you have not yet configured git, then the minimum requirement is:@* $ @strong{git config --global user.name "Your Name"}@* $ @strong{git config --global user.email your@@emailaddress.com}@* This is what will also appear in git logs if you ever commit your own changes to a given repository. For more information, see @uref{http://git-scm.com/doc,http://git-scm.com/doc}. + +Another nice config for you (optional, but recommended):@* $ @strong{git config --global core.editor nano}@* $ @strong{git config --global color.status auto}@* $ @strong{git config --global color.branch auto}@* $ @strong{git config --global color.interactive auto}@* $ @strong{git config --global color.diff auto} + +After that, run the script:@* $ @strong{./download all} + +What this did was download everything (grub, coreboot, memtest86+, bucts, flashrom) at the versions last tested for this release, and patch them. Read the script in a text editor to learn more. + +To build the ROM images, see @ref{#build,#build}. + +@ref{#pagetop,Back to top of page.} + +@node How to build "bucts" for LenovoBIOS X60/X60S/X60T/T60 +@chapter How to build "bucts" (for LenovoBIOS X60/X60S/X60T/T60) +@anchor{#how-to-build-bucts-for-lenovobios-x60x60sx60tt60} +@strong{This is for Lenovo BIOS users on the ThinkPad X60/X60S, X60 Tablet and T60. If you have coreboot or libreboot running already, ignore this.} + +BUC.TS isn't really specific to these laptops, but is a bit inside the a register in the chipset on some Intel systems. + +Bucts is needed when flashing in software the X60/X60S/X60T/T60 ROM while Lenovo BIOS is running; external flashing will be safe regardless. Each ROM contains identical data inside the two final 64K region in the file*. This corresponds to the final two 64K regions in the flash chip. Lenovo BIOS will prevent you from writing the final one, so running "@strong{bucts 1}" will set the system to boot from the other block instead (which is writeable along with everything beneath it when using a patched flashrom. see @ref{#build_flashrom,#build_flashrom}). After shutting down and booting up after the first flash of libreboot, the final 64K block is writeable so you flash the ROM again with an unpatched flashrom and run "@strong{bucts 0}" to make the system boot from the normal (highest) block again. + +*Libreboot ROM images have identical data in those two 64KiB regions because dd is used to do that, by the build system. If you're building from upstream (coreboot), you have to do it manually. + +BUC.TS is backed up (powered) by the NVRAM battery (or CMOS battery, as some people call it). On thinkpads, this is typically in a yellow plastic package with the battery inside, connected via power lines to the mainboard. Removing that battery removes power to BUC.TS, resetting the bit back to 0 (if you previously set it to 1). + +BUC.TS utility is included in libreboot_src.tar.xz and libreboot_util.tar.xz.@* @strong{If you downloaded from git, follow @ref{#build_meta,#build_meta} before you proceed.} + +"BUC" means "@strong{B}ack@strong{u}p @strong{C}ontrol" (it's a register) and "TS" means "@strong{T}op @strong{S}wap" (it's a status bit). Hence "bucts" (BUC.TS). TS 1 and TS 0 corresponds to bucts 1 and bucts 0. + +If you have the binary release archive, you'll find executables under ./bucts/. Otherwise if you need to build from source, continue reading. + +First, @ref{#build_dependencies,install the build dependencies}. + +To build bucts, do this in the main directory:@* $ @strong{./build module bucts} + +To statically compile it, do this:@* $ @strong{./build module bucts static} + +The "builddeps" script in libreboot_src also makes use of builddeps-bucts. + +@ref{#pagetop,Back to top of page.} + +@node How to build "flashrom" +@chapter How to build "flashrom" +@anchor{#how-to-build-flashrom} +Flashrom is the utility for flashing/dumping ROM images. This is what you will use to install libreboot. + +Flashrom source code is included in libreboot_src.tar.xz and libreboot_util.tar.xz.@* @strong{If you downloaded from git, follow @ref{#build_meta,#build_meta} before you proceed.} + +If you are using the binary release archive, then there are already binaries included under ./flashrom/. The flashing scripts will try to choose the correct one for you. Otherwise if you wish to re-build flashrom from source, continue reading. + +First, @ref{#build_dependencies,install the build dependencies}. + +To build it, do the following in the main directory:@* $ @strong{./build module flashrom} + +To statically compile it, do the following in the main directory:@* $ @strong{./build module flashrom static} + +After you've done that, under ./flashrom/ you will find the following executables: + +@itemize +@item +@strong{flashrom} +@itemize +@item +For flashing while coreboot or libreboot is running. +@end itemize + +@item +@strong{flashrom_lenovobios_sst} +@itemize +@item +This is patched for flashing while Lenovo BIOS is running on an X60 or T60 with the SST25VF016B (SST) flash chip. +@end itemize + +@item +@strong{flashrom_lenovobios_macronix} +@itemize +@item +This is patched for flashing while Lenovo BIOS is running on an X60 or T60 with the MX25L1605D (Macronix) flash chip. +@end itemize + +@end itemize + +The "builddeps" script in libreboot_src also makes use of builddeps-flashrom. + +@ref{#pagetop,Back to top of page.} + +@node Configuring libreboot +@chapter Configuring libreboot +@anchor{#configuring-libreboot} +Before building a ROM in libreboot (or coreboot, for that matter), you need to configure it. Configuration files should already be included, so you don't need to do anything. This information is only for reference. If you are updating or modifying coreboot-libre, and need to update the configs in any way, refer to @uref{../maintain/index.html#newboard_libreboot,../maintain/index.html#newboard_libreboot}. + +If you've already built a kernel before, you know how to use this interface. +@menu +* dmidecode:: +* GRUB payload:: +* Depthcharge payload:: +@end menu + +@node dmidecode +@section dmidecode +@anchor{#dmidecode} +There is certain information that can be useful to enter in particular: + +@itemize +@item +Local version string +@item +SMBIOS Serial Number +@item +SMBIOS Manufacturer +@item +SMBIOS Version +@item +SMBIOS Product name +@end itemize + +This information can be obtained using:@* @strong{$ sudo dmidecode}@* @strong{# dmidecode} + +Specifically, it's good practise to enter the same information for libreboot that you found when running this with the original BIOS or firmware. @strong{libreboot has already done this for you. This information is for reference, in the hope that it will be useful.} + +In practise, this information is useless and you can just leave it on the defaults that coreboot uses (this is what libreboot does, on most boards). + +@node GRUB payload +@section GRUB payload +@anchor{#grub-payload} +GRUB is one of the payloads that libreboot targets. + +Configurations are then saved as files called @strong{".config"}. Copies of each configuration used for each system type by the libreboot build scripts are stored in resources/libreboot/config/grub/ +@menu +* ASUS KFSN4-DRE configuration file resources/libreboot/config/grub/kfsn4-dre/config:: +* ThinkPad X60 X60S and X60 Tablet configuration file resources/libreboot/config/grub/x60/config:: +* ThinkPad T60 configuration file resources/libreboot/config/grub/t60/config:: +* ThinkPad X200 configuration file resources/libreboot/config/grub/x200_4mb/config and resources/libreboot/config/grub/x200_8mb/config:: +* ThinkPad R400 configuration file resources/libreboot/config/grub/r400_4mb/config and resources/libreboot/config/grub/r400_8mb/config:: +* ThinkPad R500 configuration file resources/libreboot/config/grub/r500_4mb/config:: +* ThinkPad T400 configuration file resources/libreboot/config/grub/t400_4mb/config and resources/libreboot/config/grub/t400_8mb/config:: +* ThinkPad T500 configuration file resources/libreboot/config/grub/t500_4mb/config and resources/libreboot/config/grub/t500_8mb/config:: +* MacBook21 configuration file resources/libreboot/config/grub/macbook21/config:: +* QEMU x86 i440fx/piix4 configuration file resources/libreboot/config/grub/qemu_i440fx_piix4/config:: +* QEMU x86 q35/ich9 configuration file resources/libreboot/config/grub/qemu_q35_ich9/config:: +@end menu + +@node ASUS KFSN4-DRE configuration file resources/libreboot/config/grub/kfsn4-dre/config +@subsection ASUS KFSN4-DRE configuration (file: resources/libreboot/config/grub/kfsn4-dre/config) +@anchor{#asus-kfsn4-dre-configuration-file-resourceslibrebootconfiggrubkfsn4-dreconfig} +@itemize +@item +General setup / Expert mode = @emph{enable} +@item +General / Use CMOS for configuration values = @emph{enable} +@item +Mainboard / Mainboard vendor = @emph{ASUS} +@item +Mainboard / Mainboard model = @emph{KFSN4-DRE} +@item +Mainboard / ROM chip size = @emph{1024 KB (1 MB)} +@item +Chipset / Include CPU microcode in CBFS = @emph{Do not include microcode updates} +@item +Devices / Use native graphics initialization = @emph{enable} +@item +Display / Keep VESA framebuffer = @emph{disable} (disable for text-mode graphics, enable for coreboot vesa framebuffer) +@itemize +@item +Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time to enable coreboot framebuffer for a separate set of ROM images, in each system. +@end itemize + +@item +Generic Drivers / USB 2.0 EHCI debug dongle support = @emph{Enable} +@item +Generic Drivers / Enable early (pre-RAM) usbdebug = @emph{Enable} +@item +Generic Drivers / Type of dongle = @emph{Net20DC or compatible} +@item +Generic Drivers / Digitizer = @emph{Present} +@item +Console / USB dongle console output = @emph{enable} +@item +Payload / Add a payload = @emph{An ELF executable payload} +@item +Payload / Payload path and filename = @emph{grub.elf} +@end itemize + +Now go back into Devices: + +@itemize +@item +Devices / Run VGA Option ROMs = @emph{disable} +@item +Devices / Run Option ROMs on PCI devices = @emph{disable} +@end itemize + +The resulting .config file was saved as resources/libreboot/config/@strong{grub/kfsn4-dre/config} and is used by the build scripts for this system. + +@node ThinkPad X60 X60S and X60 Tablet configuration file resources/libreboot/config/grub/x60/config +@subsection ThinkPad X60, X60S and X60 Tablet configuration (file: resources/libreboot/config/grub/x60/config) +@anchor{#thinkpad-x60-x60s-and-x60-tablet-configuration-file-resourceslibrebootconfiggrubx60config} +@itemize +@item +General setup / Expert mode = @emph{enable} +@item +General / Use CMOS for configuration values = @emph{enable} +@item +Mainboard / Mainboard vendor = @emph{Lenovo} +@item +Mainboard / Mainboard model = @emph{ThinkPad X60 / X60s / X60t} +@item +Mainboard / ROM chip size = @emph{2048 KB (2 MB)} +@item +Chipset / Include CPU microcode in CBFS = @emph{Do not include microcode updates} +@item +Devices / Use native graphics initialization = @emph{enable} +@item +Display / Keep VESA framebuffer = @emph{disable} (disable for text-mode graphics, enable for coreboot vesa framebuffer) +@itemize +@item +Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time to enable coreboot framebuffer for a separate set of ROM images, in each system. +@end itemize + +@item +Generic Drivers / USB 2.0 EHCI debug dongle support = @emph{Enable} +@item +Generic Drivers / Enable early (pre-RAM) usbdebug = @emph{Enable} +@item +Generic Drivers / Type of dongle = @emph{Net20DC or compatible} +@item +Generic Drivers / Digitizer = @emph{Present} +@item +Console / USB dongle console output = @emph{enable} +@item +Payload / Add a payload = @emph{An ELF executable payload} +@item +Payload / Payload path and filename = @emph{grub.elf} +@end itemize + +Now go back into Devices: + +@itemize +@item +Devices / Run VGA Option ROMs = @emph{disable} +@item +Devices / Run Option ROMs on PCI devices = @emph{disable} +@end itemize + +The resulting .config file was saved as resources/libreboot/config/@strong{grub/x60/config} and is used by the build scripts for this system. + +This configuration is used on all variants: X60, X60S and X60 Tablet. + +@node ThinkPad T60 configuration file resources/libreboot/config/grub/t60/config +@subsection ThinkPad T60 configuration (file: resources/libreboot/config/grub/t60/config) +@anchor{#thinkpad-t60-configuration-file-resourceslibrebootconfiggrubt60config} +@itemize +@item +General setup / Expert mode = @emph{enable} +@item +General setup / Local version string = @emph{79ETE7WW (2.27 )} +@item +General / Use CMOS for configuration values = @emph{enable} +@item +Mainboard / Mainboard vendor = @emph{Lenovo} +@item +Mainboard / Mainboard model = @emph{ThinkPad T60 / T60p} +@item +Mainboard / ROM chip size = @emph{2048 KB (2 MB)} +@item +System tables / SMBIOS Serial Number = @emph{L3DKE06} +@item +System tables / SMBIOS Version Number = @emph{ThinkPad T60} +@item +System tables / SMBIOS Manufacturer = @emph{LENOVO} +@item +System tables / SMBIOS Product name = @emph{1951FEG} +@item +Chipset / Include CPU microcode in CBFS = @emph{Do not include microcode updates} +@item +Devices / Use native graphics initialization = @emph{enable} +@item +Display / Keep VESA framebuffer = @emph{disable} (disable for text-mode graphics, enable for coreboot vesa framebuffer) +@itemize +@item +Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time to enable coreboot framebuffer for a separate set of ROM images, in each system. +@end itemize + +@item +Generic Drivers / USB 2.0 EHCI debug dongle support = @emph{Enable} +@item +Generic Drivers / Enable early (pre-RAM) usbdebug = @emph{Enable} +@item +Generic Drivers / Type of dongle = @emph{Net20DC or compatible} +@item +Console / USB dongle console output = @emph{enable} +@item +Payload / Add a payload = @emph{An ELF executable payload} +@item +Payload / Payload path and filename = @emph{grub.elf} +@end itemize + +Go back into Devices: + +@itemize +@item +Devices / Run VGA Option ROMs = @emph{disable} +@item +Devices / Run Option ROMs on PCI devices = @emph{disable} +@end itemize + +The resulting .config file was saved as resources/libreboot/config/@strong{grub/t60/config} and is used by the build scripts for this system. + +It is believed that the motherboards on 14.1" and 15.1" T60s are the same, so the same configuration is used on both the 14.1" and 15.1" T60s. + +@node ThinkPad X200 configuration file resources/libreboot/config/grub/x200_4mb/config and resources/libreboot/config/grub/x200_8mb/config +@subsection ThinkPad X200 configuration (file: resources/libreboot/config/grub/x200_4mb/config and resources/libreboot/config/grub/x200_8mb/config) +@anchor{#thinkpad-x200-configuration-file-resourceslibrebootconfiggrubx200_4mbconfig-and-resourceslibrebootconfiggrubx200_8mbconfig} +These are saved as two configs, because there are 2 size flash chips: 4MB or 8MB. + +@itemize +@item +General / Expert mode = @emph{enable} +@item +General / Use CMOS for configuration values = @emph{enable} +@item +Mainboard / Mainboard vendor = @emph{Lenovo} +@item +Mainboard / Mainboard model = @emph{ThinkPad X200} +@item +Mainboard / ROM chip size = @emph{4096 KB (4 MB)} or @emph{8192 KB (8 MB)} depending on flash chip size +@item +Chipset / Include CPU microcode in CBFS = @emph{Do not include microcode updates} +@item +Chipset / Size of CBFS filesystem in ROM = byte size @emph{0x7FD000} (for 8MB flash chip) or @emph{3FD000} (for 4MB flash chip) +@item +Devices / Use native graphics initialization = @emph{enable} +@item +Display / Keep VESA framebuffer = @emph{disable} (disable for text-mode graphics, enable for coreboot vesa framebuffer) +@itemize +@item +Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time to enable coreboot framebuffer for a separate set of ROM images, in each system. +@end itemize + +@item +Generic Drivers / USB 2.0 EHCI debug dongle support = @emph{Enable} +@item +Generic Drivers / Enable early (pre-RAM) usbdebug = @emph{Enable} +@item +Generic Drivers / Type of dongle = @emph{Net20DC or compatible} +@item +Generic Drivers / Digitizer = @emph{Present} +@item +Console / USB dongle console output = @emph{enable} +@item +Payload / Add a payload = @emph{An ELF executable payload} +@item +Payload / Payload path and filename = @emph{grub.elf} +@end itemize + +Go back and disable option ROMs: + +@itemize +@item +Devices / Run VGA Option ROMs = @emph{disable} +@item +Devices / Run Option ROMs on PCI devices = @emph{disable} +@end itemize + +The resulting .config file was saved as resources/libreboot/config/@strong{grub/x200_8mb/config} and resources/libreboot/config/@strong{grub/x200_4mb/config} and is used by the build scripts for this system. + +@node ThinkPad R400 configuration file resources/libreboot/config/grub/r400_4mb/config and resources/libreboot/config/grub/r400_8mb/config +@subsection ThinkPad R400 configuration (file: resources/libreboot/config/grub/r400_4mb/config and resources/libreboot/config/grub/r400_8mb/config) +@anchor{#thinkpad-r400-configuration-file-resourceslibrebootconfiggrubr400_4mbconfig-and-resourceslibrebootconfiggrubr400_8mbconfig} +These are saved as two configs, because there are 2 size flash chips: 4MB or 8MB. + +@itemize +@item +General / Expert mode = @emph{enable} +@item +General / Use CMOS for configuration values = @emph{enable} +@item +Mainboard / Mainboard vendor = @emph{Lenovo} +@item +Mainboard / Mainboard model = @emph{ThinkPad R400} +@item +Mainboard / ROM chip size = @emph{4096 KB (4 MB)} or @emph{8192 KB (8 MB)} depending on flash chip size +@item +Chipset / Include CPU microcode in CBFS = @emph{Do not include microcode updates} +@item +Chipset / Size of CBFS filesystem in ROM = byte size @emph{0x7FD000} (for 8MB flash chip) or @emph{3FD000} (for 4MB flash chip) +@item +Devices / Use native graphics initialization = @emph{enable} +@item +Display / Keep VESA framebuffer = @emph{disable} (disable for text-mode graphics, enable for coreboot vesa framebuffer) +@itemize +@item +Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time to enable coreboot framebuffer for a separate set of ROM images, in each system. +@end itemize + +@item +Generic Drivers / USB 2.0 EHCI debug dongle support = @emph{Enable} +@item +Generic Drivers / Enable early (pre-RAM) usbdebug = @emph{Enable} +@item +Generic Drivers / Type of dongle = @emph{Net20DC or compatible} +@item +Console / USB dongle console output = @emph{enable} +@item +Payload / Add a payload = @emph{An ELF executable payload} +@item +Payload / Payload path and filename = @emph{grub.elf} +@end itemize + +Go back and disable option ROMs: + +@itemize +@item +Devices / Run VGA Option ROMs = @emph{disable} +@item +Devices / Run Option ROMs on PCI devices = @emph{disable} +@end itemize + +The resulting .config file was saved as resources/libreboot/config/@strong{grub/r400_8mb/config} and resources/libreboot/config/@strong{grub/r400_4mb/config} and is used by the build scripts for this system. + +@node ThinkPad R500 configuration file resources/libreboot/config/grub/r500_4mb/config +@subsection ThinkPad R500 configuration (file: resources/libreboot/config/grub/r500_4mb/config) +@anchor{#thinkpad-r500-configuration-file-resourceslibrebootconfiggrubr500_4mbconfig} +@itemize +@item +General / Expert mode = @emph{enable} +@item +General / Use CMOS for configuration values = @emph{enable} +@item +Mainboard / Mainboard vendor = @emph{Lenovo} +@item +Mainboard / Mainboard model = @emph{ThinkPad R500} +@item +Mainboard / ROM chip size = @emph{4096 KB (4 MB)} +@item +Chipset / Include CPU microcode in CBFS = @emph{Do not include microcode updates} +@item +Chipset / Size of CBFS filesystem in ROM = @emph{0x3FF000} +@item +Devices / Use native graphics initialization = @emph{enable} +@item +Display / Keep VESA framebuffer = @emph{disable} (disable for text-mode graphics, enable for coreboot vesa framebuffer) +@itemize +@item +Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time to enable coreboot framebuffer for a separate set of ROM images, in each system. +@end itemize + +@item +Generic Drivers / USB 2.0 EHCI debug dongle support = @emph{Enable} +@item +Generic Drivers / Enable early (pre-RAM) usbdebug = @emph{Enable} +@item +Generic Drivers / Type of dongle = @emph{Net20DC or compatible} +@item +Console / USB dongle console output = @emph{enable} +@item +Payload / Add a payload = @emph{An