libreboot

Unnamed repository; edit this file 'description' to name the repository.
Log | Files | Refs | README

commit c7908aa7fe8e7cc9b00409bd7c93c58c0e6d1261
parent 3d08f096b8ff9857fc066e15d318dcf145807343
Author: Leah Rowe <info@minifree.org>
Date:   Tue,  4 Apr 2017 00:39:08 +0200

Merge branch 'www/template' of vimuser/libreboot into master

Diffstat:
.gitignore | 1+
docs/archive_old.md | 38--------------------------------------
docs/bsd/freebsd.md | 16----------------
docs/bsd/index.md | 2--
docs/bsd/netbsd.md | 16----------------
docs/bsd/openbsd.md | 16----------------
docs/depthcharge/index.md | 29-----------------------------
docs/distros/index.md | 2--
docs/future/index.md | 34----------------------------------
docs/future/old.md | 12------------
docs/git/index.md | 25-------------------------
docs/gnulinux/configuring_parabola.md | 98-------------------------------------------------------------------------------
docs/gnulinux/encrypted_debian.md | 27---------------------------
docs/gnulinux/encrypted_parabola.md | 41-----------------------------------------
docs/gnulinux/grub_boot_installer.md | 16----------------
docs/gnulinux/grub_cbfs.md | 41-----------------------------------------
docs/gnulinux/grub_hardening.md | 9---------
docs/gnulinux/index.md | 2--
docs/grub/index.md | 14--------------
docs/hardware/dock.md | 7-------
docs/hardware/index.md | 2--
docs/hardware/t60_heatsink.md | 8--------
docs/hardware/t60_lcd_15.md | 4----
docs/hardware/t60_security.md | 26--------------------------
docs/hardware/x60_heatsink.md | 11-----------
docs/hardware/x60_keyboard.md | 4----
docs/hardware/x60_lcd_change.md | 4----
docs/hardware/x60_security.md | 22----------------------
docs/hcl/c201.md | 20--------------------
docs/hcl/d510mo.md | 2--
docs/hcl/d945gclf.md | 4----
docs/hcl/ga-g41m-es2l.md | 2--
docs/hcl/gm45_remove_me.md | 28----------------------------
docs/hcl/imac52.md | 2--
docs/hcl/index.md | 48------------------------------------------------
docs/hcl/kcma-d8.md | 18------------------
docs/hcl/kfsn4-dre.md | 16----------------
docs/hcl/kgpe-d16.md | 18------------------
docs/hcl/r400.md | 10----------
docs/hcl/t400.md | 12------------
docs/hcl/t500.md | 15---------------
docs/hcl/x200.md | 34----------------------------------
docs/index.md | 10----------
docs/install/bbb_setup.md | 18------------------
docs/install/c201.md | 23-----------------------
docs/install/d510mo.md | 10----------
docs/install/d945gclf.md | 5-----
docs/install/ga-g41m-es2l.md | 10----------
docs/install/index.md | 44--------------------------------------------
docs/install/kcma-d8.md | 5-----
docs/install/kgpe-d16.md | 7-------
docs/install/r400_external.md | 32--------------------------------
docs/install/rpi_setup.md | 4----
docs/install/t400_external.md | 32--------------------------------
docs/install/t500_external.md | 32--------------------------------
docs/install/t60_unbrick.md | 9---------
docs/install/x200_external.md | 28----------------------------
docs/install/x60_unbrick.md | 9---------
docs/install/x60tablet_unbrick.md | 9---------
docs/misc/bbb_ehci.md | 4----
docs/misc/index.md | 23-----------------------
docs/misc/patch.md | 19-------------------
docs/release.md | 7-------
www/amd-libre.md | 1-
www/contrib.md | 1-
www/faq.md | 1-
www/git.md | 1-
www/gpg.md | 2--
www/license.md | 34++++++++++++++++++++++++++++++++++
www/lists.md | 1-
www/logo-info.md | 1-
www/publish.sh | 18+++++-------------
www/template.html | 67+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
73 files changed, 107 insertions(+), 1116 deletions(-)

diff --git a/.gitignore b/.gitignore @@ -40,4 +40,5 @@ push /gm45macaddress tocheck* *.html +!www/template.html /www/temp.md diff --git a/docs/archive_old.md b/docs/archive_old.md @@ -4,12 +4,8 @@ Information for this release can be found at [release.html](release.html). Updated versions of libreboot can be found at [libreboot.org](http://libreboot.org/). - **This page is \*obsolete\*, provided for historical purposes.** - - - Releases -------- @@ -27,8 +23,6 @@ Releases - [r20131213 (2nd release)](#release20131213) (13th December 2013) - [r20131212 (1st release)](#release20131212) (12th December 2013) - - Release 20150518 {#release20150518} ================ @@ -254,8 +248,6 @@ Changes for this release, relative to r20150208 (earliest changes last, recent c - **New board:** ThinkPad R400 support added to libreboot. - bbb\_setup.html: tell user to use libreboot's own flashrom - - Release 20150124, 20150126 and 20150208 {#release20150124} ======================================= @@ -468,8 +460,6 @@ Changes for this release (latest changes first, earliest changes last) html errors - Documentation (macbook21 related): clean up - - Release 20141015 {#release20141015} ================ @@ -538,10 +528,6 @@ Changes for this release (latest changes first, earliest changes last) Parabola GNU+Linux installation. - Documentation: added more info about wifi chipsets -[Back to top of page.](#pagetop) - - - 6th release (pre-release, 7th beta) {#release20140911} =================================== @@ -1119,10 +1105,6 @@ Revisions for r20140711 (1st beta) (11th July 2014) and advanced mini dock) to relevant sections. - Added to docs/\#serial -[Back to top of page.](#pagetop) - - - Release 20140622 (5th release) {#release20140622} ============================== @@ -1239,10 +1221,6 @@ Development notes - (in Console-> in coreboot "make menuconfig") - (and build with grub\_serial.cfg and grub\_memdisk\_serial.cfg) -[Back to top of page.](#pagetop) - - - Release 20140221 (4th release) {#release20140221} ============================== @@ -1275,10 +1253,6 @@ The "Parse" options read ./isolinux/isolinux.cfg on a CD or USB, and automatically converts it to a grub config and switches to the boot menu of that distro. This makes booting ISOs \*much\* easier than before. -[Back to top of page.](#pagetop) - - - r20131214 (3rd release) {#release20131214} ======================= @@ -1296,10 +1270,6 @@ Development notes - Added SeaBIOS payload to GRUB2 (for booting USB drives) - new grub.cfg -[Back to top of page.](#pagetop) - - - r20131213 (2nd release) {#release20131213} ======================= @@ -1319,10 +1289,6 @@ Development notes - improvements to the documentation - new grub.cfg -[Back to top of page.](#pagetop) - - - r20131212 (1st release) {#release20131212} ======================= @@ -1340,10 +1306,6 @@ Development notes - initial release - source code deblobbed -[Back to top of page.](#pagetop) - - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/bsd/freebsd.md b/docs/bsd/freebsd.md @@ -26,14 +26,10 @@ with libreboot. [Back to previous index](./) - - **This section is only for the GRUB payload. For depthcharge (used on CrOS devices in libreboot), instructions have yet to be written in the libreboot documentation.** - - freebsd.img is the installation image for FreeBSD. Adapt the filename accordingly, for whatever FreeBSD version you use. @@ -112,8 +108,6 @@ Continue reading, for information about how to do that. [Back to top of page](#pagetop). - - Installing FreeBSD without full disk encryption ----------------------------------------------- @@ -128,8 +122,6 @@ process for installing FreeBSD. [Back to top of page](#pagetop). - - Installing FreeBSD with full disk encryption -------------------------------------------- @@ -137,8 +129,6 @@ TODO [Back to top of page](#pagetop). - - Booting ------- @@ -146,8 +136,6 @@ TODO [Back to top of page](#pagetop). - - Configuring Grub ---------------- @@ -155,8 +143,6 @@ TODO [Back to top of page](#pagetop). - - Troubleshooting =============== @@ -177,8 +163,6 @@ numbers may differ. Use TAB completion. [Back to top of page](#pagetop). - - Copyright © 2016 Leah Rowe <info@minifree.org>\ Copyright © 2016 Scott Bonds <scott@ggr.com>\ Permission is granted to copy, distribute and/or modify this document diff --git a/docs/bsd/index.md b/docs/bsd/index.md @@ -14,8 +14,6 @@ instructions have yet to be written.** - [How to install FreeBSD on a libreboot system](freebsd.html) - - Copyright © 2016 Scott Bonds <scott@ggr.com>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/bsd/netbsd.md b/docs/bsd/netbsd.md @@ -21,14 +21,10 @@ for the initial instructions. [Back to previous index](./) - - **This section is only for the GRUB payload. For depthcharge (used on CrOS devices in libreboot), instructions have yet to be written in the libreboot documentation.** - - netbsd.iso is the installation image for NetBSD. Adapt the filename accordingly, for your version of NetBSD. @@ -108,8 +104,6 @@ Continue reading, for information about how to do that. [Back to top of page](#pagetop). - - Installing NetBSD without full disk encryption ---------------------------------------------- @@ -124,8 +118,6 @@ process for installing NetBSD. [Back to top of page](#pagetop). - - Installing NetBSD with full disk encryption ------------------------------------------- @@ -133,8 +125,6 @@ TODO [Back to top of page](#pagetop). - - Booting ------- @@ -147,8 +137,6 @@ NetBSD will start booting. Yay! [Back to top of page](#pagetop). - - Configuring Grub ---------------- @@ -172,8 +160,6 @@ seconds NetBSD will boot, or you can hit enter to boot. [Back to top of page](#pagetop). - - Troubleshooting =============== @@ -194,8 +180,6 @@ numbers may differ. Use TAB completion. [Back to top of page](#pagetop). - - Copyright © 2016 Leah Rowe <info@minifree.org>\ Copyright © 2016 Scott Bonds <scott@ggr.com>\ Permission is granted to copy, distribute and/or modify this document diff --git a/docs/bsd/openbsd.md b/docs/bsd/openbsd.md @@ -20,14 +20,10 @@ your libreboot system, using nothing more than a USB flash drive (and [Back to previous index](./) - - **This section is only for the GRUB payload. For depthcharge (used on CrOS devices in libreboot), instructions have yet to be written in the libreboot documentation.** - - install60.fs is the installation image for OpenBSD 6.0. Adapt the filename accordingly, for a different OpenBSD version or LibertyBSD. @@ -107,8 +103,6 @@ Continue reading, for information about how to do that. [Back to top of page](#pagetop). - - Installing OpenBSD without full disk encryption ----------------------------------------------- @@ -122,8 +116,6 @@ process for installing OpenBSD. [Back to top of page](#pagetop). - - Installing OpenBSD with full disk encryption -------------------------------------------- @@ -154,8 +146,6 @@ OpenBSD bootloader already works. [Back to top of page](#pagetop). - - Booting ------- @@ -168,8 +158,6 @@ OpenBSD will start booting. Yay! [Back to top of page](#pagetop). - - Configuring Grub ---------------- @@ -193,8 +181,6 @@ seconds OpenBSD will boot, or you can hit enter to boot. [Back to top of page](#pagetop). - - Troubleshooting =============== @@ -215,8 +201,6 @@ numbers may differ. Use TAB completion. [Back to top of page](#pagetop). - - Copyright © 2016 Scott Bonds <scott@ggr.com>\ Copyright © 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document diff --git a/docs/depthcharge/index.md b/docs/depthcharge/index.md @@ -2,7 +2,6 @@ This section relates to the depthcharge payload used in libreboot. - - [CrOS security model](#cros_security_model) - [Developer mode screen](#developer_mode_screen) - Holding the developer mode screen @@ -17,8 +16,6 @@ This section relates to the depthcharge payload used in libreboot. - [Configuring verified boot parameters](#configuring_verified_boot_parameters) - - CrOS security model {#cros_security_model} =================== @@ -28,15 +25,11 @@ compromised, that is implemented as the verified boot (vboot) reference, most of which is executed within depthcharge. A detailed overview of the CrOS security model is available on the dedicated page. - In spite of the CrOS security model, depthcharge won't allow booting kernels without verifying their signature and booting from external media or legacy payload unless explicitly allowed: see [configuring verified boot parameters](#configuring_verified_boot_parameters). - - - Developer mode screen {#developer_mode_screen} ===================== @@ -50,7 +43,6 @@ external media (when enabled), booting from legacy payload (when enabled), showing information about the device and disabling developer mode. - Holding the developer mode screen {#holding_developer_mode_screen} --------------------------------- @@ -58,8 +50,6 @@ As instructed on the developer mode screen, the screen can be held by pressing **Ctrl + H** in the first 3 seconds after the screen is shown. After that delay, depthcharge will resume booting normally. - - Booting normally {#booting_normally} ---------------- @@ -68,8 +58,6 @@ after **3 seconds** (if developer mode screen is not held).