ELF executable payload} +@item +Payload / Payload path and filename = @emph{grub.elf} +@end itemize + +Go back and disable option ROMs: + +@itemize +@item +Devices / Run VGA Option ROMs = @emph{disable} +@item +Devices / Run Option ROMs on PCI devices = @emph{disable} +@end itemize + +The resulting .config file was saved as resources/libreboot/config/@strong{grub/r500_4mb/config} and is used by the build scripts for this system. + +@node ThinkPad T400 configuration file resources/libreboot/config/grub/t400_4mb/config and resources/libreboot/config/grub/t400_8mb/config +@subsection ThinkPad T400 configuration (file: resources/libreboot/config/grub/t400_4mb/config and resources/libreboot/config/grub/t400_8mb/config) +@anchor{#thinkpad-t400-configuration-file-resourceslibrebootconfiggrubt400_4mbconfig-and-resourceslibrebootconfiggrubt400_8mbconfig} +These are saved as two configs, because there are 2 size flash chips: 4MB or 8MB. + +@itemize +@item +General / Expert mode = @emph{enable} +@item +General / Use CMOS for configuration values = @emph{enable} +@item +Mainboard / Mainboard vendor = @emph{Lenovo} +@item +Mainboard / Mainboard model = @emph{ThinkPad T400} +@item +Mainboard / ROM chip size = @emph{4096 KB (4 MB)} or @emph{8192 KB (8 MB)} depending on flash chip size +@item +Chipset / Include CPU microcode in CBFS = @emph{Do not include microcode updates} +@item +Chipset / Size of CBFS filesystem in ROM = byte size @emph{0x7FD000} (for 8MB flash chip) or @emph{3FD000} (for 4MB flash chip) +@item +Devices / Use native graphics initialization = @emph{enable} +@item +Display / Keep VESA framebuffer = @emph{disable} (disable for text-mode graphics, enable for coreboot vesa framebuffer) +@itemize +@item +Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time to enable coreboot framebuffer for a separate set of ROM images, in each system. +@end itemize + +@item +Generic Drivers / USB 2.0 EHCI debug dongle support = @emph{Enable} +@item +Generic Drivers / Enable early (pre-RAM) usbdebug = @emph{Enable} +@item +Generic Drivers / Type of dongle = @emph{Net20DC or compatible} +@item +Console / USB dongle console output = @emph{enable} +@item +Payload / Add a payload = @emph{An ELF executable payload} +@item +Payload / Payload path and filename = @emph{grub.elf} +@end itemize + +Go back and disable option ROMs: + +@itemize +@item +Devices / Run VGA Option ROMs = @emph{disable} +@item +Devices / Run Option ROMs on PCI devices = @emph{disable} +@end itemize + +The resulting .config file was saved as resources/libreboot/config/@strong{grub/t400_8mb/config} and resources/libreboot/config/@strong{grub/t400_4mb/config} and is used by the build scripts for this system. + +@node ThinkPad T500 configuration file resources/libreboot/config/grub/t500_4mb/config and resources/libreboot/config/grub/t500_8mb/config +@subsection ThinkPad T500 configuration (file: resources/libreboot/config/grub/t500_4mb/config and resources/libreboot/config/grub/t500_8mb/config) +@anchor{#thinkpad-t500-configuration-file-resourceslibrebootconfiggrubt500_4mbconfig-and-resourceslibrebootconfiggrubt500_8mbconfig} +These are saved as two configs, because there are 2 size flash chips: 4MB or 8MB. + +@itemize +@item +General / Expert mode = @emph{enable} +@item +General / Use CMOS for configuration values = @emph{enable} +@item +Mainboard / Mainboard vendor = @emph{Lenovo} +@item +Mainboard / Mainboard model = @emph{ThinkPad T500} +@item +Mainboard / ROM chip size = @emph{4096 KB (4 MB)} or @emph{8192 KB (8 MB)} depending on flash chip size +@item +Chipset / Include CPU microcode in CBFS = @emph{Do not include microcode updates} +@item +Chipset / Size of CBFS filesystem in ROM = byte size @emph{0x7FD000} (for 8MB flash chip) or @emph{3FD000} (for 4MB flash chip) +@item +Devices / Use native graphics initialization = @emph{enable} +@item +Display / Keep VESA framebuffer = @emph{disable} (disable for text-mode graphics, enable for coreboot vesa framebuffer) +@itemize +@item +Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time to enable coreboot framebuffer for a separate set of ROM images, in each system. +@end itemize + +@item +Generic Drivers / USB 2.0 EHCI debug dongle support = @emph{Enable} +@item +Generic Drivers / Enable early (pre-RAM) usbdebug = @emph{Enable} +@item +Generic Drivers / Type of dongle = @emph{Net20DC or compatible} +@item +Console / USB dongle console output = @emph{enable} +@item +Payload / Add a payload = @emph{An ELF executable payload} +@item +Payload / Payload path and filename = @emph{grub.elf} +@end itemize + +Go back and disable option ROMs: + +@itemize +@item +Devices / Run VGA Option ROMs = @emph{disable} +@item +Devices / Run Option ROMs on PCI devices = @emph{disable} +@end itemize + +The resulting .config file was saved as resources/libreboot/config/@strong{grub/t500_8mb/config} and resources/libreboot/config/@strong{grub/t500_4mb/config} and is used by the build scripts for this system. + +@node MacBook21 configuration file resources/libreboot/config/grub/macbook21/config +@subsection MacBook2,1 configuration (file: resources/libreboot/config/grub/macbook21/config) +@anchor{#macbook21-configuration-file-resourceslibrebootconfiggrubmacbook21config} +@itemize +@item +General / Expert mode = @emph{enable} +@item +General / Local version string = @emph{"@ @ @ @ MB21.88Z.00A5.B07.0706270922"} (without the quotes) +@item +General / Use CMOS for configuration values = @emph{enable} +@item +Mainboard / Mainboard vendor = @emph{Apple} +@item +Mainboard / Mainboard model = @emph{Macbook2,1 ICH7 TESTING} +@item +Mainboard / ROM chip size = @emph{2048 KB (2 MB)} +@item +System tables / SMBIOS Serial Number = @emph{W8724XXXXXX} +@item +System tables / SMBIOS Version Number = @emph{1.0} +@item +System tables / SMBIOS Manufacturer = @emph{Apple Inc.} +@item +System tables / SMBIOS Product Name = @emph{MacBook2,1} +@item +Chipset / Include CPU microcode in CBFS = @emph{Do not include microcode updates} +@item +Devices / Use native graphics initialization = @emph{enable} +@item +Display / Keep VESA framebuffer = @emph{disable} (disable for text-mode graphics, enable for coreboot vesa framebuffer) +@itemize +@item +Libreboot provides this with text-mode enabled by default, but it automatically patches a copy of the config at build time to enable coreboot framebuffer for a separate set of ROM images, in each system. +@end itemize + +@item +Generic Drivers / USB 2.0 EHCI debug dongle support = @emph{Enable} +@item +Generic Drivers / Enable early (pre-RAM) usbdebug = @emph{Enable} +@item +Generic Drivers / Type of dongle = @emph{} +@item +Console / USB dongle console output = @emph{enable} +@item +Payload / Add a payload = @emph{An ELF executable payload} +@item +Payload / Payload path and filename = @emph{grub.elf} +@end itemize + +Go back and disable option ROMs: + +@itemize +@item +Devices / Run VGA Option ROMs = @emph{disable} +@item +Devices / Run Option ROMs on PCI devices = @emph{disable} +@end itemize + +The resulting .config file was saved as resources/libreboot/config/@strong{grub/macbook21/config} and is used by the build scripts for this system. @strong{This config is also used for the MacBook1,1}. + +@node QEMU x86 i440fx/piix4 configuration file resources/libreboot/config/grub/qemu_i440fx_piix4/config +@subsection QEMU (x86 i440fx/piix4) configuration (file: resources/libreboot/config/grub/qemu_i440fx_piix4/config) +@anchor{#qemu-x86-i440fxpiix4-configuration-file-resourceslibrebootconfiggrubqemu_i440fx_piix4config} +@itemize +@item +General / Expert mode = @emph{enable} +@item +Mainboard / Mainboard vendor = @emph{Emulation} +@item +Mainboard / Mainboard model = @emph{QEMU x86 i440fx/piix4 (aka qemu -M pc)} +@item +Mainboard / ROM chip size = @emph{8192 KB (8 MB)} +@item +Devices / Use native graphics initialization = @emph{enable} (should already be enabled) +@item +Display / Keep VESA framebuffer = @emph{enable} (disable for text-mode graphics, enable for coreboot vesa framebuffer) +@itemize +@item +Libreboot provides this with framebuffer enabled by default, but it automatically patches a copy of the config at build time to enable coreboot text-mode for a separate set of ROM images, in each system. +@end itemize + +@item +Payload / Add a payload = @emph{An ELF executable payload} +@item +Payload / Payload path and filename = @emph{grub.elf} +@end itemize + +Go back and disable option ROMs: + +@itemize +@item +Devices / Run VGA Option ROMs = @emph{disable} +@item +Devices / Run Option ROMs on PCI devices = @emph{disable} +@end itemize + +The resulting .config file was saved as resources/libreboot/config/@strong{grub/qemu_i440fx_piix4/config} and is used by the build scripts for this system. + +@node QEMU x86 q35/ich9 configuration file resources/libreboot/config/grub/qemu_q35_ich9/config +@subsection QEMU (x86 q35/ich9) configuration (file: resources/libreboot/config/grub/qemu_q35_ich9/config) +@anchor{#qemu-x86-q35ich9-configuration-file-resourceslibrebootconfiggrubqemu_q35_ich9config} +@itemize +@item +General / Expert mode = @emph{enable} +@item +Mainboard / Mainboard vendor = @emph{Emulation} +@item +Mainboard / Mainboard model = @emph{QEMU x86 q35/ich9 (aka qemu -M q35)} +@item +Mainboard / ROM chip size = @emph{8192 KB (8 MB)} +@item +Devices / Use native graphics initialization = @emph{enable} (should already be enabled) +@item +Display / Keep VESA framebuffer = @emph{enable} (disable for text-mode graphics, enable for coreboot vesa framebuffer) +@itemize +@item +Libreboot provides this with framebuffer enabled by default, but it automatically patches a copy of the config at build time to enable coreboot text-mode for a separate set of ROM images, in each system. +@end itemize + +@item +Payload / Add a payload = @emph{An ELF executable payload} +@item +Payload / Payload path and filename = @emph{grub.elf} +@end itemize + +Go back and disable option ROMs: + +@itemize +@item +Devices / Run VGA Option ROMs = @emph{disable} +@item +Devices / Run Option ROMs on PCI devices = @emph{disable} +@end itemize + +The resulting .config file was saved as resources/libreboot/config/@strong{grub/qemu_q35_ich9/config} and is used by the build scripts for this system. + +@node Depthcharge payload +@section Depthcharge payload +@anchor{#depthcharge-payload} +Depthcharge is one of the payloads that libreboot targets. + +Configurations are then saved as files called @strong{".config"}. Copies of each configuration used for each system type by the libreboot build scripts are stored in resources/libreboot/config/depthcharge/ +@menu +* ASUS Chromebook C201 configuration file resources/libreboot/config/depthcharge/veyron_speedy/config:: +@end menu + +@node ASUS Chromebook C201 configuration file resources/libreboot/config/depthcharge/veyron_speedy/config +@subsection ASUS Chromebook C201 configuration (file: resources/libreboot/config/depthcharge/veyron_speedy/config) +@anchor{#asus-chromebook-c201-configuration-file-resourceslibrebootconfigdepthchargeveyron_speedyconfig} +@itemize +@item +Mainboard / Mainboard vendor = @emph{Google} +@item +Mainboard / Mainboard model = @emph{Veyron_Speedy} +@item +Chipset / ChromeOS / Build for ChromeOS = @emph{enable} +@item +Chipset / ChromeOS / Verify firmware with vboot. = @emph{disable} +@item +Payload / Add a payload = @emph{An ELF executable payload} +@item +Payload / Payload path and filename = @emph{depthcharge.elf} +@end itemize + +The resulting .config file was saved as resources/libreboot/config/@strong{depthcharge/veyron_speedy/config} and is used by the build scripts for this system. + +@ref{#pagetop,Back to top of page.} + +@node How to build the ROM images +@chapter How to build the ROM images +@anchor{#how-to-build-the-rom-images} +You don't need to do much, as there are scripts already written for you that can build everything automatically. + +You can build libreboot from source on a 32-bit (i686) or 64-bit (x86_64) system. Recommended (if possible): x86_64. ASUS KFSN4-DRE has 64-bit CPUs. On a ThinkPad T60, you can replace the CPU (Core 2 Duo T5600, T7200 or T7600. T5600 recommended) for 64-bit support. On an X60s, you can replace the board with one that has a Core 2 Duo L7400 (you could also use an X60 Tablet board with the same CPU). On an X60, you can replace the board with one that has a Core 2 Duo T5600 or T7200 (T5600 is recommended). All MacBook2,1 laptops are 64-bit, as are all ThinkPad X200, X200S, X200 Tablet, R400, T400 and T500 laptops. Warning: MacBook1,1 laptops are all 32-bit only. + +First, @ref{#build_dependencies,install the build dependencies}. + +If you downloaded libreboot from git, refer to @ref{#build_meta,#build_meta}. + +Build all of the components used in libreboot:@* $ @strong{./build module all} + +You can also build each modules separately, using @emph{./build module modulename}. To see the possible values for @emph{modulename}, use:@* $ @strong{./build module list} + +After that, build the ROM images (for all boards):@* $ @strong{./build roms withgrub}@* Alternatively, you can build for a specific board or set of boards. For example:@* $ @strong{./build roms withgrub x60}@* $ @strong{./build roms withgrub x200_8mb}@* $ @strong{./build roms withgrub x60 x200_8mb}@* The list of board options can be found by looking at the directory names in @strong{resources/libreboot/config/grub/}. + +For those boards which use the depcharge payload, you must use: $ @strong{./build roms withdepthcharge}@* You can also build for a specific board or set of boards. For example:@* $ @strong{./build roms withdepthcharge veyron_speedy} + +To clean (reverse) everything, do the following:@* $ @strong{./build clean all} + +The ROM images will be stored under @strong{bin/@emph{payload}/}, where @emph{payload} could be @emph{grub}, @emph{depthcharge}, @emph{seabios}, or whatever other payload those images were built for. +@menu +* Preparing release archives optional:: +@end menu + +@node Preparing release archives optional +@section Preparing release archives (optional) +@anchor{#preparing-release-archives-optional} +@strong{This is only confirmed to work (tested) in Trisquel 7. Parabola *fails* at this stage (for now). For all other distros, YMMV.} + +This is mainly intended for use with the git repository. These commands will work in the release archive (_src), unless otherwise noted below. + +The archives will appear under @emph{release/$@{version@}/}; $@{version@} will either be set using @emph{git describe} or, if a @emph{version} file already exists (_src release archive), then it will simply re-use that. + +Tag the current commit, and that version will appear in both the $@{version@} string on the directory under @emph{release/}, and in the file names of the archives. Otherwise, whatever git uses for @emph{git describe --tags HEAD} will be used. + +Utilities (static executables):@* $ @strong{./build release util} + +Archive containing flashrom and bucts source code:@* $ @strong{./build release tobuild} + +Documentation archive (@strong{does not work on _src release archive, only git}):@* $ @strong{./build release docs} + +ROM image archives:@* $ @strong{./build release roms} + +Source code archive:@* $ @strong{./build release src} + +SHA512 sums of all other release archives that have been generated:@* $ @strong{./build release sha512sums} + +If you are building on an i686 host, this will build statically linked 32-bit binaries in the binary release archive that you created, for: @strong{nvramtool, cbfstool, ich9deblob, cbmem}. + +If you are building on an x86_64 host, this will build statically linked 32- *and* 64-bit binaries for @strong{cbmem}, @strong{ich9deblob}, @strong{cbfstool} and @strong{nvramtool}. + +@strong{To include statically linked i686 and x86_64 binaries for bucts and flashrom, you will need to build them on a chroot, a virtual system or a real system where the host uses each given architecture. These packages are difficult to cross-compile, and the libreboot project is still figuring out how to deal with them.} + +The same applies if you want to include statically linked flashrom binaries for ARM. + +armv7l binaries (tested on a BeagleBone Black) are also included in libreboot_util, for: + +@itemize +@item +cbfstool +@item +ich9gen +@item +ich9deblob +@item +flashrom +@end itemize + +If you are building binaries on a live system or chroot (for flashrom/bucts), you can use the following to statically link them:@* $ @strong{./build module flashrom static}@* $ @strong{./build module bucts static} + +The same conditions as above apply for ARM (except, building bucts on ARM is pointless, and for flashrom you only need the normal executable since the lenovobios_sst and _macronix executables are meant to run on an X60/T60 while lenovo bios is present, working around the security restrictions). + +The command that you used for generating the release archives will also run the following command:@* $ @strong{./build release tobuild}@* The archive @strong{tobuild.tar.xz} will have been created under @strong{release/}, containing bucts, flashrom and all other required resources for building them. + +You'll find that the files libreboot_util.tar.xz and libreboot_src.tar.xz have been created, under @strong{release/}. + +The ROM images will be stored in separate archives for each system, under @strong{release/rom/}. + +@ref{#pagetop,Back to top of page} + +Copyright © 2014, 2015 Francis Rowe <info@@gluglug.org.uk>@* Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license can be found at @uref{../gfdl-1.3.txt,../gfdl-1.3.txt} + +Updated versions of the license (when available) can be found at @uref{https://www.gnu.org/licenses/licenses.html,https://www.gnu.org/licenses/licenses.html} + +UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. + +TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. + +The disclaimer of warranties and limitation of liability provided above shall be interpreted in a manner that, to the extent possible, most closely approximates an absolute disclaimer and waiver of all liability. + +@bye diff --git a/docs/gnulinux/configuring_parabola.html b/docs/gnulinux/configuring_parabola.html @@ -1,884 +0,0 @@ -<!DOCTYPE html> -<html> -<head> - <meta charset="utf-8"> - <meta name="viewport" content="width=device-width, initial-scale=1"> - - <style type="text/css"> - @import url('../css/main.css'); - </style> - - <title>Configuring Parabola (post-install)</title> -</head> - -<body> - <div class="section"> - <h1 id="pagetop">Configuring Parabola (post-install)</h1> - <p> - Post-installation configuration steps for Parabola GNU/Linux-libre. Parabola is extremely flexible; this is just an example. - </p> - <p> - <a href="index.html">Back to previous index</a> - </p> - </div> - - <div class="section"> - - <h1>Table of Contents</h1> - <ul> - <li> - <a href="#pacman_configure">Configuring pacman</a> - <ul> - <li><a href="#pacman_update">Updating Parabola</a></li> - <li> - <a href="#pacman_maintain">Maintaining Parabola during system updates</a> - <ul> - <li><a href="#pacman_cacheclean">Clearing package cache after updating</a></li> - <li><a href="#pacman_commandequiv">Pacman command equivalents (compared to other package managers)</a></li> - </ul> - </li> - <li><a href="#yourfreedom">your-freedom</a></li> - </ul> - </li> - <li><a href="#useradd">Add a user account</a></li> - <li><a href="#systemd">System D</a></li> - <li><a href="#interesting_repos">Interesting repositories</a></li> - <li> - <a href="#network">Setup a network connection in Parabola</a> - <ul> - <li><a href="#network_hostname">Setting hostname</a></li> - <li><a href="#network_status">Network status</a></li> - <li><a href="#network_devicenames">Network interface names</a></li> - <li><a href="#network_setup">Network setup</a></li> - </ul> - </li> - <li><a href="#system_maintain">System maintenance</a> - important!</li> - <li> - <a href="#desktop">Configuring the desktop</a> - <ul> - <li><a href="#desktop_xorg">Install Xorg</a></li> - <li><a href="#desktop_kblayout">Xorg keyboard layout</a></li> - <li><a href="#desktop_lxde">Install LXDE</a></li> - <li><a href="#lxde_clock">LXDE - clock</a></li> - <li><a href="#lxde_font">LXDE - font</a></li> - <li><a href="#lxde_screenlock">LXDE - screenlock</a></li> - <li><a href="#lxde_automount">LXDE - automounting</a></li> - <li><a href="#lxde_suspend">LXDE - disable suspend</a></li> - <li><a href="#lxde_battery">LXDE - battery monitor</a></li> - <li><a href="#lxde_network">LXDE - network manager</a></li> - </ul> - </li> - </ul> - - </div> - - <div class="section"> - - <p> - While not strictly related to the libreboot project, this guide - is intended to be useful for those interested in installing - Parabola on their libreboot system. - </p> - - <p> - It details configuration steps that I took after installing the base system, - as a follow up to <a href="encrypted_parabola.html">encrypted_parabola.html</a>. - This guide is likely to become obsolete at a later date (due to the volatile - 'rolling-release' model that Arch/Parabola both use), but attempts will be made to maintain it. - </p> - - <p> - <b> - This guide was valid on 2014-09-21. If you see any changes that should to be made at the present date, please get in touch - with the libreboot project! - </b> - </p> - - </div> - - <div class="section"> - - <p> - You do not necessarily have to follow this guide word-for-word; <i>parabola</i> is extremely flexible. - The aim here is to provide a common setup that most users will be happy with. While Parabola - can seem daunting at first glance (especially for new GNU/Linux users), with a simple guide it can provide - all the same usability as Trisquel, without hiding any details from the user. - </p> - - <p> - Paradoxically, as you get more advanced Parabola can actually become <i>easier to use</i> - when you want to set up your system in a special way compared to what most distributions provide. - You will find over time that other distributions tend to <i>get in your way</i>. - </p> - - </div> - - <div class="section"> - - <p> - <b> - This guide assumes that you already have Parabola installed. If you have not yet installed Parabola, - then <a href="encrypted_parabola.html">this guide</a> is highly recommended! - </b> - </p> - - <p> - A lot of the steps in this guide will refer to the Arch wiki. Arch is the upstream distribution that Parabola uses. - Most of this guide will also tell you to read wiki articles, other pages, manuals, and so on. In general it tries - to cherry pick the most useful information but nonetheless you are encouraged to learn as much as possible. - <b>It might take you a few days to fully install your system how you like, depending on how much you need to read. Patience is key, - especially for new users</b>. - </p> - - <p> - The Arch wiki will sometimes use bad language, such as calling the whole system Linux, using the term open-source (or closed-source), - and it will sometimes recommend the use of proprietary software. You need to be careful about this when reading anything on the - Arch wiki. - </p> - - </div> - - <div class="section"> - - <p> - Some of these steps require internet access. I'll go into networking later but for now, I just connected - my system to a switch and did:<br/> - # <b>systemctl start dhcpcd.service</b><br/> - You can stop it later by running:<br/> - # <b>systemctl stop dhcpcd.service</b><br/> - For most people this should be enough, but if you don't have DHCP on your network then you should setup your network connection first:<br/> - <a href="#network">Setup network connection in Parabola</a> - </p> - - </div> - - <div class="section"> - - <h2 id="pacman_configure">Configure pacman</h2> - <p> - pacman (<b>pac</b>kage <b>man</b>ager) is the name of the package management system in Arch, which Parabola - (as a deblobbed parallel effort) also uses. Like with 'apt-get' on debian-based systems like Trisquel, - this can be used to add/remove and update the software on your computer. - </p> - <p> - Based on <a href="https://wiki.parabolagnulinux.org/Installation_Guide#Configure_pacman">https://wiki.parabolagnulinux.org/Installation_Guide#Configure_pacman</a> - and from reading <a href="https://wiki.archlinux.org/index.php/Pacman">https://wiki.archlinux.org/index.php/Pacman</a> (make sure to read and understand this, - it's very important) and - <a href="https://wiki.parabolagnulinux.org/Official_Repositories">https://wiki.parabolagnulinux.org/Official_Repositories</a> - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - - </div> - - <div class="section"> - - <h2 id="pacman_update">Updating Parabola</h2> - <p> - In the end, I didn't change my configuration for pacman. When you are updating, resync with the latest package names/versions:<br/> - # <b>pacman -Syy</b><br/> - (according to the wiki, -Syy is better than Sy because it refreshes the package list even if it appears to be up to date, - which can be useful when switching to another mirror).<br/> - Then, update the system:<br/> - # <b>pacman -Syu</b> - </p> - <p> - <b> - Before installing packages with 'pacman -S', always update first, using the notes above. - </b> - </p> - <p> - Keep an eye out on the output, or read it in /var/log/pacman.log. Sometimes, pacman will show messages - about maintenance steps that you will need to perform with certain files (typically configurations) - after the update. Also, you should check both the Parabola and Arch home pages to see if they mention any issues. - If a new kernel is installed, you should also update to be able to use it (the currently running kernel will - also be fine). It's generally good enough to update Parabola once every week, or maybe twice. As a - rolling release distribution, it's a good idea never to leave your install too outdated; update regularly. This - is simply because of the way the project works; old packages are deleted from the repositories quickly, once they are updated. - A system that hasn't been updated for quite a while will mean potentially more reading of previous posts through the website, - and more maintenance work. - </p> - <p> - The Arch forum can also be useful, if others have the same issue as you (if you encounter issues, that is). The <i>Parabola</i> - IRC channel (#parabola on freenode) can also help you. - </p> - <p> - Due to this and the volatile nature of Parabola/Arch, you should only update when you have at least a couple hours of spare time - in case of issues that need to be resolved. You should never update, for example, if you need your system for an important event, - like a presentation or sending an email to an important person before an allocated deadline, and so on. - </p> - <p> - Relax - packages are well-tested regularly when new updates are made to the repositories. Separate 'testing' repositories - exist for this exact reason. Despite what many people will tell you, Parabola is fairly stable and trouble-free, - so long as you are aware of how to check for issues, and are willing to spend some time fixing issues in - the rare event that they do occur. - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - - </div> - - <div class="section"> - - <h2 id="pacman_maintain">Maintaining Parabola</h2> - <p> - Parabola is a very simple distro, in the sense that you are in full control - and everything is made transparent to you. One consequence is - that you also need to know what you are doing, and what you have done before. In general, keeping notes (such as what I have done - with this page) can be very useful as a reference in the future (if you wanted to re-install it or install the distro - on another computer, for example). - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - <h3 id="pacman_cacheclean">Cleaning the package cache</h3> - <p> - <b> - The following is very important as you continue to use, update and maintain your Parabola system:<br/> - <a href="https://wiki.archlinux.org/index.php/Pacman#Cleaning_the_package_cache">https://wiki.archlinux.org/index.php/Pacman#Cleaning_the_package_cache</a>. - Essentially, this guide talks about a directory that has to be cleaned once in a while, to prevent it from growing too big (it's a cache - of old package information, updated automatically when you do anything in pacman). - </b> - </p> - <p> - To clean out all old packages that are cached:<br/> - # <b>pacman -Sc</b> - </p> - <p> - The wiki cautions that this should be used with care. For example, since older packages are deleted from the repo, - if you encounter issues and want to revert back to an older package then it's useful to have the caches available. - Only do this if you are sure that you won't need it. - </p> - <p> - The wiki also mentions this method for removing everything from the cache, including currently installed packages that are cached:<br/> - # <b>pacman -Scc</b><br/> - This is inadvisable, since it means re-downloading the package again if you wanted to quickly re-install it. This should only be used - when disk space is at a premium. - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - <h3 id="pacman_commandequiv">pacman command equivalents</h3> - <p> - The following table lists other distro package manager commands, and their equivalent in pacman:<br/> - <a href="https://wiki.archlinux.org/index.php/Pacman_Rosetta">https://wiki.archlinux.org/index.php/Pacman_Rosetta</a> - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - - </div> - - <div class="section"> - - <h2 id="yourfreedom">your-freedom</h2> - <p> - your-freedom is a package specific to Parabola, and it is installed by default. What it does is conflict with packages - from Arch that are known to be non-free (proprietary) software. When migrating from Arch (there is a guide on the Parabola - wiki for migrating - converting - an existing Arch system to a Parabola system), installing - your-freedom will also fail if these packages are installed, citing them as conflicts; the recommended solution - is then to delete the offending packages, and continue installing <i>your-freedom</i>. - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - - </div> - - <div class="section"> - - <h2 id="useradd">Add a user</h2> - <p> - Based on <a href="https://wiki.archlinux.org/index.php/Users_and_Groups">https://wiki.archlinux.org/index.php/Users_and_Groups</a>. - </p> - <p> - It is important (for security reasons) to create and use a non-root (non-admin) user account for everyday use. The default 'root' account is intended - only for critical administrative work, since it has complete access to the entire operating system. - </p> - <p> - Read the entire document linked to above, and then continue. - </p> - <p> - Add your user:<br/> - # <b>useradd -m -G wheel -s /bin/bash <i>yourusername</i></b><br/> - Set a password:<br/> - # <b>passwd <i>yourusername</i></b> - </p> - - <p> - Use of the <i>diceware method</i> is recommended, for generating secure passphrases (instead of passwords). - </p> - - <p><a href="#pagetop">Back to top of page</a></p> - - </div> - - <div class="section"> - - <h2 id="systemd">systemd</h2> - <p> - This is the name of the system used for managing services in Parabola. It is a good idea to become familiar with it. - Read <a href="https://wiki.archlinux.org/index.php/systemd">https://wiki.archlinux.org/index.php/systemd</a> - and <a href="https://wiki.archlinux.org/index.php/systemd#Basic_systemctl_usage">https://wiki.archlinux.org/index.php/systemd#Basic_systemctl_usage</a> - to gain a full understanding. <b>This is very important! Make sure to read them.</b> - </p> - <p> - An example of a 'service' could be a webserver (such as lighttpd), or sshd (openssh), dhcp, etc. There are countless others. - </p> - <p> - <a href="https://bbs.archlinux.org/viewtopic.php?pid=1149530#p1149530">https://bbs.archlinux.org/viewtopic.php?pid=1149530#p1149530</a> explains - the background behind the decision by Arch (Parabola's upstream supplier) to use systemd. - </p> - - <p> - The manpage should also help:<br/> - # <b>man systemd</b><br/> - The section on 'unit types' is especially useful. - </p> - - <p> - According to the wiki, systemd 'journal' keeps logs of a size up to 10% of the total size your / partition takes up. - on a 60GB root this would mean 6GB. That's not exactly practical, and can have performance implications later when the - log gets too big. Based on instructions from the wiki, I will reduce the total size of the journal to 50MiB (the wiki - recommends 50MiB). - </p> - <p> - Open /etc/systemd/journald.conf and find the line that says:<br/> - <i>#SystemMaxUse=</i><br/> - Change it to say:<br/> - <i>SystemMaxUse=50M</i> - </p> - <p> - The wiki also recommended a method for forwarding journal output to TTY 12 (accessible by pressing ctrl+alt+f12, - and you use ctrl+alt+[F1-F12] to switch between terminals). I decided not to enable it. - </p> - <p> - Restart journald:<br/> - # <b>systemctl restart systemd-journald</b> - </p> - - <p> - The wiki recommends that if the journal gets too large, you can also simply delete (rm -Rf) everything inside /var/log/journald/* - but recommends backing it up. This shouldn't be necessary, since you already set the size limit above and systemd will automatically - start to delete older records when the journal size reaches it's limit (according to systemd developers). - </p> - - <p> - Finally, the wiki mentions 'temporary' files and the utility for managing them.<br/> - # <b>man systemd-tmpfiles</b><br/> - The command for 'clean' is:<br/> - # <b>systemd-tmpfiles --clean</b><br/> - According to the manpage, this <i>&quot;cleans all files and directories with an age parameter&quot;</i>. - According to the Arch wiki, this reads information in /etc/tmpfiles.d/ and /usr/lib/tmpfiles.d/ - to know what actions to perform. Therefore, it is a good idea to read what's stored in these locations - to get a better understanding. - </p> - <p> - I looked in /etc/tmpfiles.d/ and found that it was empty on my system. However, /usr/lib/tmpfiles.d/ contained some files. - The first one was etc.conf, containing information and a reference to this manpage:<br/> - # <b>man tmpfiles.d</b><br/> - Read that manpage, and then continue studying all the files. - </p> - <p> - The systemd developers tell me that it isn't usually necessary to touch the systemd-tmpfiles utility manually at all. - </p> - - <p><a href="#pagetop">Back to top of page</a></p> - - </div> - - <div class="section"> - - <h2 id="interesting_repos">Interesting repositories</h2> - <p> - Parabola wiki at <a href="https://wiki.parabolagnulinux.org/Repositories#kernels">https://wiki.parabolagnulinux.org/Repositories#kernels</a> - mentions about a repository called [kernels] for custom kernels that aren't in the default base. It might be worth looking into what is available - there, depending on your use case. - </p> - <p> - I enabled it on my system, to see what was in it. Edit /etc/pacman.conf and below the 'extra' section add:<br/> - <i> - [kernels]<br/> - Include = /etc/pacman.d/mirrorlist - </i> - </p> - <p> - Now sync with the repository:<br/> - # <b>pacman -Syy</b> - </p> - <p> - List all available packages in this repository:<br/> - # <b>pacman -Sl kernels</b> - </p> - <p> - In the end, I decided not to install anything from it but I kept the repository enabled regardless. - </p> - <p><a href="#pagetop">Back to top of page.</a></p> - - </div> - - <div class="section"> - - <h2 id="network">Setup a network connection in Parabola</h2> - <p> - Read <a href="https://wiki.archlinux.org/index.php/Configuring_Network">https://wiki.archlinux.org/index.php/Configuring_Network</a>. - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - <h3 id="network_hostname">Set the hostname</h3> - <p> - This should be the same as the hostname that you set in /etc/hostname when installing Parabola. You can also do it with systemd (do so now, if you like):<br/> - # <b>hostnamectl set-hostname <i>yourhostname</i></b><br/> - This writes the specified hostname to /etc/hostname. More information can be found in these manpages:<br/> - # <b>man hostname</b><br/> - # <b>info hostname</b><br/> - # <b>man hostnamectl</b> - </p> - <p> - Add the same hostname to /etc/hosts, on each line. Example:<br/> - <i> - 127.0.0.1 localhost.localdomain localhost <u>myhostname</u><br/> - ::1 localhost.localdomain localhost <u>myhostname</u> - </i> - </p> - <p> - You'll note that I set both lines; the 2nd line is for IPv6. More and more ISPs are providing this now (mine does) - so it's good to be forward-thinking here. - </p> - <p> - The <i>hostname</i> utility is part of the <i>inetutils</i> package and is in core/, installed by default (as part of <i>base</i>). - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - <h3 id="network_status">Network Status</h3> - <p> - According to the Arch wiki, <a href="https://wiki.archlinux.org/index.php/Udev">udev</a> should already detect the ethernet chipset - and load the driver for it automatically at boot time. You can check this in the <i>&quot;Ethernet controller&quot;</i> section - when running this command:<br/> - # <b>lspci -v</b> - </p> - <p> - Look at the remaining sections <i>'Kernel driver in use'</i> and <i>'Kernel modules'</i>. In my case it was as follows:<br/> - <i> - Kernel driver in use: e1000e<br/> - Kernel modules: e1000e - </i> - </p> - <p> - Check that the driver was loaded by issuing <i>dmesg | grep module_name</i>. In my case, I did:<br/> - # <b>dmesg | grep e1000e</b> - </p> - <h3 id="network_devicenames">Network device names</h3> - <p> - According to <a href="https://wiki.archlinux.org/index.php/Configuring_Network#Device_names">https://wiki.archlinux.org/index.php/Configuring_Network#Device_names</a>, - it is important to note that the old interface names like eth0, wlan0, wwan0 and so on no longer apply. Instead, <i>systemd</i> - creates device names starting with en (for enternet), wl (for wifi) and ww (for wwan) with a fixed identifier that systemd automatically generates. - An example device name for your ethernet chipset would be <i>enp0s25</i>, where it is never supposed to change. - </p> - <p> - If you want to enable the old names (eth0, wlan0, wwan0, etc), the Arch wiki recommends - adding <i>net.ifnames=0</i> to your kernel parameters (in libreboot context, this would be accomplished by following the - instructions in <a href="grub_cbfs.html">grub_cbfs.html</a>). - </p> - <p> - For background information, - read <a href="http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/">Predictable Network Interface Names</a> - </p> - <p> - Show device names:<br/> - # <b>ls /sys/class/net</b> - </p> - <p> - Changing the device names is possible (I chose not to do it):<br/> - <a href="https://wiki.archlinux.org/index.php/Configuring_Network#Change_device_name">https://wiki.archlinux.org/index.php/Configuring_Network#Change_device_name</a> - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - <h3 id="network_setup">Network setup</h3> - <p> - I actually chose to ignore most of Networking section on the wiki. Instead, I plan to set up LXDE desktop with the graphical - network-manager client. Here is a list of network managers:<br/> - <a href="https://wiki.archlinux.org/index.php/List_of_applications/Internet#Network_managers">https://wiki.archlinux.org/index.php/List_of_applications/Internet#Network_managers</a>. - If you need to, set a static IP address (temporarily) using the networking guide and the Arch wiki, or start the dhcpcd service in systemd. - NetworkManager will be setup later, after installing LXDE. - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - - </div> - - <div class="section"> - - <h2 id="system_maintain">System Maintenance</h2> - <p> - Read <a href="https://wiki.archlinux.org/index.php/System_maintenance">https://wiki.archlinux.org/index.php/System_maintenance</a> before continuing. - Also read <a href="https://wiki.archlinux.org/index.php/Enhance_system_stability">https://wiki.archlinux.org/index.php/Enhance_system_stability</a>. - <b>This is important, so make sure to read them!</b> - </p> - <p> - Install smartmontools (it can be used to check smart data. HDDs use non-free firmware inside, but it's transparent to you - but the smart data comes from it. Therefore, don't rely on it too much):<br/> - # <b>pacman -S smartmontools</b><br/> - Read <a href="https://wiki.archlinux.org/index.php/S.M.A.R.T.">https://wiki.archlinux.org/index.php/S.M.A.R.T.