\ The default boot medium (internal storage, external media, legacy payload) is shown on screen. - - Booting from different mediums {#booting_different_mediums} ------------------------------ @@ -84,8 +72,6 @@ can be triggered by pressing various key combinations: - External media: **Ctrl + U** (when enabled) - Legacy payload: **Ctrl + L** (when enabled) - - Showing device information {#showing_device_information} -------------------------- @@ -94,8 +80,6 @@ can be triggered by pressing **Ctrl + I** or **Tab**.\ Various information is shown, including vboot non-volatile data, TPM status, GBB flags and key hashes.\ - - Warnings -------- @@ -105,9 +89,6 @@ The developer mode screen will show warnings when: - Booting from external media is enabled - Booting legacy payloads is enabled - - - Recovery mode screen {#recovery_mode_screen} ==================== @@ -118,7 +99,6 @@ It allows recovering the device from a bad state by booting from a trusted recovery media. When accessed with the device in a good state, it also allows enabling developer mode. - Recovering from a bad state {#recovering_bad_state} --------------------------- @@ -145,8 +125,6 @@ replaced. When the recovery private key is available (e.g. when using self-generated keys), it can be used to sign a kernel for recovery purposes. - - Enabling developer mode {#enabling_developer_mode} ----------------------- @@ -155,9 +133,6 @@ by pressing **Ctrl + D**.\ Instructions to confirm enabling developer mode are then shown on screen. - - - Configuring verified boot parameters {#configuring_verified_boot_parameters} ==================================== @@ -182,7 +157,6 @@ of the device**. In particular, disabling kernels signature verification, external media boot and legacy payload boot can weaken the security of the device. - The following parameters can be configured: - Kernels signature verification: @@ -217,9 +191,6 @@ The following parameters can be configured: \# **crossystem dev\_default\_boot=legacy** - - - Copyright © 2015 Paul Kocialkowski <contact@paulk.fr>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/distros/index.md b/docs/distros/index.md @@ -76,8 +76,6 @@ guide](https://wiki.parabola.nu/Migration_from_the_GNU+Linux_distribution_of_Arc We recommend using the *MATE* desktop. - - Copyright © 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/future/index.md b/docs/future/index.md @@ -5,8 +5,6 @@ see [old.html](old.html). Or go [back to main task list](../tasks.html). - - Table of contents ================= @@ -20,8 +18,6 @@ Table of contents - [IntelVbtTool results](#intelvbttool_results) - [Fallback patches for i945](#fallback_patches) - - standard test {#standard_test} ============= @@ -44,10 +40,6 @@ on i945 (X60 and T60). - sudo cbmem -c - Try some 3D games with latest kernel. -[Back to top of page.](#pagetop) - - - T60 cpu microcode {#t60_cpu_microcode} ================= @@ -62,10 +54,6 @@ look at the debugging results collected in [t7200q](../t7200q) directory Every other T7200 tested so far has worked without microcode updates. -[Back to top of page.](#pagetop) - - - i945 VRAM size {#i945_vram_size} ============== @@ -105,10 +93,6 @@ stefanct: test the various possible (but reserved) values of GMS and see what the resulting VRAM size is\ vimuser: so, TOM - BSM -[Back to top of page.](#pagetop) - - - LCD panels on i945 - fix incompatible panels {#lcd_i945_incompatibility} ============================================ @@ -231,10 +215,6 @@ LTN141XA-L01: revert to libreboot git commit c943281 to see this e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ -[Back to top of page.](#pagetop) - - - i945 gfx: X60/T60 VBT implementation (experimental: testing) {#i945_vbt} ============================================================ @@ -299,8 +279,6 @@ Results (\# means untested): [Back to top of page](#pagetop) - - intelvbttool test results (VGA ROM dumps) {#intelvbttool_results} ========================================= @@ -372,10 +350,6 @@ Test results (\# means untested and all had docks, unless noted). - IDtech IAQX10N: \# - IDtech IAQX10S: \# -[Back to top of page.](#pagetop) - - - Fallback patches {#fallback_patches} ================ @@ -383,10 +357,6 @@ Fallback patches {#fallback_patches} <http://www.coreboot.org/Fallback_mechanism> see [this IRC log](gnutoo_fallback_patch) (warning, not cleaned up) -[Back to top of page.](#pagetop) - - - Other - unlisted (low priority) {#other} =============================== @@ -404,10 +374,6 @@ Other - unlisted (low priority) {#other} enough memory being allocated) since the same code works on T60 SXGA+ and UXGA, where GRUB actually display graphics. -[Back to top of page.](#pagetop) - - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/future/old.md b/docs/future/old.md @@ -5,8 +5,6 @@ For current notes, see [](./). These are old (obsolete) notes that mare kept because they might become useful again in the future. - - Table of contents ================= @@ -20,8 +18,6 @@ Table of contents - [i945/x60: coreboot 5927 testing (3D fix for kernel 3.12+ on replay code)](#x60_cb5927_testing) - - X60 native graphics initialization (with backlight controls) {#x60_native_notes} ============================================================ @@ -99,8 +95,6 @@ frequency'. [Back to top of page](#pagetop) - - T60 native graphics initialization (with backlight controls) {#t60_native_notes} ============================================================ @@ -130,8 +124,6 @@ See [\#lcd\_i945\_incompatibility](./#lcd_i945_incompatibility). [Back to top of page](#pagetop) - - i945: 3D fix (based on 5927) for kernel 3.12+ on 5320 {#5320_kernel312fix} ===================================================== @@ -175,8 +167,6 @@ apt-get repositories) using tool "intel\_gtt": [Back to top of page](#pagetop) - - i945/X60: Coreboot 5927 testing (3D fix for kernel 3.12+ on replay code) {#x60_cb5927_testing} ======================================================================== @@ -227,8 +217,6 @@ GTT (graphics translation table) size is PGETBL\_save, max 256 KiB. BSM [Back to top of page](#pagetop) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/git/index.md b/docs/git/index.md @@ -3,15 +3,12 @@ Depthcharge is currently not documented, since it is in the new build system. Instructions for how to build boards that have depthcharge are included in the BUILD\_HOWTO file in libreboot.git or \_src. - - Building libreboot from source ============================== This section relates to building libreboot from source, and working with the git repository. - - [Install build dependencies](#build_dependencies) - [Get the full source code from metadata (git clone)](#build_meta) - [How to build "bucts" (for LenovoBIOS @@ -20,8 +17,6 @@ the git repository. - [How to build "flashrom"](#build_flashrom) - [How to build the ROM images](#build) - - Install build dependencies {#build_dependencies} ========================== @@ -31,7 +26,6 @@ libreboot\_src.tar.xz or git. **If you are using libreboot\_util.tar.xz (binary archive) then you can ignore this, because ROM images and statically compiled executables for the utilities are included.** - For Debian Stretch (may also work on Debian Jessie), you can run the following command: $ sudo ./oldbuild dependencies debian @@ -42,13 +36,10 @@ For Parabola, you can run the following command: or: # ./oldbuild dependencies parabola - For other GNU+Linux distributions, you can adapt the existing scripts. [Back to top of page](#pagetop) - - Get the full source code from metadata (git clone) {#build_meta} ================================================== @@ -90,10 +81,6 @@ them. Read the script in a text editor to learn more. To build the ROM images, see [\#build](#build). -[Back to top of page.](#pagetop) - - - How to build "bucts" (for LenovoBIOS X60/X60S/X60T/T60) {#build_bucts} ========================================================= @@ -151,10 +138,6 @@ To statically compile it, do this: The "builddeps" script in libreboot\_src also makes use of builddeps-bucts. -[Back to top of page.](#pagetop) - - - How to build "flashrom" {#build_flashrom} ========================= @@ -196,10 +179,6 @@ executables: The "builddeps" script in libreboot\_src also makes use of builddeps-flashrom. -[Back to top of page.](#pagetop) - - - How to build the ROM images {#build} =========================== @@ -251,7 +230,6 @@ The ROM images will be stored under **bin/*payload*/**, where *payload* could be *grub*, *seabios*, or whatever other payload those images were built for. - Preparing release archives (optional) ------------------------------------- @@ -349,11 +327,8 @@ libreboot\_src.tar.xz have been created, under The ROM images will be stored in separate archives for each system, under **release/oldbuildsystem/rom/**. - [Back to top of page](#pagetop) - - Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/gnulinux/configuring_parabola.md b/docs/gnulinux/configuring_parabola.md @@ -7,8 +7,6 @@ uses LXDE because it's lightweight, but we recommend the *MATE* desktop [Back to previous index](./) - - Table of Contents ================= @@ -41,8 +39,6 @@ Table of Contents - [LXDE - battery monitor](#lxde_battery) - [LXDE - network manager](#lxde_network) - - While not strictly related to the libreboot project, this guide is intended to be useful for those interested in installing Parabola on their libreboot system. @@ -58,8 +54,6 @@ will be made to maintain it. to be made at the present date, please get in touch with the libreboot project!** - - You do not necessarily have to follow this guide word-for-word; *parabola* is extremely flexible. The aim here is to provide a common setup that most users will be happy with. While Parabola can seem @@ -72,8 +66,6 @@ Paradoxically, as you get more advanced Parabola can actually become compared to what most distributions provide. You will find over time that other distributions tend to *get in your way*. - - **This guide assumes that you already have Parabola installed. If you have not yet installed Parabola, then [this guide](encrypted_parabola.html) is highly recommended!** @@ -92,8 +84,6 @@ system Linux, using the term open-source (or closed-source), and it will sometimes recommend the use of proprietary software. You need to be careful about this when reading anything on the Arch wiki. - - Some of these steps require internet access. I'll go into networking later but for now, I just connected my system to a switch and did: # systemctl start dhcpcd.service @@ -103,8 +93,6 @@ For most people this should be enough, but if you don't have DHCP on your network then you should setup your network connection first:\ [Setup network connection in Parabola](#network) - - Configure pacman {#pacman_configure} ---------------- @@ -119,10 +107,6 @@ and from reading <https://wiki.archlinux.org/index.php/Pacman> (make sure to read and understand this, it's very important) and <https://wiki.parabolagnulinux.org/Official_Repositories> -[Back to top of page.](#pagetop) - - - Updating Parabola {#pacman_update} ----------------- @@ -173,10 +157,6 @@ stable and trouble-free, so long as you are aware of how to check for issues, and are willing to spend some time fixing issues in the rare event that they do occur. -[Back to top of page.](#pagetop) - - - Maintaining Parabola {#pacman_maintain} -------------------- @@ -187,8 +167,6 @@ before. In general, keeping notes (such as what I have done with this page) can be very useful as a reference in the future (if you wanted to re-install it or install the distro on another computer, for example). -[Back to top of page.](#pagetop) - ### Cleaning the package cache {#pacman_cacheclean} **The following is very important as you continue to use, update and @@ -216,18 +194,12 @@ This is inadvisable, since it means re-downloading the package again if you wanted to quickly re-install it. This should only be used when disk space is at a premium. -[Back to top of page.](#pagetop) - ### pacman command equivalents {#pacman_commandequiv} The following table lists other distro package manager commands, and their equivalent in pacman:\ <https://wiki.archlinux.org/index.php/Pacman_Rosetta> -[Back to top of page.](#pagetop) - - - your-freedom {#yourfreedom} ------------ @@ -240,10 +212,6 @@ fail if these packages are installed, citing them as conflicts; the recommended solution is then to delete the offending packages, and continue installing *your-freedom*. -[Back to top of page.](#pagetop) - - - Add a user {#useradd} ---------- @@ -268,8 +236,6 @@ passphrases (instead of passwords). [Back to top of page](#pagetop) - - systemd ------- @@ -344,8 +310,6 @@ the systemd-tmpfiles utility manually at all. [Back to top of page](#pagetop) - - Interesting repositories {#interesting_repos} ------------------------ @@ -371,17 +335,11 @@ List all available packages in this repository: In the end, I decided not to install anything from it but I kept the repository enabled regardless. -[Back to top of page.](#pagetop) - - - Setup a network connection in Parabola {#network} -------------------------------------- Read <https://wiki.archlinux.org/index.php/Configuring_Network>. -[Back to top of page.](#pagetop) - ### Set the hostname {#network_hostname} This should be the same as the hostname that you set in /etc/hostname @@ -407,8 +365,6 @@ forward-thinking here. The *hostname* utility is part of the *inetutils* package and is in core/, installed by default (as part of *base*). -[Back to top of page.](#pagetop) - ### Network Status {#network_status} According to the Arch wiki, @@ -455,8 +411,6 @@ Show device names: Changing the device names is possible (I chose not to do it):\ <https://wiki.archlinux.org/index.php/Configuring_Network#Change_device_name> -[Back to top of page.](#pagetop) - ### Network setup {#network_setup} I actually chose to ignore most of Networking section on the wiki. @@ -467,10 +421,6 @@ If you need to, set a static IP address (temporarily) using the networking guide and the Arch wiki, or start the dhcpcd service in systemd. NetworkManager will be setup later, after installing LXDE. -[Back to top of page.](#pagetop) - - - System Maintenance {#system_maintain} ------------------ @@ -487,10 +437,6 @@ data comes from it. Therefore, don't rely on it too much): Read <https://wiki.archlinux.org/index.php/S.M.A.R.T.> to learn how to use it. -[Back to top of page.](#pagetop) - - - Configuring the desktop {#desktop} ----------------------- @@ -500,9 +446,6 @@ on the Arch wiki. The plan is to use LXDE and LXDM/LightDM, along with everything else that you would expect on other distributions that provide LXDE by default. -[Back to top of page.](#pagetop) - - ### Installing Xorg {#desktop_xorg} Based on <https://wiki.archlinux.org/index.php/Xorg>. @@ -547,10 +490,6 @@ session.\ xorg-xclock xterm**\ </optional> -[Back to top of page.](#pagetop) - - - ### Xorg keyboard layout {#desktop_kblayout} Refer to @@ -596,10 +535,6 @@ For you, the steps above may differ if you have a different layout. If you use a US Qwerty keyboard, then you don't even need to do anything (though it might help, for the sake of being explicit). -[Back to top of page.](#pagetop) - - - ### Install LXDE {#desktop_lxde} Desktop choice isn't that important to me, so for simplicity I decided @@ -658,27 +593,15 @@ exec startlxde\ * Now make sure that it is executable: $ chmod +x .xinitrc -[Back to top of page.](#pagetop) - - - ### LXDE - clock {#lxde_clock} In **Digital Clock Settings** (right click the clock) I set the Clock Format to *%Y/%m/%d %H:%M:%S* -[Back to top of page.](#pagetop) - - - ### LXDE - font {#lxde_font} NOTE TO SELF: come back to this later. -[Back to top of page.](#pagetop) - - - ### LXDE - screenlock {#lxde_screenlock} Arch wiki recommends to use *xscreensaver*: @@ -692,10 +615,6 @@ Screen After* (checked) to 10 minutes. You can now lock the screen with *Logout :: Lock Screen* in the LXDE menu. -[Back to top of page.](#pagetop) - - - ### LXDE - automounting {#lxde_automount} Refer to @@ -703,19 +622,11 @@ Refer to I chose to ignore this for now. NOTE TO SELF: come back to this later. -[Back to top of page.](#pagetop) - - - ### LXDE - disable suspend {#lxde_suspend} When closing the laptop lid, the system suspends. This is annoying at least to me. NOTE TO SELF: disable it, then document the steps here. -[Back to top of page.](#pagetop) - - - ### LXDE - battery monitor {#lxde_battery} Right click lxde panel and *Add/Remove Panel Items*. Click *Add* and @@ -724,10 +635,6 @@ the applet and go to *Battery Monitor Settings*, check the box that says *Show Extended Information*. Now click *Close*. When you hover the cursor over it, it'll show information about the battery. -[Back to top of page.](#pagetop) - - - ### LXDE - Network Manager {#lxde_network} Refer to <https://wiki.archlinux.org/index.php/LXDE#Network_Management>. @@ -772,11 +679,6 @@ I added the volume control applet to the panel (right click panel, and add a new applet). I also later changed the icons to use the gnome icon theme, in *lxappearance*. -[Back to top of page.](#pagetop) - - - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/gnulinux/encrypted_debian.md b/docs/gnulinux/encrypted_debian.md @@ -43,8 +43,6 @@ drive. [Back to previous index](./) - - Set a strong user password (lots of lowercase/uppercase, numbers and symbols). @@ -61,8 +59,6 @@ therefore optional, and not recommended. Choose 'no'.** you will set later on. Your LUKS password should, like the user password, be secure.** - - Partitioning ============ @@ -103,8 +99,6 @@ Choose 'Manual' partitioning: - name: **swap** (user this exact name) - size: press enter - - Further partitioning ==================== @@ -120,16 +114,12 @@ mountpoints and filesystems to use. - done setting up partition - Now you select 'Finished partitioning and write changes to disk'. - - Kernel ====== Installation will ask what kernel you want to use. linux-generic is fine. - - Tasksel ======= @@ -150,16 +140,12 @@ instead, which contains the most up to date versions of the Linux kernel. These kernels are also deblobbed, like Debian's kernels, so you can be sure that no binary blobs are present. - - Postfix configuration ===================== If asked, choose *"No Configuration"* here (or maybe you want to select something else. It's up to you.) - - Install the GRUB boot loader to the master boot record ====================================================== @@ -170,15 +156,11 @@ Choice is irrelevant here. *You do not need to install GRUB at all, since in libreboot you are using the GRUB payload (for libreboot) to boot your system directly.* - - Clock UTC ========= Just say 'Yes'. - - Booting your system =================== @@ -193,8 +175,6 @@ cryptdevice=/dev/mapper/matrix-rootvol:root**\ grub> initrd /initrd.img grub> boot - - ecryptfs ======== @@ -209,8 +189,6 @@ directory from another system, so write it down and keep the note somewhere secret. Ideally, you should memorize it and then burn the note (or not even write it down, and memorize it still)> - - Modify grub.cfg (CBFS) ====================== @@ -235,8 +213,6 @@ hardening your GRUB configuration, for security purposes. Flash the modified ROM using [this tutorial](../install/#flashrom). - - Troubleshooting =============== @@ -248,7 +224,6 @@ station. Further investigation revealed that it was the DVD drive causing problems. Removing that worked around the issue. - "sudo wodim -prcap" shows information about the drive: Device was not specified. Trying to find an appropriate drive... Detected CD-R drive: /dev/sr0 @@ -325,8 +300,6 @@ problems. Removing that worked around the issue. Does write ultra high speed CD-RW media Does not write ultra high speed+ CD-RW media - - Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/gnulinux/encrypted_parabola.md b/docs/gnulinux/encrypted_parabola.md @@ -32,8 +32,6 @@ drive. [Back to previous index](./) - - Boot Parabola's install environment. [How to boot a GNU+Linux installer](grub_boot_installer.html). @@ -49,8 +47,6 @@ to the Parabola wiki at a later date. For up to date Parabola install guide, go to the Parabola wiki. This guide essentially cherry picks the useful information (valid at the time of writing: 2015-08-25). - - This section deals with wiping the storage device on which you plan to install Parabola GNU+Linux. Follow these steps, but if you use an SSD, also: @@ -89,8 +85,6 @@ this: (Wiping the LUKS header is important, since it has hashed passphrases and so on. It's 'secure', but 'potentially' a risk). - - Change keyboard layout ---------------------- @@ -101,8 +95,6 @@ list the available keymaps and use yours: # loadkeys LAYOUT For me, LAYOUT would have been dvorak-uk. - - Establish an internet connection -------------------------------- @@ -110,8 +102,6 @@ Refer to [this guide](https://wiki.parabola.nu/Beginners%27_guide#Establish_an_internet_connection). Wired is recommended, but wireless is also explained there. - - Getting started --------------- @@ -119,8 +109,6 @@ The beginning is based on <https://wiki.parabolagnulinux.org/Installation_Guide>. Then I referred to <https://wiki.archlinux.org/index.php/Partitioning> at first. - - dm-mod ------ @@ -185,8 +173,6 @@ without writing it down or storing it anywhere. Use of the *diceware method* is recommended, for generating secure passphrases (instead of passwords). - - Create LVM ---------- @@ -235,8 +221,6 @@ command: # lvdisplay - - Create / and swap partitions, and mount --------------------------------------- @@ -255,8 +239,6 @@ Mount the root (/) partition: # mount /dev/matrix/root /mnt - - Continue with Parabola installation ----------------------------------- @@ -325,8 +307,6 @@ the install:\ \# **pacstrap /mnt base base-devel wpa\_supplicant dialog iw wpa\_actiond** - - Configure the system -------------------- @@ -459,8 +439,6 @@ your LUKS password. Use of the *diceware method* is recommended, for generating secure passphrases (instead of passwords). - - Extra security tweaks --------------------- @@ -487,8 +465,6 @@ Configure sudo - not covered here. Will be covered post-installation in another tutorial, at a later date. If this is a single-user system, you don't really need sudo. - - Unmount, reboot! ---------------- @@ -513,8 +489,6 @@ Lock the encrypted partition (close it): # shutdown -h now Remove the installation media, then boot up again. - - Booting from GRUB ----------------- @@ -532,8 +506,6 @@ cryptdevice=/dev/sda1:root**\ You could also make it load /boot/vmlinuz-linux-libre-grsec and /boot/initramfs-linux-libre-grsec.img - - Follow-up tutorial: configuring Parabola ---------------------------------------- @@ -549,8 +521,6 @@ means that you are in control. For more information, read [The Arch Way](https://wiki.archlinux.org/index.php/The_Arch_Way) (Parabola also follows it). - - Modify grub.cfg inside the ROM ------------------------------ @@ -671,14 +641,10 @@ flashed alongside it as a *payload*): # pacman -R grub - - If you followed all that correctly, you should now have a fully encrypted Parabola installation. Refer to the wiki for how to do the rest. - - Bonus: Using a key file to unlock /boot/ ---------------------------------------- @@ -713,16 +679,12 @@ above! -, or add it in the kernel command line for GRUB: You can also place this inside the grub.cfg that exists in CBFS: [grub\_cbfs.html](grub_cbfs.html). - - Further security tips --------------------- <https://wiki.archlinux.org/index.php/Security>.