</a> to learn how to use it. - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - - </div> - - <div class="section"> - - <h2 id="desktop">Configuring the desktop</h2> - <p> - Based on steps from - <a href="https://wiki.archlinux.org/index.php/General_recommendations#Graphical_user_interface">General Recommendations</a> on the Arch wiki. - The plan is to use LXDE and LXDM/LightDM, along with everything else that you would expect on other distributions that provide LXDE - by default. - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - - <div class="subsection"> - <h3 id="desktop_xorg">Installing Xorg</h3> - <p> - Based on <a href="https://wiki.archlinux.org/index.php/Xorg">https://wiki.archlinux.org/index.php/Xorg</a>. - </p> - <p> - Firstly, install it!<br/> - # <b>pacman -S xorg-server</b><br/> - I also recommend installing this (contains lots of useful tools, including <i>xrandr</i>):<br/> - # <b>pacman -S xorg-server-utils</b> - </p> - <p> - Install the driver. For me this was <i>xf86-video-intel</i> on the ThinkPad X60. T60 and macbook11/21 should be the same.<br/> - # <b>pacman -S xf86-video-intel</b><br/> - For other systems you can try:<br/> - # <b>pacman -Ss xf86-video- | less</b><br/> - Combined with looking at your <i>lspci</i> output, you can determine which driver is needed. - By default, Xorg will revert to xf86-video-vesa which is a generic driver and doesn't provide true hardware acceleration. - </p> - <p> - Other drivers (not just video) can be found by looking at the <i>xorg-drivers</i> group:<br/> - # <b>pacman -Sg xorg-drivers</b><br/> - </p> - <p> - Mostly you will rely on a display manager, but in case you ever want to start X without one:<br/> - # <b>pacman -S xorg-xinit</b> - </p> - <p> - &lt;optional&gt;<br/> - &nbsp;&nbsp;&nbsp;Arch wiki recommends installing these, for testing that X works:<br/> - &nbsp;&nbsp;&nbsp;# <b>pacman -S xorg-twm xorg-xclock xterm</b><br/> - &nbsp;&nbsp;&nbsp;Refer to <a href="https://wiki.archlinux.org/index.php/Xinitrc">https://wiki.archlinux.org/index.php/Xinitrc</a>. - and test X:<br/> - &nbsp;&nbsp;&nbsp;# <b>startx</b><br/> - &nbsp;&nbsp;&nbsp;When you are satisfied, type <b><i>exit</i></b> in xterm, inside the X session.<br/> - &nbsp;&nbsp;&nbsp;Uninstall them (clutter. eww): # <b>pacman -S xorg-xinit xorg-twm xorg-xclock xterm</b><br/> - &lt;/optional&gt; - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - </div> - - <div class="subsection"> - <h3 id="desktop_kblayout">Xorg keyboard layout</h3> - <p> - Refer to <a href="https://wiki.archlinux.org/index.php/Keyboard_configuration_in_Xorg">https://wiki.archlinux.org/index.php/Keyboard_configuration_in_Xorg</a>. - </p> - <p> - Xorg uses a different configuration method for keyboard layouts, so you will notice that the layout you - set in /etc/vconsole.conf earlier might not actually be the same in X. - </p> - <p> - To see what layout you currently use, try this on a terminal emulator in X:<br/> - # <b>setxkbmap -print -verbose 10</b> - </p> - <p> - In my case, I wanted to use the Dvorak (UK) keyboard which is quite different from Xorg's default Qwerty (US) layout. - </p> - <p> - I'll just say it now: <i>XkbModel</i> can be <i>pc105</i> in this case (ThinkPad X60, with a 105-key UK keyboard). - If you use an American keyboard (typically 104 keys) you will want to use <i>pc104</i>. - </p> - <p> - <i>XkbLayout</i> in my case would be <i>gb</i>, and <i>XkbVariant</i> would be <i>dvorak</i>. - </p> - <p> - The Arch wiki recommends two different methods for setting the keyboard layout:<br/> - <a href="https://wiki.archlinux.org/index.php/Keyboard_configuration_in_Xorg#Using_X_configuration_files">https://wiki.archlinux.org/index.php/Keyboard_configuration_in_Xorg#Using_X_configuration_files</a> and<br/> - <a href="https://wiki.archlinux.org/index.php/Keyboard_configuration_in_Xorg#Using_localectl">https://wiki.archlinux.org/index.php/Keyboard_configuration_in_Xorg#Using_localectl</a>. - </p> - <p> - In my case, I chose to use the <i>configuration file</i> method:<br/> - Create the file /etc/X11/xorg.conf.d/10-keyboard.conf and put this inside:<br/> - <i> - Section "InputClass"<br/> - &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Identifier "system-keyboard"<br/> - &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;MatchIsKeyboard "on"<br/> - &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Option "XkbLayout" "gb"<br/> - &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Option "XkbModel" "pc105"<br/> - &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Option "XkbVariant" "dvorak"<br/> - EndSection - </i> - </p> - <p> - For you, the steps above may differ if you have a different layout. If you use a US Qwerty keyboard, then - you don't even need to do anything (though it might help, for the sake of being explicit). - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - </div> - - <div class="subsection"> - <h3 id="desktop_lxde">Install LXDE</h3> - <p> - Desktop choice isn't that important to me, so for simplicity I decided to use LXDE. It's lightweight - and does everything that I need. - If you would like to try something different, refer to - <a href="https://wiki.archlinux.org/index.php/Desktop_environment">https://wiki.archlinux.org/index.php/Desktop_environment</a> - </p> - <p> - Refer to <a href="https://wiki.archlinux.org/index.php/LXDE">https://wiki.archlinux.org/index.php/LXDE</a>. - </p> - <p> - Install it, choosing 'all' when asked for the default package list:<br/> - # <b>pacman -S lxde obconf</b> - </p> - <p> - I didn't want the following, so I removed them:<br/> - # <b>pacman -R lxmusic lxtask</b> - </p> - <p> - I also lazily installed all fonts:<br/> - # <b>pacman -S $(pacman -Ssq ttf-)</b> - </p> - <p> - LXDE comes with a terminal. You probably want a browser to go with that; I choose GNU IceCat, part of the <i><a href="https://gnu.org/">GNU project</a></i>:<br/> - # <b>pacman -S icecat</b><br/> - And a mail client:<br/> - # <b>pacman -S icedove</b> - </p> - <p> - In IceCat, go to <i>Preferences :: Advanced</i> and disable <i>GNU IceCat Health Report</i>. - </p> - <p> - I also like to install these:<br/> - # <b>pacman -S xsensors stress htop</b> - </p> - <p> - Enable LXDM (the default display manager, providing a graphical login):<br/> - # <b>systemctl enable lxdm.service</b><br/> - It will start when you boot up the system. To start it now, do:<br/> - # <b>systemctl start lxdm.service</b> - </p> - <p> - Log in with your standard (non-root) user that you created earlier. - It is advisable to also create an xinitrc rule in case you ever want to start lxde without lxdm. - Read <a href="https://wiki.archlinux.org/index.php/Xinitrc">https://wiki.archlinux.org/index.php/Xinitrc</a>. - </p> - <p> - Open LXterminal:<br/> - $ <b>cp /etc/skel/.xinitrc ~</b><br/> - Open .xinitrc and add the following plus a line break at the bottom of the file.<br/> - <i> - # Probably not needed. The same locale info that we set before<br/> - # Based on advice from the LXDE wiki - export LC_ALL=en_GB.UTF-8<br/> - export LANGUAGE=en_GB.UTF-8<br/> - export LANG=en_GB.UTF-8<br/> - <br/> - # Start lxde desktop<br/> - exec startlxde<br/> - </i> - Now make sure that it is executable:<br/> - $ <b>chmod +x .xinitrc</b> - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - </div> - - <div class="subsection"> - <h3 id="lxde_clock">LXDE - clock</h3> - <p> - In <b>Digital Clock Settings</b> (right click the clock) I set the Clock Format to <i>%Y/%m/%d %H:%M:%S</i> - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - </div> - - <div class="subsection"> - <h3 id="lxde_font">LXDE - font</h3> - <p> - NOTE TO SELF: come back to this later. - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - </div> - - <div class="subsection"> - <h3 id="lxde_screenlock">LXDE - screenlock</h3> - <p> - Arch wiki recommends to use <i>xscreensaver</i>:<br/> - # <b>pacman -S xscreensaver</b> - </p> - <p> - Under <i>Preferences :: Screensaver</i> in the LXDE menu, I chose <i>Mode: Blank Screen Only</i>, - setting <i>Blank After</i>, <i>Cycle After</i> and <i>Lock Screen After</i> (checked) to 10 minutes. - </p> - <p> - You can now lock the screen with <i>Logout :: Lock Screen</i> in the LXDE menu. - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - </div> - - <div class="subsection"> - <h3 id="lxde_automount">LXDE - automounting</h3> - <p> - Refer to <a href="https://wiki.archlinux.org/index.php/File_manager_functionality">https://wiki.archlinux.org/index.php/File_manager_functionality</a>. - </p> - <p> - I chose to ignore this for now. NOTE TO SELF: come back to this later. - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - </div> - - <div class="subsection"> - <h3 id="lxde_suspend">LXDE - disable suspend</h3> - <p> - When closing the laptop lid, the system suspends. This is annoying at least to me. - NOTE TO SELF: disable it, then document the steps here. - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - </div> - - <div class="subsection"> - <h3 id="lxde_battery">LXDE - battery monitor</h3> - <p> - Right click lxde panel and <i>Add/Remove Panel Items</i>. Click <i>Add</i> and select <i>Battery Monitor</i>, then click <i>Add</i>. - Close and then right-click the applet and go to <i>Battery Monitor Settings</i>, check the box that says <i>Show Extended Information</i>. - Now click <i>Close</i>. When you hover the cursor over it, it'll show information about the battery. - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - </div> - - <div class="subsection"> - <h3 id="lxde_network">LXDE - Network Manager</h3> - <p> - Refer to <a href="https://wiki.archlinux.org/index.php/LXDE#Network_Management">https://wiki.archlinux.org/index.php/LXDE#Network_Management</a>. - Then I read: <a href="https://wiki.archlinux.org/index.php/NetworkManager">https://wiki.archlinux.org/index.php/NetworkManager</a>. - </p> - <p> - Install Network Manager:<br/> - # <b>pacman -S networkmanager</b> - </p> - <p> - You will also want the graphical applet:<br/> - # <b>pacman -S network-manager-applet</b><br/> - Arch wiki says that an autostart rule will be written at <i>/etc/xdg/autostart/nm-applet.desktop</i> - </p> - <p> - I want to be able to use a VPN at some point, so the wiki tells me to do:<br/> - # <b>pacman -S networkmanager-openvpn</b> - </p> - <p> - LXDE uses openbox, so I refer to:<br/> - <a href="https://wiki.archlinux.org/index.php/NetworkManager#Openbox">https://wiki.archlinux.org/index.php/NetworkManager#Openbox</a>. - </p> - <p> - It tells me for the applet I need:<br/> - # <b>pacman -S xfce4-notifyd gnome-icon-theme</b><br/> - Also, for storing authentication details (wifi) I need:<br/> - # <b>pacman -S gnome-keyring</b> - </p> - <p> - I wanted to quickly enable networkmanager:<br/> - # <b>systemctl stop dhcpcd</b><br/> - # <b>systemctl start NetworkManager</b><br/> - Enable NetworkManager at boot time:<br/> - # <b>systemctl enable NetworkManager</b> - </p> - <p> - Restart LXDE (log out, and then log back in). - </p> - <p> - I added the volume control applet to the panel (right click panel, and add a new applet). - I also later changed the icons to use the gnome icon theme, in <i>lxappearance</i>. - </p> - <p> - <a href="#pagetop">Back to top of page.</a> - </p> - </div> - - </div> - - <div class="section"> - - <p> - Copyright &copy; 2014, 2015 Francis Rowe &lt;info@gluglug.org.uk&gt;<br/> - Permission is granted to copy, distribute and/or modify this document - under the terms of the GNU Free Documentation License, Version 1.3 - or any later version published by the Free Software Foundation; - with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. - A copy of the license can be found at <a href="../gfdl-1.3.txt">../gfdl-1.3.txt</a> - </p> - - <p> - Updated versions of the license (when available) can be found at - <a href="https://www.gnu.org/licenses/licenses.html">https://www.gnu.org/licenses/licenses.html</a> - </p> - - <p> - UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE - EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS - AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF - ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, - IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, - WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR - PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, - ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT - KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT - ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. - </p> - <p> - TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE - TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, - NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, - INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, - COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR - USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN - ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR - DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR - IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. - </p> - <p> - The disclaimer of warranties and limitation of liability provided - above shall be interpreted in a manner that, to the extent - possible, most closely approximates an absolute disclaimer and - waiver of all liability. - </p> - - </div> - -</body> -</html> diff --git a/docs/gnulinux/configuring_parabola.texi b/docs/gnulinux/configuring_parabola.texi @@ -0,0 +1,482 @@ +\input texinfo +@documentencoding UTF-8 + +@ifnottex +@paragraphindent 0 +@end ifnottex +@titlepage +@title Configuring Parabola (post-install) +@end titlepage + +@node Top +@top Configuring Parabola (post-install) + +@menu +* Configuring Parabola post-install:: +* Table of Contents:: +@end menu + +@node Configuring Parabola post-install +@chapter Configuring Parabola (post-install) +@anchor{#configuring-parabola-post-install} +Post-installation configuration steps for Parabola GNU/Linux-libre. Parabola is extremely flexible; this is just an example. + +@uref{index.html,Back to previous index} + +@node Table of Contents +@chapter Table of Contents +@anchor{#table-of-contents} +@itemize +@item +@ref{#pacman_configure,Configuring pacman} +@itemize +@item +@ref{#pacman_update,Updating Parabola} +@item +@ref{#pacman_maintain,Maintaining Parabola during system updates} +@itemize +@item +@ref{#pacman_cacheclean,Clearing package cache after updating} +@item +@ref{#pacman_commandequiv,Pacman command equivalents (compared to other package managers)} +@end itemize + +@item +@ref{#yourfreedom,your-freedom} +@end itemize + +@item +@ref{#useradd,Add a user account} +@item +@ref{#systemd,System D} +@item +@ref{#interesting_repos,Interesting repositories} +@item +@ref{#network,Setup a network connection in Parabola} +@itemize +@item +@ref{#network_hostname,Setting hostname} +@item +@ref{#network_status,Network status} +@item +@ref{#network_devicenames,Network interface names} +@item +@ref{#network_setup,Network setup} +@end itemize + +@item +@ref{#system_maintain,System maintenance} - important! +@item +@ref{#desktop,Configuring the desktop} +@itemize +@item +@ref{#desktop_xorg,Install Xorg} +@item +@ref{#desktop_kblayout,Xorg keyboard layout} +@item +@ref{#desktop_lxde,Install LXDE} +@item +@ref{#lxde_clock,LXDE - clock} +@item +@ref{#lxde_font,LXDE - font} +@item +@ref{#lxde_screenlock,LXDE - screenlock} +@item +@ref{#lxde_automount,LXDE - automounting} +@item +@ref{#lxde_suspend,LXDE - disable suspend} +@item +@ref{#lxde_battery,LXDE - battery monitor} +@item +@ref{#lxde_network,LXDE - network manager} +@end itemize + +@end itemize + +While not strictly related to the libreboot project, this guide is intended to be useful for those interested in installing Parabola on their libreboot system. + +It details configuration steps that I took after installing the base system, as a follow up to @uref{encrypted_parabola.html,encrypted_parabola.html}. This guide is likely to become obsolete at a later date (due to the volatile 'rolling-release' model that Arch/Parabola both use), but attempts will be made to maintain it. + +@strong{This guide was valid on 2014-09-21. If you see any changes that should to be made at the present date, please get in touch with the libreboot project!} + +You do not necessarily have to follow this guide word-for-word; @emph{parabola} is extremely flexible. The aim here is to provide a common setup that most users will be happy with. While Parabola can seem daunting at first glance (especially for new GNU/Linux users), with a simple guide it can provide all the same usability as Trisquel, without hiding any details from the user. + +Paradoxically, as you get more advanced Parabola can actually become @emph{easier to use} when you want to set up your system in a special way compared to what most distributions provide. You will find over time that other distributions tend to @emph{get in your way}. + +@strong{This guide assumes that you already have Parabola installed. If you have not yet installed Parabola, then @uref{encrypted_parabola.html,this guide} is highly recommended!} + +A lot of the steps in this guide will refer to the Arch wiki. Arch is the upstream distribution that Parabola uses. Most of this guide will also tell you to read wiki articles, other pages, manuals, and so on. In general it tries to cherry pick the most useful information but nonetheless you are encouraged to learn as much as possible. @strong{It might take you a few days to fully install your system how you like, depending on how much you need to read. Patience is key, especially for new users}. + +The Arch wiki will sometimes use bad language, such as calling the whole system Linux, using the term open-source (or closed-source), and it will sometimes recommend the use of proprietary software. You need to be careful about this when reading anything on the Arch wiki. + +Some of these steps require internet access. I'll go into networking later but for now, I just connected my system to a switch and did:@* # @strong{systemctl start dhcpcd.service}@* You can stop it later by running:@* # @strong{systemctl stop dhcpcd.service}@* For most people this should be enough, but if you don't have DHCP on your network then you should setup your network connection first:@* @ref{#network,Setup network connection in Parabola} +@menu +* Configure pacman:: +* Updating Parabola:: +* Maintaining Parabola:: +* your-freedom:: +* Add a user:: +* systemd:: +* Interesting repositories:: +* Setup a network connection in Parabola:: +* System Maintenance:: +* Configuring the desktop:: +@end menu + +@node Configure pacman +@section Configure pacman +@anchor{#configure-pacman} +pacman (@strong{pac}kage @strong{man}ager) is the name of the package management system in Arch, which Parabola (as a deblobbed parallel effort) also uses. Like with 'apt-get' on debian-based systems like Trisquel, this can be used to add/remove and update the software on your computer. + +Based on @uref{https://wiki.parabolagnulinux.org/Installation_Guide#Configure_pacman,https://wiki.parabolagnulinux.org/Installation_Guide#Configure_pacman} and from reading @uref{https://wiki.archlinux.org/index.php/Pacman,https://wiki.archlinux.org/index.php/Pacman} (make sure to read and understand this, it's very important) and @uref{https://wiki.parabolagnulinux.org/Official_Repositories,https://wiki.parabolagnulinux.org/Official_Repositories} + +@ref{#pagetop,Back to top of page.} + +@node Updating Parabola +@section Updating Parabola +@anchor{#updating-parabola} +In the end, I didn't change my configuration for pacman. When you are updating, resync with the latest package names/versions:@* # @strong{pacman -Syy}@* (according to the wiki, -Syy is better than Sy because it refreshes the package list even if it appears to be up to date, which can be useful when switching to another mirror).@* Then, update the system:@* # @strong{pacman -Syu} + +@strong{Before installing packages with 'pacman -S', always update first, using the notes above.} + +Keep an eye out on the output, or read it in /var/log/pacman.log. Sometimes, pacman will show messages about maintenance steps that you will need to perform with certain files (typically configurations) after the update. Also, you should check both the Parabola and Arch home pages to see if they mention any issues. If a new kernel is installed, you should also update to be able to use it (the currently running kernel will also be fine). It's generally good enough to update Parabola once every week, or maybe twice. As a rolling release distribution, it's a good idea never to leave your install too outdated; update regularly. This is simply because of the way the project works; old packages are deleted from the repositories quickly, once they are updated. A system that hasn't been updated for quite a while will mean potentially more reading of previous posts through the website, and more maintenance work. + +The Arch forum can also be useful, if others have the same issue as you (if you encounter issues, that is). The @emph{Parabola} IRC channel (#parabola on freenode) can also help you. + +Due to this and the volatile nature of Parabola/Arch, you should only update when you have at least a couple hours of spare time in case of issues that need to be resolved. You should never update, for example, if you need your system for an important event, like a presentation or sending an email to an important person before an allocated deadline, and so on. + +Relax - packages are well-tested regularly when new updates are made to the repositories. Separate 'testing' repositories exist for this exact reason. Despite what many people will tell you, Parabola is fairly stable and trouble-free, so long as you are aware of how to check for issues, and are willing to spend some time fixing issues in the rare event that they do occur. + +@ref{#pagetop,Back to top of page.} + +@node Maintaining Parabola +@section Maintaining Parabola +@anchor{#maintaining-parabola} +Parabola is a very simple distro, in the sense that you are in full control and everything is made transparent to you. One consequence is that you also need to know what you are doing, and what you have done before. In general, keeping notes (such as what I have done with this page) can be very useful as a reference in the future (if you wanted to re-install it or install the distro on another computer, for example). + +@ref{#pagetop,Back to top of page.} +@menu +* Cleaning the package cache:: +* pacman command equivalents:: +@end menu + +@node Cleaning the package cache +@subsection Cleaning the package cache +@anchor{#cleaning-the-package-cache} +@strong{The following is very important as you continue to use, update and maintain your Parabola system:@* @uref{https://wiki.archlinux.org/index.php/Pacman#Cleaning_the_package_cache,https://wiki.archlinux.org/index.php/Pacman#Cleaning_the_package_cache}. Essentially, this guide talks about a directory that has to be cleaned once in a while, to prevent it from growing too big (it's a cache of old package information, updated automatically when you do anything in pacman).} + +To clean out all old packages that are cached:@* # @strong{pacman -Sc} + +The wiki cautions that this should be used with care. For example, since older packages are deleted from the repo, if you encounter issues and want to revert back to an older package then it's useful to have the caches available. Only do this if you are sure that you won't need it. + +The wiki also mentions this method for removing everything from the cache, including currently installed packages that are cached:@* # @strong{pacman -Scc}@* This is inadvisable, since it means re-downloading the package again if you wanted to quickly re-install it. This should only be used when disk space is at a premium. + +@ref{#pagetop,Back to top of page.} + +@node pacman command equivalents +@subsection pacman command equivalents +@anchor{#pacman-command-equivalents} +The following table lists other distro package manager commands, and their equivalent in pacman:@* @uref{https://wiki.archlinux.org/index.php/Pacman_Rosetta,https://wiki.archlinux.org/index.php/Pacman_Rosetta} + +@ref{#pagetop,Back to top of page.} + +@node your-freedom +@section your-freedom +@anchor{#your-freedom} +your-freedom is a package specific to Parabola, and it is installed by default. What it does is conflict with packages from Arch that are known to be non-free (proprietary) software. When migrating from Arch (there is a guide on the Parabola wiki for migrating - converting - an existing Arch system to a Parabola system), installing your-freedom will also fail if these packages are installed, citing them as conflicts; the recommended solution is then to delete the offending packages, and continue installing @emph{your-freedom}. + +@ref{#pagetop,Back to top of page.} + +@node Add a user +@section Add a user +@anchor{#add-a-user} +Based on @uref{https://wiki.archlinux.org/index.php/Users_and_Groups,https://wiki.archlinux.org/index.php/Users_and_Groups}. + +It is important (for security reasons) to create and use a non-root (non-admin) user account for everyday use. The default 'root' account is intended only for critical administrative work, since it has complete access to the entire operating system. + +Read the entire document linked to above, and then continue. + +Add your user:@* # @strong{useradd -m -G wheel -s /bin/bash @emph{yourusername}}@* Set a password:@* # @strong{passwd @emph{yourusername}} + +Use of the @emph{diceware method} is recommended, for generating secure passphrases (instead of passwords). + +@ref{#pagetop,Back to top of page} + +@node systemd +@section systemd +@anchor{#systemd} +This is the name of the system used for managing services in Parabola. It is a good idea to become familiar with it. Read @uref{https://wiki.archlinux.org/index.php/systemd,https://wiki.archlinux.org/index.php/systemd} and @uref{https://wiki.archlinux.org/index.php/systemd#Basic_systemctl_usage,https://wiki.archlinux.org/index.php/systemd#Basic_systemctl_usage} to gain a full understanding. @strong{This is very important! Make sure to read them.} + +An example of a 'service' could be a webserver (such as lighttpd), or sshd (openssh), dhcp, etc. There are countless others. + +@uref{https://bbs.archlinux.org/viewtopic.php?pid=1149530#p1149530,https://bbs.archlinux.org/viewtopic.php?pid=1149530#p1149530} explains the background behind the decision by Arch (Parabola's upstream supplier) to use systemd. + +The manpage should also help:@* # @strong{man systemd}@* The section on 'unit types' is especially useful. + +According to the wiki, systemd 'journal' keeps logs of a size up to 10% of the total size your / partition takes up. on a 60GB root this would mean 6GB. That's not exactly practical, and can have performance implications later when the log gets too big. Based on instructions from the wiki, I will reduce the total size of the journal to 50MiB (the wiki recommends 50MiB). + +Open /etc/systemd/journald.conf and find the line that says:@* @emph{#SystemMaxUse=}@* Change it to say:@* @emph{SystemMaxUse=50M} + +The wiki also recommended a method for forwarding journal output to TTY 12 (accessible by pressing ctrl+alt+f12, and you use ctrl+alt+[F1-F12] to switch between terminals). I decided not to enable it. + +Restart journald:@* # @strong{systemctl restart systemd-journald} + +The wiki recommends that if the journal gets too large, you can also simply delete (rm -Rf) everything inside /var/log/journald/* but recommends backing it up. This shouldn't be necessary, since you already set the size limit above and systemd will automatically start to delete older records when the journal size reaches it's limit (according to systemd developers). + +Finally, the wiki mentions 'temporary' files and the utility for managing them.@* # @strong{man systemd-tmpfiles}@* The command for 'clean' is:@* # @strong{systemd-tmpfiles --clean}@* According to the manpage, this @emph{"cleans all files and directories with an age parameter"}. According to the Arch wiki, this reads information in /etc/tmpfiles.d/ and /usr/lib/tmpfiles.d/ to know what actions to perform. Therefore, it is a good idea to read what's stored in these locations to get a better understanding. + +I looked in /etc/tmpfiles.d/ and found that it was empty on my system. However, /usr/lib/tmpfiles.d/ contained some files. The first one was etc.conf, containing information and a reference to this manpage:@* # @strong{man tmpfiles.d}@* Read that manpage, and then continue studying all the files. + +The systemd developers tell me that it isn't usually necessary to touch the systemd-tmpfiles utility manually at all. + +@ref{#pagetop,Back to top of page} + +@node Interesting repositories +@section Interesting repositories +@anchor{#interesting-repositories} +Parabola wiki at @uref{https://wiki.parabolagnulinux.org/Repositories#kernels,https://wiki.parabolagnulinux.org/Repositories#kernels} mentions about a repository called [kernels] for custom kernels that aren't in the default base. It might be worth looking into what is available there, depending on your use case. + +I enabled it on my system, to see what was in it. Edit /etc/pacman.conf and below the 'extra' section add:@* @emph{[kernels]@* Include = /etc/pacman.d/mirrorlist} + +Now sync with the repository:@* # @strong{pacman -Syy} + +List all available packages in this repository:@* # @strong{pacman -Sl kernels} + +In the end, I decided not to install anything from it but I kept the repository enabled regardless. + +@ref{#pagetop,Back to top of page.} + +@node Setup a network connection in Parabola +@section Setup a network connection in Parabola +@anchor{#setup-a-network-connection-in-parabola} +Read @uref{https://wiki.archlinux.org/index.php/Configuring_Network,https://wiki.archlinux.org/index.php/Configuring_Network}. + +@ref{#pagetop,Back to top of page.} +@menu +* Set the hostname:: +* Network Status:: +* Network device names:: +* Network setup:: +@end menu + +@node Set the hostname +@subsection Set the hostname +@anchor{#set-the-hostname} +This should be the same as the hostname that you set in /etc/hostname when installing Parabola. You can also do it with systemd (do so now, if you like):@* # @strong{hostnamectl set-hostname @emph{yourhostname}}@* This writes the specified hostname to /etc/hostname. More information can be found in these manpages:@* # @strong{man hostname}@* # @strong{info hostname}@* # @strong{man hostnamectl} + +Add the same hostname to /etc/hosts, on each line. Example:@* @emph{127.0.0.1 localhost.localdomain localhost myhostname@* ::1 localhost.localdomain localhost myhostname} + +You'll note that I set both lines; the 2nd line is for IPv6. More and more ISPs are providing this now (mine does) so it's good to be forward-thinking here. + +The @emph{hostname} utility is part of the @emph{inetutils} package and is in core/, installed by default (as part of @emph{base}). + +@ref{#pagetop,Back to top of page.} + +@node Network Status +@subsection Network Status +@anchor{#network-status} +According to the Arch wiki, @uref{https://wiki.archlinux.org/index.php/Udev,udev} should already detect the ethernet chipset and load the driver for it automatically at boot time. You can check this in the @emph{"Ethernet controller"} section when running this command:@* # @strong{lspci -v} + +Look at the remaining sections @emph{'Kernel driver in use'} and @emph{'Kernel modules'}. In my case it was as follows:@* @emph{Kernel driver in use: e1000e@* Kernel modules: e1000e} + +Check that the driver was loaded by issuing @emph{dmesg | grep module_name}. In my case, I did:@* # @strong{dmesg | grep e1000e} + +@node Network device names +@subsection Network device names +@anchor{#network-device-names} +According to @uref{https://wiki.archlinux.org/index.php/Configuring_Network#Device_names,https://wiki.archlinux.org/index.php/Configuring_Network#Device_names}, it is important to note that the old interface names like eth0, wlan0, wwan0 and so on no longer apply. Instead, @emph{systemd} creates device names starting with en (for enternet), wl (for wifi) and ww (for wwan) with a fixed identifier that systemd automatically generates. An example device name for your ethernet chipset would be @emph{enp0s25}, where it is never supposed to change. + +If you want to enable the old names (eth0, wlan0, wwan0, etc), the Arch wiki recommends adding @emph{net.ifnames=0} to your kernel parameters (in libreboot context, this would be accomplished by following the instructions in @uref{grub_cbfs.html,grub_cbfs.html}). + +For background information, read @uref{http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/,Predictable Network Interface Names} + +Show device names:@* # @strong{ls /sys/class/net} + +Changing the device names is possible (I chose not to do it):@* @uref{https://wiki.archlinux.org/index.php/Configuring_Network#Change_device_name,https://wiki.archlinux.org/index.php/Configuring_Network#Change_device_name} + +@ref{#pagetop,Back to top of page.} + +@node Network setup +@subsection Network setup +@anchor{#network-setup} +I actually chose to ignore most of Networking section on the wiki. Instead, I plan to set up LXDE desktop with the graphical network-manager client. Here is a list of network managers:@* @uref{https://wiki.archlinux.org/index.php/List_of_applications/Internet#Network_managers,https://wiki.archlinux.org/index.php/List_of_applications/Internet#Network_managers}. If you need to, set a static IP address (temporarily) using the networking guide and the Arch wiki, or start the dhcpcd service in systemd. NetworkManager will be setup later, after installing LXDE. + +@ref{#pagetop,Back to top of page.} + +@node System Maintenance +@section System Maintenance +@anchor{#system-maintenance} +Read @uref{https://wiki.archlinux.org/index.php/System_maintenance,https://wiki.archlinux.org/index.php/System_maintenance} before continuing. Also read @uref{https://wiki.archlinux.org/index.php/Enhance_system_stability,https://wiki.archlinux.org/index.php/Enhance_system_stability}. @strong{This is important, so make sure to read them!} + +Install smartmontools (it can be used to check smart data. HDDs use non-free firmware inside, but it's transparent to you but the smart data comes from it. Therefore, don't rely on it too much):@* # @strong{pacman -S smartmontools}@* Read @uref{https://wiki.archlinux.org/index.php/S.M.A.R.T.,https://wiki.archlinux.org/index.php/S.M.A.R.T.} to learn how to use it. + +@ref{#pagetop,Back to top of page.} + +@node Configuring the desktop +@section Configuring the desktop +@anchor{#configuring-the-desktop} +Based on steps from @uref{https://wiki.archlinux.org/index.php/General_recommendations#Graphical_user_interface,General Recommendations} on the Arch wiki. The plan is to use LXDE and LXDM/LightDM, along with everything else that you would expect on other distributions that provide LXDE by default. + +@ref{#pagetop,Back to top of page.} +@menu +* Installing Xorg:: +* Xorg keyboard layout:: +* Install LXDE:: +* LXDE - clock:: +* LXDE - font:: +* LXDE - screenlock:: +* LXDE - automounting:: +* LXDE - disable suspend:: +* LXDE - battery monitor:: +* LXDE - Network Manager:: +@end menu + +@node Installing Xorg +@subsection Installing Xorg +@anchor{#installing-xorg} +Based on @uref{https://wiki.archlinux.org/index.php/Xorg,https://wiki.archlinux.org/index.php/Xorg}. + +Firstly, install it!@* # @strong{pacman -S xorg-server}@* I also recommend installing this (contains lots of useful tools, including @emph{xrandr}):@* # @strong{pacman -S xorg-server-utils} + +Install the driver. For me this was @emph{xf86-video-intel} on the ThinkPad X60. T60 and macbook11/21 should be the same.@* # @strong{pacman -S xf86-video-intel}@* For other systems you can try:@* # @strong{pacman -Ss xf86-video- | less}@* Combined with looking at your @emph{lspci} output, you can determine which driver is needed. By default, Xorg will revert to xf86-video-vesa which is a generic driver and doesn't provide true hardware acceleration. + +Other drivers (not just video) can be found by looking at the @emph{xorg-drivers} group:@* # @strong{pacman -Sg xorg-drivers}@* + +Mostly you will rely on a display manager, but in case you ever want to start X without one:@* # @strong{pacman -S xorg-xinit} + +<optional>@* @ @ @ Arch wiki recommends installing these, for testing that X works:@* @ @ @ # @strong{pacman -S xorg-twm xorg-xclock xterm}@* @ @ @ Refer to @uref{https://wiki.archlinux.org/index.php/Xinitrc,https://wiki.archlinux.org/index.php/Xinitrc}. and test X:@* @ @ @ # @strong{startx}@* @ @ @ When you are satisfied, type @strong{@emph{exit}} in xterm, inside the X session.@* @ @ @ Uninstall them (clutter. eww): # @strong{pacman -S xorg-xinit xorg-twm xorg-xclock xterm}@* </optional> + +@ref{#pagetop,Back to top of page.} + +@node Xorg keyboard layout +@subsection Xorg keyboard layout +@anchor{#xorg-keyboard-layout} +Refer to @uref{https://wiki.archlinux.org/index.php/Keyboard_configuration_in_Xorg,https://wiki.archlinux.org/index.php/Keyboard_configuration_in_Xorg}. + +Xorg uses a different configuration method for keyboard layouts, so you will notice that the layout you set in /etc/vconsole.conf earlier might not actually be the same in X. + +To see what layout you currently use, try this on a terminal emulator in X:@* # @strong{setxkbmap -print -verbose 10} + +In my case, I wanted to use the Dvorak (UK) keyboard which is quite different from Xorg's default Qwerty (US) layout. + +I'll just say it now: @emph{XkbModel} can be @emph{pc105} in this case (ThinkPad X60, with a 105-key UK keyboard). If you use an American keyboard (typically 104 keys) you will want to use @emph{pc104}. + +@emph{XkbLayout} in my case would be @emph{gb}, and @emph{XkbVariant} would be @emph{dvorak}. + +The Arch wiki recommends two different methods for setting the keyboard layout:@* @uref{https://wiki.archlinux.org/index.php/Keyboard_configuration_in_Xorg#Using_X_configuration_files,https://wiki.archlinux.org/index.php/Keyboard_configuration_in_Xorg#Using_X_configuration_files} and@* @uref{https://wiki.archlinux.org/index.php/Keyboard_configuration_in_Xorg#Using_localectl,https://wiki.archlinux.org/index.php/Keyboard_configuration_in_Xorg#Using_localectl}. + +In my case, I chose to use the @emph{configuration file} method:@* Create the file /etc/X11/xorg.conf.d/10-keyboard.conf and put this inside:@* @emph{Section "InputClass"@* @ @ @ @ @ @ @ @ Identifier "system-keyboard"@* @ @ @ @ @ @ @ @ MatchIsKeyboard "on"@* @ @ @ @ @ @ @ @ Option "XkbLayout" "gb"@* @ @ @ @ @ @ @ @ Option "XkbModel" "pc105"@* @ @ @ @ @ @ @ @ Option "XkbVariant" "dvorak"@* EndSection} + +For you, the steps above may differ if you have a different layout. If you use a US Qwerty keyboard, then you don't even need to do anything (though it might help, for the sake of being explicit). + +@ref{#pagetop,Back to top of page.} + +@node Install LXDE +@subsection Install LXDE +@anchor{#install-lxde} +Desktop choice isn't that important to me, so for simplicity I decided to use LXDE. It's lightweight and does everything that I need. If you would like to try something different, refer to @uref{https://wiki.archlinux.org/index.php/Desktop_environment,https://wiki.archlinux.org/index.php/Desktop_environment} + +Refer to @uref{https://wiki.archlinux.org/index.php/LXDE,https://wiki.archlinux.org/index.php/LXDE}. + +Install it, choosing 'all' when asked for the default package list:@* # @strong{pacman -S lxde obconf} + +I didn't want the following, so I removed them:@* # @strong{pacman -R lxmusic lxtask} + +I also lazily installed all fonts:@* # @strong{pacman -S $(pacman -Ssq ttf-)} + +LXDE comes with a terminal. You probably want a browser to go with that; I choose GNU IceCat, part of the @emph{@uref{https://gnu.org/,GNU project}}:@* # @strong{pacman -S icecat}@* And a mail client:@* # @strong{pacman -S icedove} + +In IceCat, go to @emph{Preferences :: Advanced} and disable @emph{GNU IceCat Health Report}. + +I also like to install these:@* # @strong{pacman -S xsensors stress htop} + +Enable LXDM (the default display manager, providing a graphical login):@* # @strong{systemctl enable lxdm.service}@* It will start when you boot up the system. To start it now, do:@* # @strong{systemctl start lxdm.service} + +Log in with your standard (non-root) user that you created earlier. It is advisable to also create an xinitrc rule in case you ever want to start lxde without lxdm. Read @uref{https://wiki.archlinux.org/index.php/Xinitrc,https://wiki.archlinux.org/index.php/Xinitrc}. + +Open LXterminal:@* $ @strong{cp /etc/skel/.xinitrc ~}@* Open .xinitrc and add the following plus a line break at the bottom of the file.@* @emph{# Probably not needed. The same locale info that we set before@* # Based on advice from the LXDE wiki export LC_ALL=en_GB.UTF-8@* export LANGUAGE=en_GB.UTF-8@* export LANG=en_GB.UTF-8@* @* # Start lxde desktop@* exec startlxde@*} Now make sure that it is executable:@* $ @strong{chmod +x .xinitrc} + +@ref{#pagetop,Back to top of page.