\ <https://wiki.parabolagnulinux.org/User:GNUtoo/laptop> - - Troubleshooting =============== @@ -734,7 +696,6 @@ station. Further investigation revealed that it was the DVD drive causing problems. Removing that worked around the issue. - "sudo wodim -prcap" shows information about the drive: Device was not specified. Trying to find an appropriate drive... Detected CD-R drive: /dev/sr0 @@ -811,8 +772,6 @@ problems. Removing that worked around the issue. Does write ultra high speed CD-RW media Does not write ultra high speed+ CD-RW media - - Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org>\ Copyright © 2015 Jeroen Quint <jezza@diplomail.ch>\ Permission is granted to copy, distribute and/or modify this document diff --git a/docs/gnulinux/grub_boot_installer.md b/docs/gnulinux/grub_boot_installer.md @@ -14,14 +14,10 @@ flash drive (and *dd*). [Back to previous index](./) - - **This section is only for the GRUB payload. For depthcharge (used on CrOS devices in libreboot), instructions have yet to be written in the libreboot documentation.** - - Prepare the USB drive (in GNU+Linux) ------------------------------------ @@ -98,8 +94,6 @@ Continue reading, for information about how to do that. [Back to top of page](#pagetop). - - Installing GNU+Linux with full disk encryption ---------------------------------------------- @@ -110,8 +104,6 @@ Installing GNU+Linux with full disk encryption [Back to top of page](#pagetop). - - Debian or Devuan net install? ----------------------------- @@ -132,8 +124,6 @@ We recommend using the *MATE* desktop. [Back to top of page](#pagetop). - - Booting ISOLINUX images (automatic method) ------------------------------------------ @@ -144,8 +134,6 @@ that distro. [Back to top of page](#pagetop). - - Booting ISOLINUX images (manual method) --------------------------------------- @@ -193,8 +181,6 @@ now be booting your USB drive in the way that you specified. [Back to top of page](#pagetop). - - Troubleshooting =============== @@ -237,8 +223,6 @@ debian-installer (text mode) net install method. [Back to top of page](#pagetop). - - Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org>\ Copyright © 2016 Scott Bonds <scott@ggr.com>\ Permission is granted to copy, distribute and/or modify this document diff --git a/docs/gnulinux/grub_cbfs.md b/docs/gnulinux/grub_cbfs.md @@ -27,8 +27,6 @@ depthcharge payload, ignore this section entirely.** [Back to previous index](./) - - Table of Contents ================= @@ -43,9 +41,6 @@ Table of Contents - [Testing](#testing) - [Final steps](#final_steps) - - - Introduction ------------ @@ -53,8 +48,6 @@ Download the latest release from <http://libreboot.org/>\ **If you downloaded from git, refer to [../git/\#build\_meta](../git/#build_meta) before continuing.** -[Back to top of page.](#pagetop) - There are several advantages to modifying the GRUB configuration stored in CBFS, but this also means that you have to flash a new libreboot ROM image on your system (some users feel intimidated by this, to say the @@ -65,8 +58,6 @@ If you aren't up to that then don't worry; it is possible to use a custom GRUB menu without flashing a new image, by loading a GRUB configuration from a partition on the main storage instead. - - 1st option: don't re-flash {#option1_dont_reflash} --------------------------- @@ -103,20 +94,12 @@ of this page is irrelevant to you); **in libreboot\_grub.cfg on disk, if you are adapting it based on grub.cfg from CBFS then remove the check for libreboot\_grub.cfg otherwise it will loop.**. -[Back to top of page.](#pagetop) - - - 2nd option: re-flash {#option2_reflash} -------------------- You can modify what is stored inside the flash chip quite easily. Read on to find out how. -[Back to top of page.](#pagetop) - - - Acquire the necessary utilities {#tools} ------------------------------- @@ -126,10 +109,6 @@ Use ***cbfstool*** and ***flashrom***. There are available in the available from the repositories: # pacman -S flashrom -[Back to top of page.](#pagetop) - - - Acquiring the correct ROM image {#rom} ------------------------------- @@ -147,10 +126,6 @@ to the command, for example: # flashrom -c MX25L6405 -p internal -r libreboot.rom -[Back to top of page.](#pagetop) - - - Extract grubtest.cfg from the ROM image {#extract_testconfig} --------------------------------------- @@ -170,10 +145,6 @@ Extract grubtest.cfg from the ROM image: Modify the grubtest.cfg accordingly. -[Back to top of page.](#pagetop) - - - Re-insert the modified grubtest.cfg into the ROM image {#reinsert_modified_testconfig} ------------------------------------------------------ @@ -186,10 +157,6 @@ Next, insert the modified version:\ **\$ ./cbfstool libreboot.rom add -n grubtest.cfg -f grubtest.cfg -t raw** -[Back to top of page.](#pagetop) - - - Testing ------- @@ -213,10 +180,6 @@ sceptical in any way, then re-do the steps above until you get it right! Do \*not\* proceed past this point unless you are 100% sure that your new configuration is safe (or desirable) to use.** -[Back to top of page.](#pagetop) - - - Final steps {#final_steps} ----------- @@ -245,10 +208,6 @@ Add the modified version that you just made: flash it. It's the same method as you used before. Shut down and then boot up with your new configuration.** -[Back to top of page.](#pagetop) - - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Copyright © 2015 Jeroen Quint <jezza@diplomail.ch>\ Permission is granted to copy, distribute and/or modify this document diff --git a/docs/gnulinux/grub_hardening.md b/docs/gnulinux/grub_hardening.md @@ -6,8 +6,6 @@ highly recommended by the Libreboot project. [Back to previous index](./) - - GRUB secure boot with GPG ========================= @@ -31,7 +29,6 @@ image: cbfstool my.rom extract -n grubtest.cfg -f my.grubtest.cfg cbfstool my.rom remove -n grubtest.cfg - Helpful links: - [GRUB manual @@ -43,8 +40,6 @@ Helpful links: - [Coreboot GRUB security howto](https://www.coreboot.org/GRUB2#Security) - - GRUB Password ============= @@ -136,8 +131,6 @@ an attacker wants is then just a few GRUB commands away. As far as basic password setup is concerned we are done and we can now move on to signing. - - GPG keys ======== @@ -185,8 +178,6 @@ What remains now is to include the modifications into the image (rom): \... and flashing it. - - Copyright © 2017 Fedja Beader <fedja@protonmail.ch>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/gnulinux/index.md b/docs/gnulinux/index.md @@ -22,8 +22,6 @@ instructions have yet to be written.** - [How to harden your GRUB configuration, for security](grub_hardening.html) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/grub/index.md b/docs/grub/index.md @@ -2,16 +2,12 @@ This section relates to the GRUB payload used in libreboot. - - [Changing the background image in GRUB](#grub_background) - [Setting font in GRUB](#grub_font) - [GRUB keyboard layouts](#grub_keyboard) - [Custom keyboard layout in GRUB](#grub_custom_keyboard) - [UK Dvorak keyboard layout in GRUB](#grub_ukdvorak_keyboard) - - - Changing the background image in GRUB {#grub_background} ===================================== @@ -24,8 +20,6 @@ libreboot\_src/coreboot/util/cbfstool/ if you want to build from source. When you've done this, re-flash your ROM and you should have a new background at boot time. - - Setting font in GRUB (for reference) {#grub_font} ==================================== @@ -66,12 +60,9 @@ font):\ [Back to top of page](#pagetop) - - GRUB keyboard layouts (for reference) {#grub_keyboard} ===================================== - Custom keyboard layout in GRUB (for reference) {#grub_custom_keyboard} ---------------------------------------------- @@ -98,8 +89,6 @@ under bin. Example: **libreboot\_frazerty.rom**. [Back to top of page](#pagetop) - - UK Dvorak keyboard layout in GRUB (for reference) {#grub_ukdvorak_keyboard} ------------------------------------------------- @@ -111,9 +100,6 @@ file was created [Back to top of page](#pagetop) - - - Copyright © 2014 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/dock.md b/docs/hardware/dock.md @@ -1,14 +1,10 @@ % Notes about DMA and the docking station (X60/T60) - - - Use case: --------- Usually when people do full disk encryption, it's not really full disk, instead they still have a /boot in clear. - So an evil maid attack can still be done, in two passes: 1) Clone the hdd, Infect the initramfs or the kernel. 2) Wait for the user to enter its password, recover the password, @@ -65,7 +61,6 @@ | ICH7 | |_______________________| - The code: --------- Now if I look at the existing code, there is some superio drivers, like @@ -120,8 +115,6 @@ > The dock autodetection is tried only if it is also enabled > trough nvram. - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/index.md b/docs/hardware/index.md @@ -15,8 +15,6 @@ This section relates to hardware maintenance on supported targets. - [ThinkPad X60/X60S: hardware security](x60_security.html) - [ThinkPad T60: hardware security](t60_security.html) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/t60_heatsink.md b/docs/hardware/t60_heatsink.md @@ -4,8 +4,6 @@ Using this guide you can also change/upgrade the CPU. [Back to previous index](./) - - Hardware requirements {#hardware_requirements} ===================== @@ -14,16 +12,12 @@ Hardware requirements {#hardware_requirements} - thermal compound/paste (Arctic MX-4 is good. Others are also good.) - - Software requirements {#software_requirements} ===================== - xsensors - stress - - Disassembly {#recovery} =========== @@ -82,8 +76,6 @@ Always stress test ('stress -c 2' and xsensors. below 90C is ok) when replacing cpu paste/heatsink:\ ![](../images/t60_dev/0074.JPG) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/t60_lcd_15.md b/docs/hardware/t60_lcd_15.md @@ -6,8 +6,6 @@ the procedure is a bit more involved than on 15.1". [Back to previous index](./) - - Disassembly {#recovery} =========== @@ -46,8 +44,6 @@ It lives!\ ![](../images/t60_dev/0071.JPG) ![](../images/t60_dev/0072.JPG) ![](../images/t60_dev/0073.JPG) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/t60_security.md b/docs/hardware/t60_security.md @@ -5,8 +5,6 @@ tutorial is **incomplete** at the time of writing. [Back to previous index](./) - - Table of Contents ================= @@ -28,8 +26,6 @@ Software requirements {#software_requirements} - none (at least in the scope of the article as-is) - You probably want to encrypt your GNU+Linux install using LUKS - - Rationale ========= @@ -41,8 +37,6 @@ memory access that could communicate with inputs/outputs that could be used to remotely command the system (or leak data). All of this is purely theoretical for the time being. - - Disassembly {#procedure} =========== @@ -223,8 +217,6 @@ Always stress test ('stress -c 2' and xsensors. below 90C is ok) when replacing cpu paste/heatsink:\ ![](../images/t60_dev/0074.JPG) - - Not covered yet: ---------------- @@ -244,8 +236,6 @@ or directly to the video: A lot of this tutorial is based on that video. Look towards the second half of the video to see how to do the above. - - Also not covered yet: --------------------- @@ -267,8 +257,6 @@ Also not covered yet: - <https://en.wikipedia.org/wiki/Tempest_%28codename%29> - https://gitorious.org/gnutoo-for-coreboot/grub-assemble/source/a61f636797777a742f65f4c9c58032aa6a9b23c3: - - Extra notes =========== @@ -286,7 +274,6 @@ with the help of an SDR and some directional antennas[\[3\]](#ref3). controller](http://www.coreboot.org/Intel_82573_Ethernet_controller) on the X60 seems safe, according to Denis. - Risk level ---------- @@ -297,9 +284,6 @@ Risk level - Speakers: only problematic if the computer gets compromised. - EC: can be mitigated if following the guide on software security. - - - Further reading material (software security) ============================================ @@ -309,12 +293,9 @@ Further reading material (software security) /boot)](../gnulinux/encrypted_parabola.html) - [Notes