} + +@node LXDE - clock +@subsection LXDE - clock +@anchor{#lxde---clock} +In @strong{Digital Clock Settings} (right click the clock) I set the Clock Format to @emph{%Y/%m/%d %H:%M:%S} + +@ref{#pagetop,Back to top of page.} + +@node LXDE - font +@subsection LXDE - font +@anchor{#lxde---font} +NOTE TO SELF: come back to this later. + +@ref{#pagetop,Back to top of page.} + +@node LXDE - screenlock +@subsection LXDE - screenlock +@anchor{#lxde---screenlock} +Arch wiki recommends to use @emph{xscreensaver}:@* # @strong{pacman -S xscreensaver} + +Under @emph{Preferences :: Screensaver} in the LXDE menu, I chose @emph{Mode: Blank Screen Only}, setting @emph{Blank After}, @emph{Cycle After} and @emph{Lock Screen After} (checked) to 10 minutes. + +You can now lock the screen with @emph{Logout :: Lock Screen} in the LXDE menu. + +@ref{#pagetop,Back to top of page.} + +@node LXDE - automounting +@subsection LXDE - automounting +@anchor{#lxde---automounting} +Refer to @uref{https://wiki.archlinux.org/index.php/File_manager_functionality,https://wiki.archlinux.org/index.php/File_manager_functionality}. + +I chose to ignore this for now. NOTE TO SELF: come back to this later. + +@ref{#pagetop,Back to top of page.} + +@node LXDE - disable suspend +@subsection LXDE - disable suspend +@anchor{#lxde---disable-suspend} +When closing the laptop lid, the system suspends. This is annoying at least to me. NOTE TO SELF: disable it, then document the steps here. + +@ref{#pagetop,Back to top of page.} + +@node LXDE - battery monitor +@subsection LXDE - battery monitor +@anchor{#lxde---battery-monitor} +Right click lxde panel and @emph{Add/Remove Panel Items}. Click @emph{Add} and select @emph{Battery Monitor}, then click @emph{Add}. Close and then right-click the applet and go to @emph{Battery Monitor Settings}, check the box that says @emph{Show Extended Information}. Now click @emph{Close}. When you hover the cursor over it, it'll show information about the battery. + +@ref{#pagetop,Back to top of page.} + +@node LXDE - Network Manager +@subsection LXDE - Network Manager +@anchor{#lxde---network-manager} +Refer to @uref{https://wiki.archlinux.org/index.php/LXDE#Network_Management,https://wiki.archlinux.org/index.php/LXDE#Network_Management}. Then I read: @uref{https://wiki.archlinux.org/index.php/NetworkManager,https://wiki.archlinux.org/index.php/NetworkManager}. + +Install Network Manager:@* # @strong{pacman -S networkmanager} + +You will also want the graphical applet:@* # @strong{pacman -S network-manager-applet}@* Arch wiki says that an autostart rule will be written at @emph{/etc/xdg/autostart/nm-applet.desktop} + +I want to be able to use a VPN at some point, so the wiki tells me to do:@* # @strong{pacman -S networkmanager-openvpn} + +LXDE uses openbox, so I refer to:@* @uref{https://wiki.archlinux.org/index.php/NetworkManager#Openbox,https://wiki.archlinux.org/index.php/NetworkManager#Openbox}. + +It tells me for the applet I need:@* # @strong{pacman -S xfce4-notifyd gnome-icon-theme}@* Also, for storing authentication details (wifi) I need:@* # @strong{pacman -S gnome-keyring} + +I wanted to quickly enable networkmanager:@* # @strong{systemctl stop dhcpcd}@* # @strong{systemctl start NetworkManager}@* Enable NetworkManager at boot time:@* # @strong{systemctl enable NetworkManager} + +Restart LXDE (log out, and then log back in). + +I added the volume control applet to the panel (right click panel, and add a new applet). I also later changed the icons to use the gnome icon theme, in @emph{lxappearance}. + +@ref{#pagetop,Back to top of page.} + +Copyright © 2014, 2015 Francis Rowe <info@@gluglug.org.uk>@* Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license can be found at @uref{../gfdl-1.3.txt,../gfdl-1.3.txt} + +Updated versions of the license (when available) can be found at @uref{https://www.gnu.org/licenses/licenses.html,https://www.gnu.org/licenses/licenses.html} + +UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. + +TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. + +The disclaimer of warranties and limitation of liability provided above shall be interpreted in a manner that, to the extent possible, most closely approximates an absolute disclaimer and waiver of all liability. + +@bye diff --git a/docs/gnulinux/encrypted_parabola.html b/docs/gnulinux/encrypted_parabola.html @@ -1,859 +0,0 @@ -<!DOCTYPE html> -<html> -<head> - <meta charset="utf-8"> - <meta name="viewport" content="width=device-width, initial-scale=1"> - - <style type="text/css"> - @import url('../css/main.css'); - </style> - - <title>Installing Parabola GNU/Linux with full disk encryption (including /boot)</title> -</head> - -<body> - <div class="section"> - <h1>Installing Parabola GNU/Linux with full disk encryption (including /boot)</h1> - <p> - Libreboot on x86 uses the GRUB <a href="http://www.coreboot.org/Payloads#GRUB_2">payload</a> - by default, which means that the GRUB configuration file - (where your GRUB menu comes from) is stored directly alongside libreboot - and it's GRUB payload executable, inside - the flash chip. In context, this means that installing distributions and managing them - is handled slightly differently compared to traditional BIOS systems. - </p> - - <p> - On most systems, the /boot partition has to be left unencrypted while the others are encrypted. - This is so that GRUB, and therefore the kernel, can be loaded and executed since the firmware - can't open a LUKS volume. Not so with libreboot! Since GRUB is already included directly as a - payload, even /boot can be encrypted. This protects /boot from tampering by someone with physical - access to the system. - </p> - <p> - <b>This guide is *only* for the GRUB payload. If you use the depthcharge payload, ignore this section entirely.</b> - </p> - <p> - <a href="index.html">Back to previous index</a> - </p> - </div> - - <div class="section"> - - <p> - Boot Parabola's install environment. <a href="grub_boot_installer.html">How to boot a GNU/Linux installer</a>. - </p> - - <p> - For this guide I used the 2015 08 01 image to boot the live installer and install the system. - This is available at <a href="https://wiki.parabola.nu/Get_Parabola#Main_live_ISO">this page</a>. - </p> - - <p> - This guide will go through the installation steps taken at the time of writing, which may or may not change due to - the volatile nature of Parabola (it changes all the time). In general most of it should remain the same. If you spot mistakes, - please say so! This guide will be ported to the Parabola wiki at a later date. For up to date Parabola install guide, go to - the Parabola wiki. This guide essentially cherry picks the useful information (valid at the - time of writing: 2015-08-25). - </p> - - </div> - - <div class="section"> - - <p> This section deals with wiping the storage device on which you plan to install Parabola - GNU/Linux. Follow these steps, but if you use an SSD, also: - - <p> - - beware there are issues with TRIM (not enabled through luks) and security issues if you do enable it. - See <a href="https://wiki.archlinux.org/index.php/Dm-crypt/Specialties#Discard.2FTRIM_support_for_solid_state_drives_.28SSD.29">this page</a> - for more info. - </p> - - <p> - make sure it's brand-new (or barely used). Or, otherwise, be sure that it never previously contained plaintext copies of your data. - </p> - - <p> - make sure to read <a href="https://wiki.archlinux.org/index.php/Solid_State_Drives">this article</a>. Edit /etc/fstab later on when - chrooted into your install. Also, read the whole article and keep all points in mind, adapting them for this guide. - </p> - - <p> - Wipe the MBR (if you use MBR):<br/> - # <b>lsblk</b><br/> - Your storage is probably /dev/sda, but be very sure to double check this or you WILL lose your data!<br/> - # <b>dd if=/dev/zero of=/dev/sda bs=446 count=1; sync</b><br/> - Never use SeaBIOS! The MBR section can easily be changed with malicious code, which SeaBIOS will blindly execute. - This guide is for libreboot with GRUB-as-payload only. - </p> - - <p> - Securely wipe the drive:<br/> - # <b>dd if=/dev/urandom of=/dev/sda; sync</b><br/> - NOTE: If you have an SSD, only do this the first time. If it was already LUKS-encrypted before, - use the info below to wipe the LUKS header. Also, check online for your SSD what the recommended - erase block size is. For example if it was 2MiB:<br/> - # <b>dd if=/dev/urandom of=/dev/sda bs=2M; sync</b> - </p> - <p> - If your drive was already LUKS encrypted (maybe you are re-installing your distro) then - it is already 'wiped'. You should just wipe the LUKS header. - <a href="https://www.lisenet.com/2013/luks-add-keys-backup-and-restore-volume-header/">https://www.lisenet.com/2013/luks-add-keys-backup-and-restore-volume-header/</a> - showed me how to do this. It recommends doing the first 3MiB. Now, that guide is recommending putting zero there. I'm going to use urandom. Do this:<br/> - # <b>head -c 3145728 /dev/urandom &gt; /dev/sda; sync</b><br/> - (Wiping the LUKS header is important, since it has hashed passphrases and so on. It's 'secure', but 'potentially' a risk). - </p> - - </div> - - <div class="section"> - - <h2> - Change keyboard layout - </h2> - <p> - Parabola live shell assumes US Qwerty. If you have something different, list the available keymaps and use yours:<br/> - # <b>localectl list-keymaps</b><br/> - # <b>loadkeys LAYOUT</b><br/> - For me, LAYOUT would have been dvorak-uk. - </p> - - </div> - - <div class="section"> - - <h2>Establish an internet connection</h2> - <p> - Refer to <a href="https://wiki.parabola.nu/Beginners%27_guide#Establish_an_internet_connection">this guide</a>. Wired is recommended, - but wireless is also explained there. - </p> - - </div> - - <div class="section"> - - <h2>Getting started</h2> - <p> - The beginning is based on <a href="https://wiki.parabolagnulinux.org/Installation_Guide">https://wiki.parabolagnulinux.org/Installation_Guide</a>. - Then I referred to <a href="https://wiki.archlinux.org/index.php/Partitioning">https://wiki.archlinux.org/index.php/Partitioning</a> at first. - </p> - - </div> - - <div class="section"> - - <h2>dm-mod</h2> - <p> - device-mapper will be used - a lot. Make sure that the kernel module is loaded:<br/> - # <b>modprobe dm-mod</b> - </p> - - <h2>Create LUKS partition</h2> - <p> - I am using MBR partitioning, so I use cfdisk:<br/> - # <b>cfdisk /dev/sda</b> - </p> - <p> - I create a single large sda1 filling the whole drive, leaving it as the default type 'Linux' (83). - </p> - <p> - Now I refer to <a href="https://wiki.archlinux.org/index.php/Dm-crypt/Drive_preparation#Partitioning">https://wiki.archlinux.org/index.php/Dm-crypt/Drive_preparation#Partitioning</a>:<br/> - I am then directed to <a href="https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption">https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption</a>. - </p> - <p> - Parabola forces you to RTFM. Do that. - </p> - <p> - It tells me to run:<br/> - # <b>cryptsetup benchmark</b> (for making sure the list below is populated)<br/> - Then:<br/> - # <b>cat /proc/crypto</b><br/> - This gives me crypto options that I can use. It also provides a representation of the best way to set up LUKS (in this case, security is a priority; speed, a distant second). - To gain a better understanding, I am also reading:<br/> - # <b>man cryptsetup</b> - </p> - <p> - Following that page, based on my requirements, I do the following based on <a href="https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption#Encryption_options_for_LUKS_mode">https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption#Encryption_options_for_LUKS_mode</a>. - Reading through, it seems like Serpent (encryption) and Whirlpool (hash) is the best option. - </p> - <p> - I am initializing LUKS with the following:<br/> - # <b>cryptsetup -v --cipher serpent-xts-plain64 --key-size 512 --hash whirlpool --use-random --verify-passphrase luksFormat /dev/sda1</b> - Choose a <b>secure</b> passphrase here. Ideally lots of lowercase/uppercase numbers, letters, symbols etc all in a random pattern. The - password length should be as long as you are able to handle without writing it down or storing it anywhere. - </p> - - <p> - Use of the <i>diceware method</i> is recommended, for generating secure passphrases (instead of passwords). - </p> - - </div> - - <div class="section"> - - <h2>Create LVM</h2> - <p> - Now I refer to <a href="https://wiki.archlinux.org/index.php/LVM">https://wiki.archlinux.org/index.php/LVM</a>. - </p> - <p> - Open the LUKS partition:<br/> - # <b>cryptsetup luksOpen /dev/sda1 lvm</b><br/> - (it will be available at /dev/mapper/lvm) - </p> - <p> - Create LVM partition:<br/> - # <b>pvcreate /dev/mapper/lvm</b><br/> - Show that you just created it:<br/> - # <b>pvdisplay</b> - </p> - <p> - Now I create the volume group, inside of which the logical volumes will be created:<br/> - # <b>vgcreate matrix /dev/mapper/lvm</b><br/> - (volume group name is 'matrix' - choose your own name, if you like) - Show that you created it:<br/> - # <b>vgdisplay</b> - </p> - <p> - Now create the logical volumes:<br/> - # <b>lvcreate -L 2G matrix -n swapvol</b> (2G swap partition, named <u>swapvol</u>)<br/> - Again, choose your own name if you like. Also, make sure to choose a swap size of your own needs. It basically depends on how much RAM - you have installed. I refer to <a -href="http://www.linux.com/news/software/applications/8208-all-about-linux-swap-space">http://www.linux.com/news/software/applications/8208-all-about-linux-swap-space</a>.<br/> - # <b>lvcreate -l +100%FREE matrix -n rootvol</b> (single large partition in the rest of the space, named <u>rootvol</u>)<br/> - You can also be flexible here, for example you can specify a /boot, a /, a /home, a /var, a /usr, etc. For example, - if you will be running a web/mail server then you want /var in its own partition (so that if it fills up with logs, it won't crash your system). - For a home/laptop system (typical use case), a root and a swap will do (really). - </p> - <p> - Verify that the logical volumes were created, using the following command:<br/> - # <b>lvdisplay</b> - </p> - - </div> - - <div class="section"> - - <h2>Create / and swap partitions, and mount</h2> - <p> - For the swapvol LV I use:<br/> - # <b>mkswap /dev/mapper/matrix-swapvol</b><br/> - Activate swap:<br/> - # <b>swapon /dev/matrix/swapvol</b> - </p> - <p> - For the rootvol LV I use:<br/> - # <b>mkfs.ext4 /dev/mapper/matrix-rootvol</b> - </p> - <p> - Mount the root (/) partition:<br/> - # <b>mount /dev/matrix/rootvol /mnt</b> - </p> - - </div> - - <div class="section"> - - <h2>Continue with Parabola installation</h2> - <p> - This guide is really about GRUB, Parabola and cryptomount. I have to show how to install Parabola - so that the guide can continue. - </p> - <p> - Now I am following the rest of <a href="https://wiki.parabolagnulinux.org/Installation_Guide">https://wiki.parabolagnulinux.org/Installation_Guide</a>. - I also cross referenced <a href="https://wiki.archlinux.org/index.php/Installation_guide">https://wiki.archlinux.org/index.php/Installation_guide</a>. - </p> - <p> - Create /home and /boot on rootvol mountpoint:<br/> - # <b>mkdir -p /mnt/home</b><br/> - # <b>mkdir -p /mnt/boot</b> - </p> - <p> - Once all the remaining partitions, if any, have been mounted, the devices are ready to install Parabola. - </p> - - <p> - In <b>/etc/pacman.d/mirrorlist</b>, comment out all lines except the Server line closest to where you are (I chose the UK Parabola - server (main server)) and then did:<br/> - # <b>pacman -Syy</b><br/> - # <b>pacman -Syu</b><br/> - # <b>pacman -Sy pacman</b> (and then I did the other 2 steps above, again)<br/> - In my case I did the steps in the next paragraph, and followed the steps in this paragraph again. - </p> - <p> - &lt;troubleshooting&gt;<br/> - &nbsp;&nbsp;&nbsp;The following is based on 'Verification of package signatures' in the Parabola install guide.<br/> - &nbsp;&nbsp;&nbsp;Check there first to see if steps differ by now.<br/> - &nbsp;&nbsp;&nbsp;Now you have to update the default Parabola keyring. This is used for signing and verifying packages:<br/> - &nbsp;&nbsp;&nbsp;# <b>pacman -Sy parabola-keyring</b><br/> - &nbsp;&nbsp;&nbsp;It says that if you get GPG errors, then it's probably an expired key and, therefore, you should do:<br/> - &nbsp;&nbsp;&nbsp;# <b>pacman-key --populate parabola</b><br/> - &nbsp;&nbsp;&nbsp;# <b>pacman-key --refresh-keys</b><br/> - &nbsp;&nbsp;&nbsp;# <b>pacman -Sy parabola-keyring</b><br/> - &nbsp;&nbsp;&nbsp;To be honest, you should do the above anyway. Parabola has a lot of maintainers, and a lot of keys. Really!<br/> - &nbsp;&nbsp;&nbsp;If you get an error mentioning dirmngr, do:<br/> - &nbsp;&nbsp;&nbsp;# <b>dirmngr &lt;/dev/null</b><br/> - &nbsp;&nbsp;&nbsp;Also, it says that if the clock is set incorrectly then you have to manually set the correct time <br/> - &nbsp;&nbsp;&nbsp;(if keys are listed as expired because of it):<br/> - &nbsp;&nbsp;&nbsp;# <b>date MMDDhhmm[[CC]YY][.ss]</b><br/> - &nbsp;&nbsp;&nbsp;I also had to install:<br/> - &nbsp;&nbsp;&nbsp;# <b>pacman -S archlinux-keyring</b><br/> - &nbsp;&nbsp;&nbsp;# <b>pacman-key --populate archlinux</b><br/> - &nbsp;&nbsp;&nbsp;In my case I saw some conflicting files reported in pacman, stopping me from using it.<br/> - &nbsp;&nbsp;&nbsp;I deleted the files that it mentioned - and then it worked. Specifically, I had this error:<br/> - &nbsp;&nbsp;&nbsp;<i>licenses: /usr/share/licenses/common/MPS exists in filesystem</i><br/> - &nbsp;&nbsp;&nbsp;I rm -Rf'd the file and then pacman worked. I'm told that the following would have also made it work:<br/> - &nbsp;&nbsp;&nbsp;# <b>pacman -Sf licenses</b><br/> - &lt;/troubleshooting&gt;<br/> - </p> - <p> - I also like to install other packages (base-devel, compilers and so on) and wpa_supplicant/dialog/iw/wpa_actiond are needed for wireless after the install:<br/> - # <b>pacstrap /mnt base base-devel wpa_supplicant dialog iw wpa_actiond</b> - </p> - - </div> - - <div class="section"> - - <h2>Configure the system</h2> - <p> - Generate an fstab - UUIDs are used because they have certain advantages (see <a href="https://wiki.parabola.nu/Fstab#Identifying_filesystems">https://wiki.parabola.nu/Fstab#Identifying_filesystems</a>. - If you prefer labels instead, replace the -U option with -L):<br/> - # <b>genfstab -U -p /mnt &gt;&gt; /mnt/etc/fstab</b><br/> - Check the created file:<br/> - # <b>cat /mnt/etc/fstab</b><br/> - (If there are any errors, edit the file. Do <b>NOT</b> run the genfstab command again!) - </p> - <p> - Chroot into new system:<br/> - # <b>arch-chroot /mnt /bin/bash</b> - </p> - <p> - It's a good idea to have this installed:<br/> - # <b>pacman -S linux-libre-lts</b> - </p> - <p> - It was also suggested that you should install this kernel (read up on what GRSEC is):<br/> - # <b>pacman -S linux-libre-grsec</b> - </p> - <p> - This is another kernel that sits inside /boot, which you can use. LTS means 'long-term support'. These are so-called 'stable' kernels - that can be used as a fallback during updates, if a bad kernel causes issues for you. - </p> - <p> - Parabola does not have wget. This is sinister. Install it:<br/> - # <b>pacman -S wget</b> - </p> - <p> - Locale:<br/> - # <b>nano /etc/locale.gen</b><br/> - Uncomment your needed localisations. For example en_GB.UTF-8 (UTF-8 is highly recommended over other options).<br/> - # <b>locale-gen</b><br/> - # <b>echo LANG=en_GB.UTF-8 &gt; /etc/locale.conf</b><br/> - # <b>export LANG=en_GB.UTF-8</b> - </p> - <p> - Console font and keymap:<br/> - # <b>nano /etc/vconsole.conf</b><br/> - In my case: - </p> -<pre> -KEYMAP=dvorak-uk -FONT=Lat9w-16 -</pre> - <p> - Time zone:<br/> - # <b>ln -s /usr/share/zoneinfo/Europe/London /etc/localtime</b><br/> - (Replace Zone and Subzone to your liking. See /usr/share/zoneinfo) - </p> - <p> - Hardware clock:<br/> - # <b>hwclock --systohc --utc</b> - </p> - <p> - Hostname: - Write your hostname to /etc/hostname. For example, if your hostname is parabola:<br/> - # <b>echo parabola &gt; /etc/hostname</b><br/> - Add the same hostname to /etc/hosts:<br/> - # <b>nano /etc/hosts</b><br/> - </p> -<pre> -#&lt;ip-address&gt; &lt;hostname.domain.org&gt; &lt;hostname&gt; -127.0.0.1 localhost.localdomain localhost parabola -::1 localhost.localdomain localhost parabola -</pre> - <p> Configure the network: - Refer to <a href="https://wiki.parabola.nu/Beginners%27_guide#Configure_the_network">https://wiki.parabola.nu/Beginners%27_guide#Configure_the_network</a>. - </p> - <p> Mkinitcpio: - Configure /etc/mkinitcpio.conf as needed (see <a href="https://wiki.parabola.nu/Mkinitcpio">https://wiki.parabola.nu/Mkinitcpio</a>). - Runtime modules can be found in /usr/lib/initcpio/hooks, and build hooks can be found in /usr/lib/initcpio/install. (# <b>mkinitcpio -H hookname</b> gives information about each hook.) - Specifically, for this use case:<br/> - # <b>nano /etc/mkinitcpio.conf</b><br/> - Then modify the file like so: - </p> - <ul> - <li>MODULES="i915"</li> - <li>This forces the driver to load earlier, so that the console font isn't wiped out after getting to login)</li> - <li>HOOKS="base udev autodetect modconf block keyboard keymap consolefont encrypt lvm2 filesystems fsck shutdown"</li> - <li>Explanation:</li> - <li>keymap adds to initramfs the keymap that you specified in /etc/vconsole.conf</li> - <li>consolefont adds to initramfs the font that you specified in /etc/vconsole.conf</li> - <li>encrypt adds LUKS support to the initramfs - needed to unlock your disks at boot time</li> - <li>lvm2 adds LVM support to the initramfs - needed to mount the LVM partitions at boot time</li> - <li>shutdown is needed according to Parabola wiki for unmounting devices (such as LUKS/LVM) during shutdown)</li> - </ul> - <p> - Now using mkinitcpio, you can create the kernel and ramdisk for booting with (this is different from Arch, specifying linux-libre instead of linux):<br/> - # <b>mkinitcpio -p linux-libre</b><br/> - Also do it for linux-libre-lts:<br/> - # <b>mkinitcpio -p linux-libre-lts</b><br/> - Also do it for linux-libre-grsec:<br/> - # <b>mkinitcpio -p linux-libre-grsec</b> - </p> - <p> - Set the root password: - At the time of writing, Parabola used SHA512 by default for its password hashing. I referred to <a href="https://wiki.archlinux.org/index.php/SHA_password_hashes">https://wiki.archlinux.org/index.php/SHA_password_hashes</a>.<br/> - # <b>nano /etc/pam.d/passwd</b><br/> - Add rounds=65536 at the end of the uncommented 'password' line.<br/> - # <b>passwd root</b><br/> - Make sure to set a secure password! Also, it must never be the same as your LUKS password. - </p> - - <p> - Use of the <i>diceware method</i> is recommended, for generating secure passphrases (instead of passwords). - </p> - - </div> - - <div class="section"> - - <h2>Extra security tweaks</h2> - <p> - Based on <a href="https://wiki.archlinux.org/index.php/Security">https://wiki.archlinux.org/index.php/Security</a>. - </p> - <p> - Restrict access to important directories:<br/> - # <b>chmod 700 /boot /etc/{iptables,arptables}</b> - </p> - <p> - Lockout user after three failed login attempts:<br/> - Edit the file /etc/pam.d/system-login and comment out that line:<br/> - <i># auth required pam_tally.so onerr=succeed file=/var/log/faillog</i><br/> - Or just delete it. Above it, put:<br/> - <i>auth required pam_tally.so deny=2 unlock_time=600 onerr=succeed file=/var/log/faillog</i><br/> - To unlock a user manually (if a password attempt is failed 3 times), do:<br/> - # <b>pam_tally --user <i>theusername</i> --reset</b> - What the above configuration does is lock the user out for 10 minutes, if they make 3 failed login attempts. - </p> - <p> - Configure sudo - not covered here. Will be covered post-installation in another tutorial, at a later date. - If this is a single-user system, you don't really need sudo. - </p> - - </div> - - <div class="section"> - - <h2>Unmount, reboot!</h2> - <p> - Exit from chroot:<br/> - # <b>exit</b> - </p> - <p> - unmount:<br/> - # <b>umount -R /mnt</b><br/> - # <b>swapoff -a</b> - </p> - <p> - deactivate the lvm lv's:<br/> - # <b>lvchange -an /dev/matrix/rootvol</b><br/> - # <b>lvchange -an /dev/matrix/swapvol</b><br/> - </p> - <p> - Lock the encrypted partition (close it):<br/> - # <b>cryptsetup luksClose lvm</b> - </p> - <p> - # <b>shutdown -h now</b><br/> - Remove the installation media, then boot up again. - </p> - - </div> - - <div class="section"> - - <h2>Booting from GRUB</h2> - <p> - Initially you will have to boot manually. Press C to get to the GRUB command line. The underlined parts are optional - (using those 2 underlines will boot lts kernel instead of normal). - </p> - <p> - grub> <b>cryptomount -a</b><br/> - grub> <b>set root='lvm/matrix-rootvol'</b><br/> - grub> <b>linux /boot/vmlinuz-linux-libre<u>-lts</u> root=/dev/matrix/rootvol cryptdevice=/dev/sda1:root</b><br/> - grub> <b>initrd /boot/initramfs-linux-libre<u>-lts</u>.img</b><br/> - grub> <b>boot</b><br/> - </p> - <p> - You could also make it load /boot/vmlinuz-linux-libre-grsec and /boot/initramfs-linux-libre-grsec.img - </p> - - </div> - - <div class="section"> - - <h2>Follow-up tutorial: configuring Parabola</h2> - <p> - We will modify grub.config inside the ROM and do all kinds of fun stuff, but I recommend that you first transform the current bare-bones Parabola install into a more useable system. - Doing so will make the upcoming ROM modifications MUCH easier to perform and less risky! - <a href="configuring_parabola.html">configuring_parabola.html</a> shows my own notes post-installation. Using these, you can get a basic - system similar to the one that I chose for myself. You can also cherry pick useful notes and come up with your own system. - Parabola is user-centric, which means that you are in control. For more information, read <a href="https://wiki.archlinux.org/index.php/The_Arch_Way">The Arch Way</a> - (Parabola also follows it). - </p> - - </div> - - <div class="section"> - - <h2>Modify grub.cfg inside the ROM</h2> - - <p> - (Re-)log in to your system, pressing C, so booting manually from GRUB (see above). You need to modify the ROM, so that Parabola can boot automatically with this configuration. - <a href="grub_cbfs.html">grub_cbfs.html</a> shows you how. Follow that guide, using the configuration details below. - If you go for option 2 (re-flash), promise to do this on grubtest.cfg first! We can't emphasise this enough. This is to reduce the possibility of bricking your device! - </p> - - <p> - I will go for the re-flash option here. Firstly, cd to the libreboot_util/cbfstool/{armv7l i686 x86_64} directory. - Dump the current firmware - where <i>libreboot.rom</i> is an example: make sure to adapt:<br/> - # <b>flashrom -p internal -r libreboot.rom</b><br/> - If flashrom complains about multiple flash chips detected, add a <i>-c</i> option at the end, with the name of your chosen chip is quotes.<br/> - You can check if everything is in there (<i>grub.cfg</i> and <i>grubtest.cfg</i> would be really nice):<br/> - $ <b>./cbfstool libreboot.rom print</b><br/> - Extract grubtest.cfg:<br/> - $ <b>./cbfstool libreboot.rom extract -n grubtest.cfg -f grubtest.cfg</b><br/> - And modify:<br/> - $ <b>nano grubtest.cfg</b> - </p> - - <p> - In grubtest.cfg, inside the 'Load Operating System' menu entry, change the contents to: - </p> -<pre> -cryptomount -a<br/> -set root='lvm/matrix-rootvol'<br/> -linux /boot/vmlinuz-linux-libre<u>-lts</u> root=/dev/matrix/rootvol cryptdevice=/dev/sda1:root<br/> -initrd /boot/initramfs-linux-libre<u>-lts</u>.img -</pre> - - <p> - Note: the underlined parts above (-lts) can also be removed, to boot the latest kernel instead of LTS (long-term support) kernels. - You could also copy the menu entry and in one have -lts, and without in the other menuentry. - You could also create a menu entry to load /boot/vmlinuz-linux-libre-grsec and /boot/initramfs-linux-libre-grsec.img - The first entry will load by default. - </p> - - <p> - Without specifying a device, the <i>-a</i> parameter tries to unlock all detected LUKS volumes. - You can also specify -u UUID or -a (device). - </p> - - <p> - Now, to protect your system from an attacker simply booting a live usb distro and re-flashing the boot firmware, we are going to add a password for GRUB. - In a new terminal window, if you are not yet online, start dhcp on ethernet:<br/> - # <b>systemctl start dhcpcd.service</b> - Or make sure to get connected to the internet in any other way you prefer, at least. - </p> - - <p> - Use of the <i>diceware method</i> is recommended, for generating secure passphrases (instead of passwords). - </p> - - <p style="font-size:2em;"> - AGAIN: MAKE SURE TO DO THIS WHOLE SECTION ON grubtest.cfg *BEFORE* DOING IT ON grub.cfg. - (When we get there, upon reboot, select the menu entry that says <i>Switch to grubtest.cfg</i> and test that it works. - Only once you are satisfied, copy that to grub.cfg. Only a few steps to go, though.) - WHY? BECAUSE AN INCORRECTLY SET PASSWORD CONFIG MEANS YOU CAN'T AUTHENTICATE, WHICH MEANS 'BRICK'. - </p> - - <p> - (emphasis added, because it's needed: this is a common roadblock for users.) - </p> - - <p> - We need a utility that comes with GRUB, so we will download it temporarily. (Remember that GRUB isn't needed for booting, since it's already included as a payload in libreboot.) - Also, we will use flashrom, and I installed dmidecode. You only need base-devel (compilers and so on) to build and use cbfstool. It was already installed if you followed this tutorial, but here - it is:<br/> - # <b>pacman -S grub flashrom dmidecode base-devel</b><br/> - Next, do:<br/> - # <b>grub-mkpasswd-pbkdf2</b><br/> - Enter your chosen password at the prompt and your hash will be shown. Copy this string - you will add it to your grubtest.cfg. - </p> - - <p> - The password below (it's <b>password</b>, by the way) after <i>'password_pbkdf2 root'</i> <i>should be changed</i> to your own. - Make sure to specify a password that is different from both your LUKS *and* your root/user password. - Obviously, do not simply copy and paste the examples shown here... - </p> - - <p> - Next, back in grubtest.cfg, above the first 'Load Operating System' menu entry, you should now add your GRUB password, like so - (replace with your own name (I used <b>root</b> on both lines, feel free to choose another one) and the password hash which you copied): - </p> -<pre> -set superusers=&quot;root&quot; -password_pbkdf2 root grub.pbkdf2.sha512.10000.711F186347156BC105CD83A2ED7AF1EB971AA2B1EB2640172F34B0DEFFC97E654AF48E5F0C3B7622502B76458DA494270CC0EA6504411D676E6752FD1651E749.8DD11178EB8D1F633308FD8FCC64D0B243F949B9B99CCEADE2ECA11657A757D22025986B0FA116F1D5191E0A22677674C994EDBFADE62240E9D161688266A711 -</pre> - - <p> - Save your changes in grubtest.cfg, then delete the unmodified config from the ROM image:<br/> - $ <b>./cbfstool libreboot.rom remove -n grubtest.cfg</b><br/> - and insert the modified grubtest.cfg:<br/> - $ <b>./cbfstool libreboot.rom add -n grubtest.cfg -f grubtest.cfg -t raw</b><br/> - </p> - - <p> - Now refer to <a href="http://libreboot.org/docs/install/index.html#flashrom">http://libreboot.org/docs/install/index.html#flashrom</a>. - Cd (up) to the libreboot_util directory and update the flash chip contents:<br/> - # <b>./flash update libreboot.rom</b><br/> - Ocassionally, coreboot changes the name of a given board. If flashrom complains about a board mismatch, but you are sure that you chose the correct ROM image, then run this alternative command:<br/> - # <b>./flash forceupdate libreboot.rom</b><br/> - You should see "Verifying flash... VERIFIED." written at the end of the flashrom output. - </p> - - <p> - With this new configuration, Parabola can boot automatically and you will have to enter a password at boot time, in GRUB, before being able to use any of the menu entries or switch to the terminal. - Let's test it out: reboot and choose grubtest.cfg from the GRUB menu, using the arrow keys on your keyboard. - Enter the name you chose, the GRUB password, your LUKS passphrase and login as root/your user. All went well? Great! - </p> - - <p> - If it does not work like you want it to, if you are unsure or sceptical in any way, don't despair: you have been wise and did not brick your device! Reboot and login the default way, and then modify - your grubtest.cfg until you get it right! - <b>Do *not* proceed past this point unless you are 100% sure that your new configuration is safe (or desirable) to use.</b> - </p> - - <p> - Now, we can easily and safely create a copy of grubtest.cfg, called grub.cfg. This will be the same except for one difference: the menuentry 'Switch to grub.cfg' is changed to 'Switch to grubtest.cfg' - and, inside it, all instances of grub.cfg to grubtest.cfg. This is so that the main config still links (in the menu) to grubtest.cfg, so that you don't have to manually switch to it, in case you ever - want to follow this guide again in the future (modifying the already modified config). - Inside libreboot_util/cbfstool/{armv7l i686 x86_64}, we can do this with the following command:<br/> - $ <b>sed -e 's:(cbfsdisk)/grub.cfg:(cbfsdisk)/grubtest.cfg:g' -e 's:Switch to grub.cfg:Switch to grubtest.cfg:g' &lt; grubtest.cfg &gt; grub.cfg</b><br/> - Delete the grub.cfg that remained inside the ROM:<br/> - $ <b>./cbfstool libreboot.rom remove -n grub.cfg</b><br/> - Add the modified version that you just made:<br/> - $ <b>./cbfstool libreboot.rom add -n grub.cfg -f grub.cfg -t raw</b><br/> - </p> - - <p> - Now you have a modified ROM. Once more, refer to <a href="http://libreboot.org/docs/install/index.html#flashrom">http://libreboot.org/docs/install/index.html#flashrom</a>. - Cd to the libreboot_util directory and update the flash chip contents:<br/> - # <b>./flash update libreboot.rom</b><br/> - And wait for the "Verifying flash... VERIFIED." Once you have done that, shut down and then boot up with your new configuration. - </p> - - <p> - When done, delete GRUB (remember, we only needed it for the <i>grub-mkpasswd-pbkdf2</i> utility; - GRUB is already part of libreboot, flashed alongside it as a <i>payload</i>):<br/> - # <b>pacman -R grub</b> - </p> - - </div> - - <div class="section"> - - <p> - If you followed all that correctly, you should now have a fully encrypted Parabola installation. - Refer to the wiki for how to do the rest. - </p> - - </div> - - <div class="section"> - <h2>Bonus: Using a key file to unlock /boot/</h2> - <p> - By default, you will have to enter your LUKS passphrase twice; once in GRUB, and once when booting the kernel. - GRUB unlocks the encrypted partition and then loads the kernel, but the kernel is not aware of the fact - that it is being loaded from an encrypted volume. Therefore, you will be asked to enter your passphrase a second time. - A workaround is to put a keyfile inside initramfs, with instructions for the kernel to use it when - booting. This is safe, because /boot/ is encrypted (otherwise, putting a keyfile inside initramfs would be a bad idea).<br/> - - Boot up and login as root or your user. Then generate the key file:<br/> - # <b>dd bs=512 count=4 if=/dev/urandom of=/etc/mykeyfile iflag=fullblock</b><br/> - Insert it into the luks volume:<br/> - # <b>cryptsetup luksAddKey /dev/sdX /etc/mykeyfile</b><br/> - and enter your LUKS passphrase when prompted. - Add the keyfile to the initramfs by adding it to FILES in /etc/mkinitcpio.conf. For example:<br/> - # <b>FILES="/etc/mykeyfile"</b><br/> - Create the initramfs image from scratch:<br/> - # <b>mkinitcpio -p linux-libre</b><br/> - # <b>mkinitcpio -p linux-libre-lts</b><br/> - # <b>mkinitcpio -p linux-libre-grsec</b><br/> - Add the following to your grub.cfg - you are now able to do that, see above! -, or add it in the kernel command line for GRUB:<br/> - # <b>cryptkey=rootfs:/etc/mykeyfile</b><br/> - <br/> - You can also place this inside the grub.cfg that exists in CBFS: <a href="grub_cbfs.html">grub_cbfs.html</a>. - </p> - - </div> - - <div class="section"> - - <h2>Further security tips</h2> - <p> - <a href="https://wiki.archlinux.org/index.php/Security">https://wiki.archlinux.org/index.php/Security</a>.<br/> - <a href="https://wiki.parabolagnulinux.org/User:GNUtoo/laptop">https://wiki.parabolagnulinux.org/User:GNUtoo/laptop</a> - </p> - - </div> - - <div class="section"> - - <h1 id="troubleshooting">Troubleshooting</h1> - - <p> - A user reported issues when booting with a docking station attached - on an X200, when decrypting the disk in GRUB. The error - <i>AHCI transfer timed out</i> was observed. The workaround - was to remove the docking station. - </p> - - <p> - Further investigation revealed that it was the DVD drive causing problems. - Removing that worked around the issue. - </p> - -<pre> - -&quot;sudo wodim -prcap&quot; shows information about the drive: -Device was not specified. Trying to find an appropriate drive... -Detected CD-R drive: /dev/sr0 -Using /dev/cdrom of unknown capabilities -Device type : Removable CD-ROM -Version : 5 -Response Format: 2 -Capabilities : -Vendor_info : 'HL-DT-ST' -Identification : 'DVDRAM GU10N ' -Revision : 'MX05' -Device seems to be: Generic mmc2 DVD-R/DVD-RW. - -Drive capabilities, per MMC-3 page 2A: - - Does read CD-R media - Does write CD-R media - Does read CD-RW media - Does write CD-RW media - Does read DVD-ROM media - Does read DVD-R media - Does write DVD-R media - Does read DVD-RAM media - Does write DVD-RAM media - Does support test writing - - Does read Mode 2 Form 1 blocks - Does read Mode 2 Form 2 blocks - Does read digital audio blocks - Does restart non-streamed digital audio reads accurately - Does support Buffer-Underrun-Free recording - Does read multi-session CDs - Does read fixed-packet CD media using Method 2 - Does not read CD bar code - Does not read R-W subcode information - Does read raw P-W subcode data from lead in - Does return CD media catalog number - Does return CD ISRC information - Does support C2 error pointers - Does not deliver composite A/V data - - Does play audio CDs - Number of volume control levels: 256 - Does support individual volume control setting for each channel - Does support independent mute setting for each channel - Does not support digital output on port 1 - Does not support digital output on port 2 - - Loading mechanism type: tray - Does support ejection of CD via START/STOP command - Does not lock media on power up via prevent jumper - Does allow media to be locked in the drive via PREVENT/ALLOW command - Is not currently in a media-locked state - Does not support changing side of disk - Does not have load-empty-slot-in-changer feature - Does not support Individual Disk Present feature - - Maximum read speed: 4234 kB/s (CD 24x, DVD 3x) - Current read speed: 4234 kB/s (CD 24x, DVD 3x) - Maximum write speed: 4234 kB/s (CD 24x, DVD 3x) - Current write speed: 4234 kB/s (CD 24x, DVD 3x) - Rotational control selected: CLV/PCAV - Buffer size in KB: 1024 - Copy management revision supported: 1 - Number of supported write speeds: 4 - Write speed # 0: 4234 kB/s CLV/PCAV (CD 24x, DVD 3x) - Write speed # 1: 2822 kB/s CLV/PCAV (CD 16x, DVD 2x) - Write speed # 2: 1764 kB/s CLV/PCAV (CD 10x, DVD 1x) - Write speed # 3: 706 kB/s CLV/PCAV (CD 4x, DVD 0x) - -Supported CD-RW media types according to MMC-4 feature 0x37: - Does write multi speed CD-RW media - Does write high speed CD-RW media - Does write ultra high speed CD-RW media - Does not write ultra high speed+ CD-RW media - -</pre> - - </div> - - <div class="section"> - - <p> - Copyright &copy; 2014, 2015 Francis Rowe &lt;info@gluglug.org.uk&gt;<br/> - Copyright &copy; 2015 Jeroen Quint &lt;jezza@diplomail.ch&gt;<br/> - Permission is granted to copy, distribute and/or modify this document - under the terms of the GNU Free Documentation License, Version 1.3 - or any later version published by the Free Software Foundation; - with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. - A copy of the license can be found at <a href="../gfdl-1.3.txt">../gfdl-1.3.txt</a> - </p> - - <p> - Updated versions of the license (when available) can be found at - <a href="https://www.gnu.org/licenses/licenses.html">https://www.gnu.org/licenses/licenses.html</a> - </p> - - <p> - UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE - EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS - AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF - ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, - IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, - WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR - PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, - ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT - KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT - ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. - </p> - <p> - TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE - TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, - NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, - INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, - COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR - USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN - ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR - DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR - IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. - </p> - <p> - The disclaimer of warranties and limitation of liability provided - above shall be interpreted in a manner that, to the extent - possible, most closely approximates an absolute disclaimer and - waiver of all liability. - </p> - - </div> - -</body> -</html> diff --git a/docs/gnulinux/encrypted_parabola.texi b/docs/gnulinux/encrypted_parabola.texi @@ -0,0 +1,414 @@ +\input texinfo +@documentencoding UTF-8 + +@ifnottex +@paragraphindent 0 +@end ifnottex +@titlepage +@title Installing Parabola GNU/Linux with full disk encryption (including /boot) +@end titlepage + +@node Top +@top Installing Parabola GNU/Linux with full disk encryption (including /boot) + +@menu +* Installing Parabola GNU/Linux with full disk encryption including /boot:: +* Troubleshooting:: +@end menu + +@node Installing Parabola GNU/Linux with full disk encryption including /boot +@chapter Installing Parabola GNU/Linux with full disk encryption (including /boot) +@anchor{#installing-parabola-gnulinux-with-full-disk-encryption-including-boot} +Libreboot on x86 uses the GRUB @uref{http://www.coreboot.org/Payloads#GRUB_2,payload} by default, which means that the GRUB configuration file (where your GRUB menu comes from) is stored directly alongside libreboot and it's GRUB payload executable, inside the flash chip. In context, this means that installing distributions and managing them is handled slightly differently compared to traditional BIOS systems. + +On most systems, the /boot partition has to be left unencrypted while the others are encrypted. This is so that GRUB, and therefore the kernel, can be loaded and executed since the firmware can't open a LUKS volume. Not so with libreboot! Since GRUB is already included directly as a payload, even /boot can be encrypted. This protects /boot from tampering by someone with physical access to the system. + +@strong{This guide is *only* for the GRUB payload. If you use the depthcharge payload, ignore this section entirely.