about DMA access and the docking station](dock.html) - - References ========== - \[1\] physical access {#ref1} --------------------- @@ -327,8 +308,6 @@ to 400000\$, some other websites had prices 10 times lower but that but it was probably a typo. So if people increase their security it makes it more risky and more costly to attack people. - - \[2\] microphone {#ref2} ---------------- @@ -339,8 +318,6 @@ microphone jack can now become a headphone plug, that's called retasking. There is some support for it in GNU+Linux but it's not very well known. - - \[3\] Video (CCC) {#ref3} ----------------- @@ -349,9 +326,6 @@ their demo is experimental(their hardware also got damaged during the transport), the spies probably already have that since a long time. <http://berlin.ftp.media.ccc.de/congress/2013/webm/30c3-5356-en-Firmware_Fat_Camp_webm.webm> - - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/x60_heatsink.md b/docs/hardware/x60_heatsink.md @@ -3,9 +3,6 @@ This guide will teach you how to replace the fan and heatsink on your ThinkPad X60. - - - Table of Contents ================= @@ -13,8 +10,6 @@ Table of Contents - [Software Requirements](#software_requirements) - [Disassembly](#procedure) - - Hardware requirements {#hardware_requirements} ===================== @@ -25,16 +20,12 @@ Hardware requirements {#hardware_requirements} - Something to spread the paste with - - Software requirements (for CPU stress testing) {#software_requirements} ============================================== - xsensors utility - stress utility - - Disassembly {#procedure} =========== @@ -106,8 +97,6 @@ the heatsink, reversing previous steps. **xsensors** (or **watch sensors** command) can be used to monitor heat. Below 90C is ok. - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/x60_keyboard.md b/docs/hardware/x60_keyboard.md @@ -9,8 +9,6 @@ same place, and it's the same procedure. [Back to previous index](./) - - Just follow these steps, and then reverse {#recovery} ========================================= @@ -20,8 +18,6 @@ Just follow these steps, and then reverse {#recovery} ![](../images/x60_keyboard/4.JPG)\ ![](../images/x60_keyboard/5.JPG) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/x60_lcd_change.md b/docs/hardware/x60_lcd_change.md @@ -4,8 +4,6 @@ This tutorial is incomplete, and only pictures for now. [Back to previous index](./) - - ![](../images/x60_lcd_change/0001.JPG) ![](../images/x60_lcd_change/0002.JPG) ![](../images/x60_lcd_change/0003.JPG) @@ -14,8 +12,6 @@ This tutorial is incomplete, and only pictures for now. ![](../images/x60_lcd_change/0006.JPG) ![](../images/x60_lcd_change/0007.JPG) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hardware/x60_security.md b/docs/hardware/x60_security.md @@ -5,8 +5,6 @@ tutorial is **incomplete** at the time of writing. [Back to previous index](./) - - Table of Contents ================= @@ -14,8 +12,6 @@ Table of Contents - [Software Requirements](#software_requirements) - [The procedure](#procedure) - - Hardware requirements {#hardware_requirements} ===================== @@ -29,8 +25,6 @@ Software requirements {#software_requirements} - none (at least in the scope of the article as-is) - You probably want to encrypt your GNU+Linux install using LUKS - - Rationale ========= @@ -174,8 +168,6 @@ Also not covered yet: - <https://en.wikipedia.org/wiki/Tempest_%28codename%29> - https://gitorious.org/gnutoo-for-coreboot/grub-assemble/source/a61f636797777a742f65f4c9c58032aa6a9b23c3: - - Extra notes =========== @@ -193,7 +185,6 @@ with the help of an SDR and some directional antennas[\[3\]](#ref3). controller](http://www.coreboot.org/Intel_82573_Ethernet_controller) on the X60 seems safe, according to Denis. - Risk level ---------- @@ -204,9 +195,6 @@ Risk level - Speakers: only problematic if the computer gets compromised. - EC: can be mitigated if following the guide on software security. - - - Further reading material (software security) ============================================ @@ -216,12 +204,9 @@ Further reading material (software security) /boot)](../gnulinux/encrypted_parabola.html) - [Notes about DMA access and the docking station](dock.html) - - References ========== - \[1\] physical access {#ref1} --------------------- @@ -234,8 +219,6 @@ to 400000\$, some other websites had prices 10 times lower but that but it was probably a typo. So if people increase their security it makes it more risky and more costly to attack people. - - \[2\] microphone {#ref2} ---------------- @@ -246,8 +229,6 @@ microphone jack can now become a headphone plug, that's called retasking. There is some support for it in GNU+Linux but it's not very well known. - - \[3\] Video (CCC) {#ref3} ----------------- @@ -256,9 +237,6 @@ their demo is experimental(their hardware also got damaged during the transport), the spies probably already have that since a long time. <http://berlin.ftp.media.ccc.de/congress/2013/webm/30c3-5356-en-Firmware_Fat_Camp_webm.webm> - - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hcl/c201.md b/docs/hcl/c201.md @@ -16,8 +16,6 @@ Flashing instructions can be found at [Back to previous index](./). - - - [Google's intent with CrOS devices](#googlesintent) - [Considerations about ChromeOS and free operating systems](#os) - [Caution: Video acceleration requires a non-free blob, software @@ -30,8 +28,6 @@ Flashing instructions can be found at - [Depthcharge payload](#depthcharge) - [Flash chip write protection: the screw](#thescrew) - - Google's intent with CrOS devices {#googlesintent} ================================== @@ -63,8 +59,6 @@ software movement. [Back to top of page](#pagetop). - - Considerations about ChromeOS and free operating systems {#os} ======================================================== @@ -87,8 +81,6 @@ TODO: instructions for Devuan [Back to top of page](#pagetop). - - Caution: Video acceleration requires a non-free blob, software rendering can be used instead. {#videoblobs} ============================================================================================= @@ -110,8 +102,6 @@ story: [Back to top of page](#pagetop). - - Caution: WiFi requires a non-free blob, a USB dongle can be used instead. {#wifiblobs} ========================================================================= @@ -137,8 +127,6 @@ These wifi dongles use the AR9271 (atheros) chipset, supported by the free *ath9k\_htc* driver in the Linux kernel. They work in *linux-libre* too. - - EC firmware is free software! {#ec} ============================= @@ -154,8 +142,6 @@ when using one of these laptops. The libreboot FAQ briefly describes what an *EC* is: <http://libreboot.org/faq/#firmware-ec> - - No microcode! {#microcode} ============= @@ -172,8 +158,6 @@ microcode. [Back to top of page](#pagetop). - - Depthcharge payload {#depthcharge} =================== @@ -181,8 +165,6 @@ These systems do not use the GRUB payload. Instead, they use a payload called depthcharge, which is common on CrOS devices. This is free software, maintained by Google. - - Flash chip write protection: the screw {#thescrew} ====================================== @@ -206,8 +188,6 @@ firmware-level *evil maid* attack. It's possible to write protect on all current libreboot systems, but CrOS devices make it easy. The screw is such a stupidly simple idea, which all designs should implement. - - Copyright © 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hcl/d510mo.md b/docs/hcl/d510mo.md @@ -11,8 +11,6 @@ This board can however be used for building a headless server. Flashing instructions can be found at [../install/d510mo.html](../install/d510mo.html) - - Copyright © 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hcl/d945gclf.md b/docs/hcl/d945gclf.md @@ -45,8 +45,6 @@ Here is an image of the D945GCLF2 board:\ And SPI SOIC8 flash chip\ ![](../images/d945gclf/20160923_141550.jpg){width="50%" height="50%"} - - How to replace thermal paste and fan ------------------------------------ @@ -75,8 +73,6 @@ After that, assemble your new fan into CPU cooler\ Finally assemle both coolers on both chips, do not forget put in the CPU fan connector back, and you are done. - - Copyright © 2016 Arthur Heymans <arthur@aheymans.xyz>\ Copyright © 2016 Vitaly Castaño Solana <vita\_cell@hotmail.com>\ Permission is granted to copy, distribute and/or modify this document diff --git a/docs/hcl/ga-g41m-es2l.md b/docs/hcl/ga-g41m-es2l.md @@ -15,8 +15,6 @@ hwaddress ether macaddressgoeshere Flashing instructions can be found at [../install/\#flashrom](../install/#flashrom) - - Copyright © 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hcl/gm45_remove_me.md b/docs/hcl/gm45_remove_me.md @@ -26,8 +26,6 @@ Another project recently found: <http://io.smashthestack.org/me/> [Back to previous index](./). - - ICH9 gen utility {#ich9gen} ================ @@ -145,8 +143,6 @@ brick your laptop. For external flashing guides, refer to [../install/](../install/). - - ICH9 deblob utility {#ich9deblob} =================== @@ -223,8 +219,6 @@ descriptor and 8K gbe regions, which will then be safe to flash. Refer back to [../install/\#flashrom](../install/#flashrom) for how to flash it. - - demefactory utility {#demefactory} =================== @@ -267,14 +261,11 @@ disassemble and re-flash externally unless you brick the device. demefactory is part of the ich9deblob src, found at *resources/utilities/ich9deblob/* - - The sections below are adapted from (mostly) IRC logs related to early development getting the ME removed on GM45. They are useful for background information. This could not have been done without sgsit's help. - Early notes {#early_notes} ----------- @@ -297,10 +288,6 @@ Early notes {#early_notes} what the X201 uses: <http://www.intel.co.uk/content/dam/www/public/us/en/documents/datasheets/6-chipset-c200-chipset-datasheet.pdf> - - - - Flash chips {#flashchips} ----------- @@ -325,13 +312,9 @@ Flash chips {#flashchips} - Schematics for X200s laptop: <http://pdf.datasheetarchive.com/indexerfiles/Datasheets-USER/DSAUPLD00006104.pdf>. - - - Early development notes {#early_development_notes} ----------------------- - Start (hex) End (hex) Length (hex) Area Name ----------- --------- ------------ --------- 00000000 003FFFFF 00400000 Flash Image @@ -399,8 +382,6 @@ X200. End justified means, and the utility is no longer needed since the ich9deblob utility (documented on this page) can now be used to create deblobbed descriptors. - - GBE (gigabit ethernet) region in SPI flash {#gbe_region} ------------------------------------------ @@ -410,7 +391,6 @@ documented in this public datasheet: The only actual content found was: - 00 1F 1F 1F 1F 1F 00 08 FF FF 83 10 FF FF FF FF 08 10 FF FF C3 10 EE 20 AA 17 F5 10 86 80 00 00 01 0D 00 00 00 00 05 06 20 30 00 0A 00 00 8B 8D @@ -433,7 +413,6 @@ is set to put gbe directly after the initial 4K flash descriptor. So the first 4K of the ROM is the descriptor, and then the next 8K is the gbe region. - ### GBE region: change MAC address {#gbe_region_changemacaddress} According to the datasheet, it's supposed to add up to 0xBABA but can @@ -463,9 +442,6 @@ Look at resources/utilities/ich9deblob/ich9deblob.c. to 0xBABA. In other words, the checksum is 0xBABA minus the total of the first 0x3E 16bit numbers (unsigned), ignoring any overflow. - - - Flash descriptor region {#flash_descriptor_region} ----------------------- @@ -529,8 +505,6 @@ So, *x << 12 = address* If it's in descriptor mode, then the first 4 bytes will be 5A A5 F0 0F. - - platform data partition in boot flash (factory.rom / lenovo bios) {#platform_data_region} ----------------------------------------------------------------- @@ -542,8 +516,6 @@ This is a 32K region from the factory image. It could be data It has only a 448 byte fragment different from 0x00 or 0xFF. - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hcl/imac52.md b/docs/hcl/imac52.md @@ -2,8 +2,6 @@ Information to be written soon, but this board is merged in libreboot. - - Copyright © 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hcl/index.md b/docs/hcl/index.md @@ -16,8 +16,6 @@ This sections relates to known hardware compatibility in libreboot. [Back to previous index](../). - - List of supported hardware {#supported_list} -------------------------- @@ -63,8 +61,6 @@ It is also possible to build ROM images (from source) for other systems [Back to top of page](#pagetop) - - EC update on i945 (X60, T60) and GM45 (X200, T400, T500, R400) {#ecupdate} ============================================================== @@ -86,8 +82,6 @@ handling. [Back to top of page](#pagetop) - - How to find what EC version you have (i945/GM45) {#ecversion} ================================================ @@ -102,8 +96,6 @@ out regular version - in this case it's a 1.06 for x200 tablet [Back to top of page](#pagetop) - - Recommended wifi chipsets {#recommended_wifi} ------------------------- @@ -124,8 +116,6 @@ project if these work with linux-libre kernel (TODO: test): [Back to top of page](#pagetop) - - List of supported ThinkPad X60s {#supported_x60_list} ------------------------------- @@ -154,10 +144,6 @@ is very easily replaced; just remove the card and install another one **after** libreboot is installed. See [\#recommended\_wifi](#recommended_wifi) for replacements. -[Back to top of page.](#pagetop) - - - List of supported ThinkPad X60 Tablets {#supported_x60t_list} -------------------------------------- @@ -242,10 +228,6 @@ could get finger input working. They used linuxwacom at git tag InputDevice "WTouch" "SendCoreEvents" EndSection -[Back to top of page.](#pagetop) - - - Supported T60 list {#supported_t60_list} ------------------ @@ -274,7 +256,6 @@ Tested LCD panels: **working(compatible)** - BOE-Hydis HV150UX1-100 (15.1" 1600x1200) (P/N 42T0078 FRU 42T0079 or P/N 41W1338 recommended for the inverter board) - Tested LCD panels: **not working yet (incompatible; see [../future/\#lcd\_i945\_incompatibility](../future/#lcd_i945_incompatibility))** @@ -291,8 +272,6 @@ Tested LCD panels: **not working yet (incompatible; see GNU+Linux works) (P/N 42T0078 FRU 42T0079 or P/N 41W1338 recommended for the inverter board) - - *The following LCD panels are **UNTESTED**. If you have one of these panels then please submit a report!*: @@ -326,11 +305,6 @@ is very easily replaced; just remove the card and install another one **after** libreboot is installed. See [\#recommended\_wifi](#recommended_wifi) for replacements. - -[Back to top of page.](#pagetop) - - - ThinkPad T60 (ATI GPU) and ThinkPad T60 (Intel GPU) differences. {#t60_ati_intel} ---------------------------------------------------------------- @@ -373,10 +347,6 @@ usable as a laptop because there would be no visual display at all. That being said, such a configuration is acceptable for use in a 'headless' server setup (with serial and/or ssh console as the display). -[Back to top of page.](#pagetop) - - - Information about the macbook1,1 {#macbook11} -------------------------------- @@ -395,7 +365,6 @@ It is believed that all models are compatible, listed here: - <http://www.everymac.com/ultimate-mac-lookup/?search_keywords=MacBook1,1> - ### Compatible models Specifically (Order No. / Model No. / CPU): @@ -404,7 +373,6 @@ Specifically (Order No. / Model No. / CPU): - MA254LL/A / A1181 (EMC 2092) / Core Duo T2400 **(tested - working)** - MA472LL/A / A1181 (EMC 2092) / Core Duo T2500 (untested) - Also of interest: [../git/\#config\_macbook21](../git/#config_macbook21). @@ -419,10 +387,6 @@ firmware is running. You will need to disassemble the system and flash externally. Reading from flash seems to work. For external flashing, refer to [../install/bbb\_setup.html](../install/bbb_setup.html). -[Back to top of page.](#pagetop) - - - Information about the macbook2,1 {#macbook21} -------------------------------- @@ -451,7 +415,6 @@ distribute them, but I need to ask this person to tell me what license these works fall under first. Otherwise, the above URLs should be fine. NOTE TO SELF: REMOVE THIS WHEN DONE** - ### Installing GNU+Linux distributions (on Apple EFI firmware) - [Parabola GNU+Linux installation on a macbook2,1 with Apple EFI @@ -467,21 +430,15 @@ likes to think that Apple and Microsoft are all that exist.) Now to install libreboot, follow [../install/\#flashrom\_macbook21](../install/#flashrom_macbook21). - - ### Information about coreboot - [Coreboot on the macbook2,1](#) (this is a copy of Mono's page, see above) - - ### coreboot wiki page - <https://www.coreboot.org/Board:apple/macbook21> - - ### Compatible models It is believed that all models are compatible, listed here: @@ -501,7 +458,6 @@ Specifically (Order No. / Model No. / CPU): - MB062LL/A / A1181 (EMC 2139) / Intel Core 2 Duo T7400 **(tested - working)** - Also of interest: [../git/\#config\_macbook21](../git/#config_macbook21). @@ -588,10 +544,6 @@ A user submitted a utility to enable 3-finger tap on this laptop. It's available at *resources/utilities/macbook21-three-finger-tap* in the libreboot git repository. -[Back to top of page.](#pagetop) - - - Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hcl/kcma-d8.md b/docs/hcl/kcma-d8.md @@ -17,8 +17,6 @@ without using external hardware. [Back to previous index](./). - - CPU compatibility ================= @@ -26,15 +24,11 @@ CPU compatibility virt).** 4300 series needs microcode updates, so avoid those CPUs. 4100 series is too old, and mostly untested. - - Board status (compatibility) {#boardstatus} ============================ See <https://raptorengineeringinc.com/coreboot/kcma-d8-status.php>. - - Form factor {#formfactor} =========== @@ -42,8 +36,6 @@ These boards use the SSI EEB 3.61 form factor; make sure that your case supports this. This form factor is similar to E-ATX in that the size is identical, but the position of the screws are different. - - IPMI iKVM module add-on {#ipmi} ======================= @@ -54,8 +46,6 @@ unsigned (possibly to replace) and physically separate from the mainboard since it's on the add-on module, which you don't have to install. - - Flash chips {#flashchips} =========== @@ -72,16 +62,12 @@ flash chip is 2MiB). extractor. These can be found online. See <http://www.coreboot.org/Developer_Manual/Tools#Chip_removal_tools>** - - Native graphics initialization {#graphics} ============================== Only text-mode is known to work, but linux(kernel) can initialize the framebuffer display (if it has KMS - kernel mode setting). - - Current issues {#issues} ============== @@ -104,15 +90,11 @@ Current issues {#issues} the very least, it's not a major inconvenience to not have it). - Graphics: only text-mode works. See [\#graphics](#graphics) - - Hardware specifications {#specifications} ----------------------- Check the ASUS website. - - Copyright © 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hcl/kfsn4-dre.md b/docs/hcl/kfsn4-dre.md @@ -8,8 +8,6 @@ Flashing instructions can be found at [Back to previous index](./). - - Form factor {#formfactor} =========== @@ -17,8 +15,6 @@ These boards use the SSI EEB 3.61 form factor; make sure that your case supports this. This form factor is similar to E-ATX in that the size is identical, but the position of the screws are different. - - Flash chips {#flashchips} =========== @@ -32,23 +28,17 @@ example of a 2MiB (16Mbits) chip, which might work. It is believed that extractor. These can be found online. See <http://www.coreboot.org/Developer_Manual/Tools#Chip_removal_tools>** - - Native graphics initialization {#graphics} ============================== Native graphics initialization exists (XGI Z9s) for this board. Framebuffer- and text-mode both work. A serial port is also available. - - Memory ====== DDR2 533/667 Registered ECC. 16 slots. Total capacity up to 64GiB. - - Hex-core CPUs {#hexcore} ============= @@ -57,8 +47,6 @@ number will be printed on the board), because it can use dual hex-core CPUs (Opteron 2400/8400 series). Other revisions are believed to only support dual quad-core CPUs. - - Current issues {#issues} ============== @@ -75,15 +63,11 @@ Current issues {#issues} disappears if using KMS, once the kernel starts. The jitter will remain, if booting the kernel in text-mode). - - Other information ================= [specifications](ftp://ftp.sgi.com/public/Technical%20Support/Pdf%20files/Asus/kfsn4-dre.pdf) - - Copyright © 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hcl/kgpe-d16.md b/docs/hcl/kgpe-d16.md @@ -18,8 +18,6 @@ KGPE-D16, without using external hardware. [Back to previous index](./). - - CPU compatibility ================= @@ -27,15 +25,11 @@ CPU compatibility virt).** 6300 series needs microcode updates, so avoid those CPUs. 6100 series is too old, and mostly untested. - - Board status (compatibility) {#boardstatus} ============================ See <https://raptorengineeringinc.com/coreboot/kgpe-d16-status.php>. - - Form factor {#formfactor} =========== @@ -43,8 +37,6 @@ These boards use the SSI EEB 3.61 form factor; make sure that your case supports this. This form factor is similar to E-ATX in that the size is identical, but the position of the screws are different. - - IPMI iKVM module add-on {#ipmi} ======================= @@ -55,8 +47,6 @@ unsigned (possibly to replace) and physically separate from the mainboard since it's on the add-on module, which you don't have to install. - - Flash chips {#flashchips} =========== @@ -73,16 +63,12 @@ flash chip is 2MiB). extractor. These can be found online. See <http://www.coreboot.org/Developer_Manual/Tools#Chip_removal_tools>** - - Native graphics initialization {#graphics} ============================== Only text-mode is known to work, but linux(kernel) can initialize the framebuffer display (if it has KMS - kernel mode setting). - - Current issues {#issues} ============== @@ -105,8 +91,6 @@ Current issues {#issues} the very least, it's not a major inconvenience to not have it). - Graphics: only text-mode works. See [\#graphics](#graphics) - - Hardware specifications {#specifications} ----------------------- @@ -225,8 +209,6 @@ The information here is adapted, from the ASUS website. - \* DDR3 1600 can only be supported with AMD Opteron 6300/6200 series processor - - Copyright © 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hcl/r400.md b/docs/hcl/r400.md @@ -19,8 +19,6 @@ Flashing instructions can be found at [Back to previous index](./). - - EC update {#ecupdate} ========= @@ -40,12 +38,9 @@ only replaces the BIOS firmware, not EC. Updated EC firmware has several advantages e.g. bettery battery handling. - - Compatibility (without blobs) {#compatibility_noblobs} ----------------------------- - ### Hardware virtualization (vt-x) {#hwvirt} The R400, when run without CPU microcode updates in coreboot, currently @@ -60,17 +55,12 @@ On GM45 hardware (with libreboot), make sure that the *kvm* and The following errata datasheet from Intel might help with investigation: <http://download.intel.com/design/mobile/specupdt/320121.pdf> - - - The R400 is almost identical to the X200, code-wise. See [x200.html](x200.html). TODO: put hardware register logs here like on the [X200](x200.html) and [T400](t400.html) page. - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hcl/t400.md b/docs/hcl/t400.md @@ -19,8 +19,6 @@ Flashing instructions can be found at [Back to previous index](./). - - EC update {#ecupdate} ========= @@ -40,12 +38,9 @@ only replaces the BIOS firmware, not EC. Updated EC firmware has several advantages e.g. bettery battery handling. - - Compatibility (without blobs) {#compatibility_noblobs} ----------------------------- - ### Hardware virtualization (vt-x) {#hwvirt} The T400, when run without CPU microcode updates in coreboot, currently @@ -60,14 +55,9 @@ On GM45 hardware (with libreboot), make sure that the *kvm* and The following errata datasheet from Intel might help with investigation: <http://download.intel.com/design/mobile/specupdt/320121.pdf> - - - The T400 is almost identical to the X200, code-wise. See [x200.html](x200.html). - - Hardware register dumps {#regdumps} ----------------------- @@ -83,8 +73,6 @@ outputs from the T400: - Version of flashrom used for the external flashing/reading logs is the one that libreboot git revision c164960 uses. - - Copyright © 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hcl/t500.md b/docs/hcl/t500.md @@ -19,8 +19,6 @@ Flashing instructions can be found at [Back to previous index](./). - - EC update {#ecupdate} ========= @@ -40,12 +38,9 @@ only replaces the BIOS firmware, not EC. Updated EC firmware has several advantages e.g. bettery battery handling. - - Compatibility (without blobs) {#compatibility_noblobs} ----------------------------- - ### Hardware virtualization (vt-x) {#hwvirt} The T500, when run without CPU microcode updates in coreboot, currently @@ -60,14 +55,9 @@ On GM45 hardware (with libreboot), make sure that the *kvm* and The following errata datasheet from Intel might help with investigation: <http://download.intel.com/design/mobile/specupdt/320121.pdf> - - - The T500 is almost identical to the X200, code-wise. See [x200.html](x200.html). - - Descriptor and Gbe differences {#descriptor_difference} ------------------------------ @@ -83,7 +73,6 @@ were something like: $ diff -u t500gbe x200gbe $ diff -u t500descriptor x200descriptor - ME VSCC table is in a different place and a different size on the T500. Libreboot disables and removes the ME anyway, so it doesn't matter. @@ -91,8 +80,6 @@ The very same descriptor/gbe used on the X200 (generated by [ich9gen](gm45_remove_me.html#ich9gen)) was re-used on the T500, and it still worked. - - Hardware register dumps {#regdumps} ----------------------- @@ -105,8 +92,6 @@ outputs from the T500: Lenovo BIOS 3.13 7VET83WW (EC firmware 1.06): - [../future/dumps/t500log/](../future/dumps/t500log/) - - Copyright © 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/hcl/x200.md b/docs/hcl/x200.md @@ -22,8 +22,6 @@ Flashing instructions can be found at [Back to previous index](./). - - EC update {#ecupdate} ========= @@ -43,12 +41,9 @@ only replaces the BIOS firmware, not EC. Updated EC firmware has several advantages e.g. bettery battery handling. - - Compatibility (without blobs) {#compatibility_noblobs} ----------------------------- - ### Hardware virtualization (vt-x) {#hwvirt} The X200, when run without CPU microcode updates in coreboot, currently @@ -67,9 +62,6 @@ Anecdotal reports from at least 1 user suggests that some models with CPU microcode 1067a (on the CPU itself) might work with vt-x in libreboot. - - - X200S and X200 Tablet. {#x200s} ---------------------- @@ -112,7 +104,6 @@ This was then pushed as a patch for coreboot, which can be found at <http://review.coreboot.org/#/c/7786/> (libreboot merges this patch in coreboot-libre now. Check the 'getcb' script in src or git). - ### Proper GS45 raminit {#x200s_raminit} A new northbridge gs45 should be added to coreboot, based on gm45, and a @@ -131,17 +122,12 @@ comparing it with X200 (factory BIOS) and X200 (gm45 raminit code in coreboot), to see what the differences are. Then tweak raminit code based on that. - - - Trouble undocking (button doesn't work) ---------------------------------------- This person seems to have a workaround: <https://github.com/the-unconventional/libreboot-undock> - - LCD compatibility list {#lcd_supported_list} ---------------------- @@ -150,9 +136,6 @@ LCD panel list (X200 panels listed there): All LCD panels for the X200, X200S and X200 Tablet are known to work. -[Back to top of page.](#pagetop) - - ### AFFS/IPS panels {#ips} #### X200 @@ -196,19 +179,12 @@ Sources: - [ThinkWiki.de - X200 Displayumbau](http://thinkwiki.de/X200_Displayumbau) - - ### X200S <http://forum.thinkpads.com/viewtopic.php?p=618928#p618928> explains that the X200S screens/assemblies are thinner. You need to replace the whole lid with one from a normal X200/X201. - -[Back to top of page.](#pagetop) - - - How to tell if it has an LED or CCFL? {#led_howtotell} ------------------------------------- @@ -224,10 +200,6 @@ Lithium Battery and a lamp which contains mercury; dispose according to local, state or federal laws"* (one with an LED backlit panel will say something different). -[Back to top of page.](#pagetop) - - - Hardware register dumps {#regdumps} ----------------------- @@ -239,8 +211,6 @@ outputs from the X200: - BIOS 3.15, EC 1.06 - [hwdumps/x200/](hwdumps/x200/) - - RAM, S3 and microcode updates {#ram_s3_microcode} ============================= @@ -282,8 +252,6 @@ available. I'd be curious if you could confirm these results.** It might not be coreboot that's buggy with raminit/S3; it might just be down to the microcode updates. - - Unsorted notes {#unsorted} -------------- @@ -293,8 +261,6 @@ Unsorted notes {#unsorted} <sgsit> you can plug a board in which gives diagnostic codes but i'm wondering whether it is capable of more <sgsit> http://www.endeer.cz/bios.tools/bios.html - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Copyright © 2015 Patrick "P. J." McDermott <pj@pehjota.net>\ Permission is granted to copy, distribute and/or modify this document diff --git a/docs/index.md b/docs/index.md @@ -9,8 +9,6 @@ Information about this release can be found at [Answers to frequently asked questions about Libreboot](https://libreboot.org/faq/) - - Libreboot is compatible with GNU+Linux and several BSD systems. For GNU+Linux, have a look at our [list of GNU+Linux distributions that @@ -49,8 +47,6 @@ Other information - [Hardware modifications](hardware/) - [Miscellaneous](misc/) - - About the libreboot project =========================== @@ -160,10 +156,6 @@ Libreboot is a 'stable' version of coreboot coreboot. By doing this, it provides a stronger guarantee to the user that the firmware will be reliable, and not break their system. -[Back to top of page.](#pagetop) - - - How do I know what version I'm running? ======================================== @@ -217,8 +209,6 @@ libreboot that you are using. Generally speaking, it is advisable to use the latest version of libreboot. - - Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/bbb_setup.md b/docs/install/bbb_setup.md @@ -30,8 +30,6 @@ Onto the Beaglebone black\... [Back to previous index](./) - - Hardware requirements ===================== @@ -101,10 +99,6 @@ Shopping list (pictures of this hardware is shown later): contains a list. **OPTIONAL\---only needed for serial console on the BBB, if not using SSH via ethernet cable.** -[Back to top of page.](#pagetop) - - - Setting up the 3.3V DC PSU ========================== @@ -139,8 +133,6 @@ connector, instead of going through the centre. Here is an example set up:\ ![](images/x200/psu33.jpg "Copyright © 2015 Patrick "P. J." McDermott <pj@pehjota.net> see license notice at the end of this document") - - Accessing the operating system on the BBB ========================================= @@ -169,8 +161,6 @@ directly accessible from SSH, or screen: You can also access the uboot console, using the serial method instead of SSH. - - Setting up spidev on the BBB ============================ @@ -266,8 +256,6 @@ Output: This means that it's working (the clip isn't connected to any flash chip, so the error is fine). - - Connecting the Pomona 5250/5252 =============================== @@ -339,10 +327,6 @@ leads, **but** keep all other leads short (10cm or less) You should now have something that looks like this:\ ![](images/x200/5252_bbb0.jpg) ![](images/x200/5252_bbb1.jpg) -[Back to top of page.](#pagetop) - - - Notes about stability {#stability} ===================== @@ -361,8 +345,6 @@ following configuration: - See this image: <http://i.imgur.com/qHGxKpj.jpg> - He was able to flash at 50MHz (lower speeds are also fine). - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Copyright © 2015 Patrick "P. J." McDermott <pj@pehjota.net>\ Copyright © 2015 Albin Söderqvist\ diff --git a/docs/install/c201.md b/docs/install/c201.md @@ -5,11 +5,9 @@ C201. Since the device ships with Coreboot, the installation instructions are the same before and after flashing Libreboot for the first time. - **If you are using libreboot\_src or git, then make sure that you built the sources first (see [../git/\#build](../git/#build)).** - Look at the [list of ROM images](#rom) to see which image is compatible with your device. @@ -46,15 +44,11 @@ root shell. - [Debian GNU+Linux is recommended for this device](#debian) (TODO: instructions for Devuan) - - - Gaining root privileges on ChromeOS In order to gain root privileges on ChromeOS, developer mode has to be enabled from the recovery mode screen and debugging features have to be enabled in ChromeOS. - Instructions to access the [recovery mode screen](../depthcharge/#recovery_mode_screen) and [enabling developer mode](../depthcharge/#enabling_developer_mode) are available on the page @@ -76,15 +70,11 @@ After setting the root password, it becomes possible to log-in as root. A tty prompt can be obtained by pressing **Ctrl + Alt + Next**. The **Next** key is the one on the top left of the keyboard. - - - Preparing the device for the installation Before installing Libreboot on the device, both its software and hardware has to be prepared to allow the installation procedure and to ensure that security features don't get in the way. - Configuring verified boot parameters {#configuring_verified_boot_parameters} ------------------------------------ @@ -99,8 +89,6 @@ parameters](../depthcharge/#configuring_verified_boot_parameters): Those changes can be reverted later, when the device is known to be in a working state. - - Removing the write protect screw {#removing_write_protect_screw} -------------------------------- @@ -123,9 +111,6 @@ screw](images/c201/wp-screw.jpg)](images/c201/wp-screw.jpg) The write protect screw can be put back in place later, when the device is known to be in a working state. - - - Installing Libreboot to the SPI flash {#installing_libreboot_spi_flash} ===================================== @@ -134,7 +119,6 @@ that are used to implement parts of the CrOS security system. Libreboot is installed in the *read-only* coreboot partition, that becomes writable after removing the write-protect screw. - Installing Libreboot internally, from the device {#installing_libreboot_internally} ------------------------------------------------ @@ -169,8 +153,6 @@ You should also see within the output the following:\ Shut down. The device will now boot to Libreboot. - - Installing Libreboot externally, with a SPI flash programmer {#installing_libreboot_externally} ------------------------------------------------------------ @@ -221,7 +203,6 @@ You should also see within the output the following:\ The device will now boot to Libreboot. - Debian GNU+Linux {#debian} ---------------- @@ -232,10 +213,6 @@ instructions. See <https://wiki.debian.org/InstallingDebianOn/Asus/C201>. -[Back to top of page.](#pagetop) - - - Copyright © 2015 Paul Kocialkowski <contact@paulk.fr>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/d510mo.md b/docs/install/d510mo.md @@ -3,20 +3,12 @@ This guide is for those who want libreboot on their Intel D510MO motherboard while they still have the original BIOS present. - - - Flash chip size {#flashchips} =============== Use this to find out: # flashrom -p internal -V - -[Back to top of page.](#pagetop) - - - Flashing instructions {#clip} ===================== @@ -26,8 +18,6 @@ flashing. This is an image of the flash chip, for reference:\ ![](../images/d510mo/d510mo.jpg) - - Copyright © 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/d945gclf.md b/docs/install/d945gclf.md @@ -6,9 +6,6 @@ motherboard while they still have the original BIOS present. For information about this board, go to [../hcl/d945gclf.html](../hcl/d945gclf.html) - - - Flashing instructions {#clip} ===================== @@ -18,8 +15,6 @@ external flashing. Here is an image of the flash chip:\ ![](../images/d945gclf/d945gclf_spi.jpg) - - Copyright © 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/ga-g41m-es2l.md b/docs/install/ga-g41m-es2l.md @@ -3,20 +3,12 @@ This guide is for those who want libreboot on their Intel GA-G41M-ES2L motherboard while they still have the original BIOS present. - - - Flash chip size {#flashchips} =============== Use this to find out: # flashrom -p internal -V - -[Back to top of page.](#pagetop) - - - Flashing instructions {#clip} ===================== @@ -50,8 +42,6 @@ NOTE: due to a bug in the hardware, the MAC address is hardcoded in coreboot-libre. Therefore, you must set your own MAC address in your operating system. - - Copyright © 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/index.md b/docs/install/index.md @@ -9,8 +9,6 @@ that has CONFIG\_STRICT\_DEVMEM not enabled. [Back to previous index](../) - - General information ------------------- @@ -51,8 +49,6 @@ Flashing via hardware methods, on system: - [ThinkPad T400](t400_external.html) - [ThinkPad T500](t500_external.html) - - Information about libreboot ROM images {#rom} ====================================== @@ -97,10 +93,6 @@ your terminal emulator or TTY). Other arguments are available for QEMU. The manual will contain more information. -[Back to top of page.](#pagetop) - - - How to update or install libreboot (if you are already running libreboot or coreboot) {#flashrom} ===================================================================================== @@ -110,11 +102,9 @@ any dedicated hardware. In other words, you can do everything entirely in software, directly from the OS that is running on your libreboot system. - **If you are using libreboot\_src or git, then make sure that you built the sources first (see [../git/\#build](../git/#build)).