} + +@uref{index.html,Back to previous index} + +Boot Parabola's install environment. @uref{grub_boot_installer.html,How to boot a GNU/Linux installer}. + +For this guide I used the 2015 08 01 image to boot the live installer and install the system. This is available at @uref{https://wiki.parabola.nu/Get_Parabola#Main_live_ISO,this page}. + +This guide will go through the installation steps taken at the time of writing, which may or may not change due to the volatile nature of Parabola (it changes all the time). In general most of it should remain the same. If you spot mistakes, please say so! This guide will be ported to the Parabola wiki at a later date. For up to date Parabola install guide, go to the Parabola wiki. This guide essentially cherry picks the useful information (valid at the time of writing: 2015-08-25). + +This section deals with wiping the storage device on which you plan to install Parabola GNU/Linux. Follow these steps, but if you use an SSD, also: + +- beware there are issues with TRIM (not enabled through luks) and security issues if you do enable it. See @uref{https://wiki.archlinux.org/index.php/Dm-crypt/Specialties#Discard.2FTRIM_support_for_solid_state_drives_.28SSD.29,this page} for more info. + +- make sure it's brand-new (or barely used). Or, otherwise, be sure that it never previously contained plaintext copies of your data. + +- make sure to read @uref{https://wiki.archlinux.org/index.php/Solid_State_Drives,this article}. Edit /etc/fstab later on when chrooted into your install. Also, read the whole article and keep all points in mind, adapting them for this guide. + +Wipe the MBR (if you use MBR):@* # @strong{lsblk}@* Your storage is probably /dev/sda, but be very sure to double check this or you WILL lose your data!@* # @strong{dd if=/dev/zero of=/dev/sda bs=446 count=1; sync}@* Never use SeaBIOS! The MBR section can easily be changed with malicious code, which SeaBIOS will blindly execute. This guide is for libreboot with GRUB-as-payload only. + +Securely wipe the drive:@* # @strong{dd if=/dev/urandom of=/dev/sda; sync}@* NOTE: If you have an SSD, only do this the first time. If it was already LUKS-encrypted before, use the info below to wipe the LUKS header. Also, check online for your SSD what the recommended erase block size is. For example if it was 2MiB:@* # @strong{dd if=/dev/urandom of=/dev/sda bs=2M; sync} + +If your drive was already LUKS encrypted (maybe you are re-installing your distro) then it is already 'wiped'. You should just wipe the LUKS header. @uref{https://www.lisenet.com/2013/luks-add-keys-backup-and-restore-volume-header/,https://www.lisenet.com/2013/luks-add-keys-backup-and-restore-volume-header/} showed me how to do this. It recommends doing the first 3MiB. Now, that guide is recommending putting zero there. I'm going to use urandom. Do this:@* # @strong{head -c 3145728 /dev/urandom > /dev/sda; sync}@* (Wiping the LUKS header is important, since it has hashed passphrases and so on. It's 'secure', but 'potentially' a risk). +@menu +* Change keyboard layout:: +* Establish an internet connection:: +* Getting started:: +* dm-mod:: +* Create LUKS partition:: +* Create LVM:: +* Create / and swap partitions and mount:: +* Continue with Parabola installation:: +* Configure the system:: +* Extra security tweaks:: +* Unmount reboot!:: +* Booting from GRUB:: +* Follow-up tutorial configuring Parabola:: +* Modify grubcfg inside the ROM:: +* Bonus Using a key file to unlock /boot/:: +* Further security tips:: +@end menu + +@node Change keyboard layout +@section Change keyboard layout +@anchor{#change-keyboard-layout} +Parabola live shell assumes US Qwerty. If you have something different, list the available keymaps and use yours:@* # @strong{localectl list-keymaps}@* # @strong{loadkeys LAYOUT}@* For me, LAYOUT would have been dvorak-uk. + +@node Establish an internet connection +@section Establish an internet connection +@anchor{#establish-an-internet-connection} +Refer to @uref{https://wiki.parabola.nu/Beginners%27_guide#Establish_an_internet_connection,this guide}. Wired is recommended, but wireless is also explained there. + +@node Getting started +@section Getting started +@anchor{#getting-started} +The beginning is based on @uref{https://wiki.parabolagnulinux.org/Installation_Guide,https://wiki.parabolagnulinux.org/Installation_Guide}. Then I referred to @uref{https://wiki.archlinux.org/index.php/Partitioning,https://wiki.archlinux.org/index.php/Partitioning} at first. + +@node dm-mod +@section dm-mod +@anchor{#dm-mod} +device-mapper will be used - a lot. Make sure that the kernel module is loaded:@* # @strong{modprobe dm-mod} + +@node Create LUKS partition +@section Create LUKS partition +@anchor{#create-luks-partition} +I am using MBR partitioning, so I use cfdisk:@* # @strong{cfdisk /dev/sda} + +I create a single large sda1 filling the whole drive, leaving it as the default type 'Linux' (83). + +Now I refer to @uref{https://wiki.archlinux.org/index.php/Dm-crypt/Drive_preparation#Partitioning,https://wiki.archlinux.org/index.php/Dm-crypt/Drive_preparation#Partitioning}:@* I am then directed to @uref{https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption,https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption}. + +Parabola forces you to RTFM. Do that. + +It tells me to run:@* # @strong{cryptsetup benchmark} (for making sure the list below is populated)@* Then:@* # @strong{cat /proc/crypto}@* This gives me crypto options that I can use. It also provides a representation of the best way to set up LUKS (in this case, security is a priority; speed, a distant second). To gain a better understanding, I am also reading:@* # @strong{man cryptsetup} + +Following that page, based on my requirements, I do the following based on @uref{https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption#Encryption_options_for_LUKS_mode,https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption#Encryption_options_for_LUKS_mode}. Reading through, it seems like Serpent (encryption) and Whirlpool (hash) is the best option. + +I am initializing LUKS with the following:@* # @strong{cryptsetup -v --cipher serpent-xts-plain64 --key-size 512 --hash whirlpool --use-random --verify-passphrase luksFormat /dev/sda1} Choose a @strong{secure} passphrase here. Ideally lots of lowercase/uppercase numbers, letters, symbols etc all in a random pattern. The password length should be as long as you are able to handle without writing it down or storing it anywhere. + +Use of the @emph{diceware method} is recommended, for generating secure passphrases (instead of passwords). + +@node Create LVM +@section Create LVM +@anchor{#create-lvm} +Now I refer to @uref{https://wiki.archlinux.org/index.php/LVM,https://wiki.archlinux.org/index.php/LVM}. + +Open the LUKS partition:@* # @strong{cryptsetup luksOpen /dev/sda1 lvm}@* (it will be available at /dev/mapper/lvm) + +Create LVM partition:@* # @strong{pvcreate /dev/mapper/lvm}@* Show that you just created it:@* # @strong{pvdisplay} + +Now I create the volume group, inside of which the logical volumes will be created:@* # @strong{vgcreate matrix /dev/mapper/lvm}@* (volume group name is 'matrix' - choose your own name, if you like) Show that you created it:@* # @strong{vgdisplay} + +Now create the logical volumes:@* # @strong{lvcreate -L 2G matrix -n swapvol} (2G swap partition, named swapvol)@* Again, choose your own name if you like. Also, make sure to choose a swap size of your own needs. It basically depends on how much RAM you have installed. I refer to @uref{http://www.linux.com/news/software/applications/8208-all-about-linux-swap-space,http://www.linux.com/news/software/applications/8208-all-about-linux-swap-space}.@* # @strong{lvcreate -l +100%FREE matrix -n rootvol} (single large partition in the rest of the space, named rootvol)@* You can also be flexible here, for example you can specify a /boot, a /, a /home, a /var, a /usr, etc. For example, if you will be running a web/mail server then you want /var in its own partition (so that if it fills up with logs, it won't crash your system). For a home/laptop system (typical use case), a root and a swap will do (really). + +Verify that the logical volumes were created, using the following command:@* # @strong{lvdisplay} + +@node Create / and swap partitions and mount +@section Create / and swap partitions, and mount +@anchor{#create-and-swap-partitions-and-mount} +For the swapvol LV I use:@* # @strong{mkswap /dev/mapper/matrix-swapvol}@* Activate swap:@* # @strong{swapon /dev/matrix/swapvol} + +For the rootvol LV I use:@* # @strong{mkfs.ext4 /dev/mapper/matrix-rootvol} + +Mount the root (/) partition:@* # @strong{mount /dev/matrix/rootvol /mnt} + +@node Continue with Parabola installation +@section Continue with Parabola installation +@anchor{#continue-with-parabola-installation} +This guide is really about GRUB, Parabola and cryptomount. I have to show how to install Parabola so that the guide can continue. + +Now I am following the rest of @uref{https://wiki.parabolagnulinux.org/Installation_Guide,https://wiki.parabolagnulinux.org/Installation_Guide}. I also cross referenced @uref{https://wiki.archlinux.org/index.php/Installation_guide,https://wiki.archlinux.org/index.php/Installation_guide}. + +Create /home and /boot on rootvol mountpoint:@* # @strong{mkdir -p /mnt/home}@* # @strong{mkdir -p /mnt/boot} + +Once all the remaining partitions, if any, have been mounted, the devices are ready to install Parabola. + +In @strong{/etc/pacman.d/mirrorlist}, comment out all lines except the Server line closest to where you are (I chose the UK Parabola server (main server)) and then did:@* # @strong{pacman -Syy}@* # @strong{pacman -Syu}@* # @strong{pacman -Sy pacman} (and then I did the other 2 steps above, again)@* In my case I did the steps in the next paragraph, and followed the steps in this paragraph again. + +<troubleshooting>@* @ @ @ The following is based on 'Verification of package signatures' in the Parabola install guide.@* @ @ @ Check there first to see if steps differ by now.@* @ @ @ Now you have to update the default Parabola keyring. This is used for signing and verifying packages:@* @ @ @ # @strong{pacman -Sy parabola-keyring}@* @ @ @ It says that if you get GPG errors, then it's probably an expired key and, therefore, you should do:@* @ @ @ # @strong{pacman-key --populate parabola}@* @ @ @ # @strong{pacman-key --refresh-keys}@* @ @ @ # @strong{pacman -Sy parabola-keyring}@* @ @ @ To be honest, you should do the above anyway. Parabola has a lot of maintainers, and a lot of keys. Really!@* @ @ @ If you get an error mentioning dirmngr, do:@* @ @ @ # @strong{dirmngr </dev/null}@* @ @ @ Also, it says that if the clock is set incorrectly then you have to manually set the correct time @* @ @ @ (if keys are listed as expired because of it):@* @ @ @ # @strong{date MMDDhhmm[[CC]YY][.ss]}@* @ @ @ I also had to install:@* @ @ @ # @strong{pacman -S archlinux-keyring}@* @ @ @ # @strong{pacman-key --populate archlinux}@* @ @ @ In my case I saw some conflicting files reported in pacman, stopping me from using it.@* @ @ @ I deleted the files that it mentioned and then it worked. Specifically, I had this error:@* @ @ @ @emph{licenses: /usr/share/licenses/common/MPS exists in filesystem}@* @ @ @ I rm -Rf'd the file and then pacman worked. I'm told that the following would have also made it work:@* @ @ @ # @strong{pacman -Sf licenses}@* </troubleshooting>@* + +I also like to install other packages (base-devel, compilers and so on) and wpa_supplicant/dialog/iw/wpa_actiond are needed for wireless after the install:@* # @strong{pacstrap /mnt base base-devel wpa_supplicant dialog iw wpa_actiond} + +@node Configure the system +@section Configure the system +@anchor{#configure-the-system} +Generate an fstab - UUIDs are used because they have certain advantages (see @uref{https://wiki.parabola.nu/Fstab#Identifying_filesystems,https://wiki.parabola.nu/Fstab#Identifying_filesystems}. If you prefer labels instead, replace the -U option with -L):@* # @strong{genfstab -U -p /mnt >> /mnt/etc/fstab}@* Check the created file:@* # @strong{cat /mnt/etc/fstab}@* (If there are any errors, edit the file. Do @strong{NOT} run the genfstab command again!) + +Chroot into new system:@* # @strong{arch-chroot /mnt /bin/bash} + +It's a good idea to have this installed:@* # @strong{pacman -S linux-libre-lts} + +It was also suggested that you should install this kernel (read up on what GRSEC is):@* # @strong{pacman -S linux-libre-grsec} + +This is another kernel that sits inside /boot, which you can use. LTS means 'long-term support'. These are so-called 'stable' kernels that can be used as a fallback during updates, if a bad kernel causes issues for you. + +Parabola does not have wget. This is sinister. Install it:@* # @strong{pacman -S wget} + +Locale:@* # @strong{nano /etc/locale.gen}@* Uncomment your needed localisations. For example en_GB.UTF-8 (UTF-8 is highly recommended over other options).@* # @strong{locale-gen}@* # @strong{echo LANG=en_GB.UTF-8 > /etc/locale.conf}@* # @strong{export LANG=en_GB.UTF-8} + +Console font and keymap:@* # @strong{nano /etc/vconsole.conf}@* In my case: + +@verbatim +KEYMAP=dvorak-uk +FONT=Lat9w-16 +@end verbatim + +Time zone:@* # @strong{ln -s /usr/share/zoneinfo/Europe/London /etc/localtime}@* (Replace Zone and Subzone to your liking. See /usr/share/zoneinfo) + +Hardware clock:@* # @strong{hwclock --systohc --utc} + +Hostname: Write your hostname to /etc/hostname. For example, if your hostname is parabola:@* # @strong{echo parabola > /etc/hostname}@* Add the same hostname to /etc/hosts:@* # @strong{nano /etc/hosts}@* + +@verbatim +#<ip-address> <hostname.domain.org> <hostname> +127.0.0.1 localhost.localdomain localhost parabola +::1 localhost.localdomain localhost parabola +@end verbatim + +Configure the network: Refer to @uref{https://wiki.parabola.nu/Beginners%27_guide#Configure_the_network,https://wiki.parabola.nu/Beginners%27_guide#Configure_the_network}. + +Mkinitcpio: Configure /etc/mkinitcpio.conf as needed (see @uref{https://wiki.parabola.nu/Mkinitcpio,https://wiki.parabola.nu/Mkinitcpio}). Runtime modules can be found in /usr/lib/initcpio/hooks, and build hooks can be found in /usr/lib/initcpio/install. (# @strong{mkinitcpio -H hookname} gives information about each hook.) Specifically, for this use case:@* # @strong{nano /etc/mkinitcpio.conf}@* Then modify the file like so: + +@itemize +@item +MODULES="i915" +@item +This forces the driver to load earlier, so that the console font isn't wiped out after getting to login) +@item +HOOKS="base udev autodetect modconf block keyboard keymap consolefont encrypt lvm2 filesystems fsck shutdown" +@item +Explanation: +@item +keymap adds to initramfs the keymap that you specified in /etc/vconsole.conf +@item +consolefont adds to initramfs the font that you specified in /etc/vconsole.conf +@item +encrypt adds LUKS support to the initramfs - needed to unlock your disks at boot time +@item +lvm2 adds LVM support to the initramfs - needed to mount the LVM partitions at boot time +@item +shutdown is needed according to Parabola wiki for unmounting devices (such as LUKS/LVM) during shutdown) +@end itemize + +Now using mkinitcpio, you can create the kernel and ramdisk for booting with (this is different from Arch, specifying linux-libre instead of linux):@* # @strong{mkinitcpio -p linux-libre}@* Also do it for linux-libre-lts:@* # @strong{mkinitcpio -p linux-libre-lts}@* Also do it for linux-libre-grsec:@* # @strong{mkinitcpio -p linux-libre-grsec} + +Set the root password: At the time of writing, Parabola used SHA512 by default for its password hashing. I referred to @uref{https://wiki.archlinux.org/index.php/SHA_password_hashes,https://wiki.archlinux.org/index.php/SHA_password_hashes}.@* # @strong{nano /etc/pam.d/passwd}@* Add rounds=65536 at the end of the uncommented 'password' line.@* # @strong{passwd root}@* Make sure to set a secure password! Also, it must never be the same as your LUKS password. + +Use of the @emph{diceware method} is recommended, for generating secure passphrases (instead of passwords). + +@node Extra security tweaks +@section Extra security tweaks +@anchor{#extra-security-tweaks} +Based on @uref{https://wiki.archlinux.org/index.php/Security,https://wiki.archlinux.org/index.php/Security}. + +Restrict access to important directories:@* # @strong{chmod 700 /boot /etc/@{iptables,arptables@}} + +Lockout user after three failed login attempts:@* Edit the file /etc/pam.d/system-login and comment out that line:@* @emph{# auth required pam_tally.so onerr=succeed file=/var/log/faillog}@* Or just delete it. Above it, put:@* @emph{auth required pam_tally.so deny=2 unlock_time=600 onerr=succeed file=/var/log/faillog}@* To unlock a user manually (if a password attempt is failed 3 times), do:@* # @strong{pam_tally --user @emph{theusername} --reset} What the above configuration does is lock the user out for 10 minutes, if they make 3 failed login attempts. + +Configure sudo - not covered here. Will be covered post-installation in another tutorial, at a later date. If this is a single-user system, you don't really need sudo. + +@node Unmount reboot! +@section Unmount, reboot! +@anchor{#unmount-reboot} +Exit from chroot:@* # @strong{exit} + +unmount:@* # @strong{umount -R /mnt}@* # @strong{swapoff -a} + +deactivate the lvm lv's:@* # @strong{lvchange -an /dev/matrix/rootvol}@* # @strong{lvchange -an /dev/matrix/swapvol}@* + +Lock the encrypted partition (close it):@* # @strong{cryptsetup luksClose lvm} + +# @strong{shutdown -h now}@* Remove the installation media, then boot up again.