** - Look at the [list of ROM images](#rom) to see which image is compatible with your device. @@ -271,29 +261,21 @@ what CPU architecture you have (e.g. i686, x86\_64) and use the appropriate executable. It is also possible for you to build these executables from the libreboot source code archives. - How to update the flash chip contents: $ sudo ./flash update [yourrom.rom](#rom) - - Ocassionally, coreboot changes the name of a given board. If flashrom complains about a board mismatch, but you are sure that you chose the correct ROM image, then run this alternative command: $ sudo ./flash forceupdate [yourrom.rom](#rom) - - You should see **"Verifying flash\... VERIFIED."** written at the end of the flashrom output. **Shut down** after you see this, and then boot up again after a few seconds. - [Back to top of page](#pagetop) - - ThinkPad X60/T60: Initial installation guide (if running the proprietary firmware) {#flashrom_lenovobios} ================================================================================== @@ -304,17 +286,14 @@ already have coreboot or libreboot running, then go to **If you are flashing a Lenovo ThinkPad T60, be sure to read [../hcl/\#supported\_t60\_list](../hcl/#supported_t60_list)** - **If you are using libreboot\_src or git, then make sure that you built the sources first (see [../git/\#build](../git/#build)).** - **Warning: this guide will not instruct the user how to backup the original Lenovo BIOS firmware. These backups are tied to each system, and will not work on any other. For that, please refer to <http://www.coreboot.org/Board:lenovo/x60/Installation>.** - **If you're using libreboot 20150518, note that there is a mistake in the flashing script. do this: *rm -f patch && wget -O flash https://notabug.org/vimuser/libreboot/raw/9d850543ad90b72e0e333c98075530b31e5d23f1/flash @@ -324,8 +303,6 @@ The first half of the procedure is as follows: $ sudo ./flash i945lenovo\_firstflash [yourrom.rom](#rom). - - You should see within the output the following:\ **"Updated BUC.TS=1 - 64kb address ranges at 0xFFFE0000 and 0xFFFF0000 are swapped"**. @@ -343,8 +320,6 @@ If the above is what you see, then **SHUT DOWN**. Wait a few seconds, and then boot; libreboot is running, but there is a 2nd procedure **\*needed\*** (see below). - - When you have booted up again, you must also do this: $ sudo ./flash i945lenovo\_secondflash [yourrom.rom](#rom) @@ -353,8 +328,6 @@ If flashing fails at this stage, try the following:\ \$ **sudo ./flashrom/i686/flashrom -p internal:laptop=force\_I\_want\_a\_brick -w [yourrom.rom](#rom)** - - You should see within the output the following:\ **"Updated BUC.TS=0 - 128kb address range 0xFFFE0000-0xFFFFFFFF is untranslated"** @@ -362,19 +335,12 @@ untranslated"** You should also see within the output the following:\ **"Verifying flash\... VERIFIED."** - -[Back to top of page.](#pagetop) - - - MacBook2,1: Initial installation guide (if running the proprietary firmware) {#flashrom_macbook21} ============================================================================ - **If you have a MacBook1,1, refer to [../hcl/\#macbook11](../hcl/#macbook11) for flashing instructions.** - **This is for the MacBook2,1 while running Apple EFI firmware. If you already have coreboot or libreboot running, then go to [\#flashrom](#flashrom) instead!** @@ -386,31 +352,21 @@ Be sure to read the information in original Apple EFI firmware. For that, please refer to <http://www.coreboot.org/Board:apple/macbook21>.** - **If you are using libreboot\_src or git, then make sure that you built the sources first (see [../git/\#build](../git/#build)).** - Look at the [list of ROM images](#rom) to see which image is compatible with your device. - Use this flashing script, to install libreboot: $ sudo ./flash i945apple\_firstflash [yourrom.rom](#rom) - - You should also see within the output the following:\ **"Verifying flash\... VERIFIED."** Shut down. - -[Back to top of page.](#pagetop) - - - Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/kcma-d8.md b/docs/install/kcma-d8.md @@ -20,9 +20,6 @@ TODO: show photos here, and other info. - [External programmer](#programmer) - - - External programmer {#programmer} =================== @@ -34,8 +31,6 @@ motherboard, which you take out and then re-flash with libreboot, using the programmer. **DO NOT** remove the chip with your hands. Use a chip extractor tool. - - Copyright © 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/kgpe-d16.md b/docs/install/kgpe-d16.md @@ -20,9 +20,6 @@ TODO: show photos here, and other info. - [External programmer](#programmer) - - - KGPE-D16 boards (and full systems) with libreboot preinstalled {#preinstall} ============================================================== @@ -32,8 +29,6 @@ GNU+Linux distribution. Check the [suppliers](../../suppliers) page for more information. - - External programmer {#programmer} =================== @@ -45,8 +40,6 @@ motherboard, which you take out and then re-flash with libreboot, using the programmer. **DO NOT** remove the chip with your hands. Use a chip extractor tool. - - Copyright © 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/r400_external.md b/docs/install/r400_external.md @@ -11,17 +11,12 @@ ROM properly first. Although ROM images are provided pre-built in libreboot, there are some modifications that you need to make to the one you chose before flashing. (instructions referenced later in this guide) - - - Libreboot T400 {#t400} ============== You may also be interested in the smaller, more portable [Libreboot T400](t400_external.html). - - Serial port {#serial_port} ----------- @@ -29,8 +24,6 @@ EHCI debug might not be needed. It has been reported that the docking station for this laptop has a serial port, so it might be possible to use that instead. - - A note about CPUs ================= @@ -45,8 +38,6 @@ Quad-core CPUs Incompatible. Do not use. - - A note about GPUs ================= @@ -65,19 +56,12 @@ CPU paste required See [\#paste](#paste). - - Flash chip size {#flashchips} =============== Use this to find out: # flashrom -p internal -V - -[Back to top of page.](#pagetop) - - - MAC address {#macaddress} =========== @@ -91,8 +75,6 @@ image before flashing it. It will be written in one of these locations: ![](images/t400/macaddress0.jpg) ![](images/t400/macaddress1.jpg) ![](images/x200/disassembly/0001.jpg) - - Initial BBB configuration ========================= @@ -294,10 +276,6 @@ Example output from running the command (see above): Erase/write done. Verifying flash... VERIFIED. -[Back to top of page.](#pagetop) - - - Thermal paste (IMPORTANT) ========================= @@ -315,8 +293,6 @@ NOTE: the photo above is for illustration purposes only, and does not show how to properly apply the thermal paste. Other guides online detail the proper application procedure. - - Wifi ==== @@ -337,8 +313,6 @@ The following photos show an Atheros AR5B95 being installed, to replace the Intel chip that this R400 came with:\ ![](images/t400/0012.jpg) ![](images/t400/ar5b95.jpg) - - WWAN ==== @@ -349,8 +323,6 @@ track your movements. Not to be confused with wifi (wifi is fine). - - Memory ====== @@ -367,8 +339,6 @@ different, so this page might be BS) The following photo shows 8GiB (2x4GiB) of RAM installed:\ ![](images/t400/memory.jpg) - - Boot it! -------- @@ -378,8 +348,6 @@ You should see something like this: Now [install GNU+Linux](../gnulinux/). - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/rpi_setup.md b/docs/install/rpi_setup.md @@ -19,8 +19,6 @@ SOIC-16). [Back to previous index](../) - - [](#raspberry-pi-thinkpad-x60t60-and-macbook-21){#user-content-raspberry-pi-thinkpad-x60t60-and-macbook-21 .anchor}Raspberry Pi (ThinkPad X60/T60 and Macbook 2,1) ------------------------------------------------------------------------------------------------------------------------------------------------------------------ @@ -432,8 +430,6 @@ box.](http://www.flashrom.org/RaspberryPi) - [Win-Raid - Recover from Failed BIOS Flashing using Raspberry Pi](http://www.win-raid.com/t58f16-Guide-Recover-from-failed-BIOS-flash-using-Raspberry-PI.html) - - Copyright © 2014, 2015 Lawrence Wu <sagnessagiel@gmail.com>\ Copyright © 2015 snuffeluffegus <>\ Copyright © 2015 Kevin Keijzer <>\ diff --git a/docs/install/t400_external.md b/docs/install/t400_external.md @@ -14,9 +14,6 @@ the screws on page 144 (with title "1130 Keyboard bezel") are swapped and if you follow the HMM you will punch a hole through the bezel in the upper right corner. - - - T400 laptops with libreboot pre-installed {#preinstall} ========================================= @@ -26,8 +23,6 @@ GNU+Linux distribution. Check the [suppliers](../../suppliers) page for more information. - - Serial port {#serial_port} ----------- @@ -35,8 +30,6 @@ EHCI debug might not be needed. It has been reported that the docking station for this laptop has a serial port, so it might be possible to use that instead. - - A note about CPUs ================= @@ -50,8 +43,6 @@ Quad-core CPUs Incompatible. Do not use. - - A note about GPUs ================= @@ -70,19 +61,12 @@ CPU paste required See [\#paste](#paste). - - Flash chip size {#flashchips} =============== Use this to find out: # flashrom -p internal -V - -[Back to top of page.](#pagetop) - - - MAC address {#macaddress} =========== @@ -96,8 +80,6 @@ image before flashing it. It will be written in one of these locations: ![](images/t400/macaddress0.jpg) ![](images/t400/macaddress1.jpg) ![](images/x200/disassembly/0001.jpg) - - Initial BBB configuration ========================= @@ -300,10 +282,6 @@ Example output from running the command (see above): Erase/write done. Verifying flash... VERIFIED. -[Back to top of page.](#pagetop) - - - Thermal paste (IMPORTANT) ========================= @@ -321,8 +299,6 @@ NOTE: the photo above is for illustration purposes only, and does not show how to properly apply the thermal paste. Other guides online detail the proper application procedure. - - Wifi ==== @@ -343,8 +319,6 @@ The following photos show an Atheros AR5B95 being installed, to replace the Intel chip that this T400 came with:\ ![](images/t400/0012.jpg) ![](images/t400/ar5b95.jpg) - - WWAN ==== @@ -355,8 +329,6 @@ track your movements. Not to be confused with wifi (wifi is fine). - - Memory ====== @@ -373,8 +345,6 @@ different, so this page might be BS) The following photo shows 8GiB (2x4GiB) of RAM installed:\ ![](images/t400/memory.jpg) - - Boot it! -------- @@ -384,8 +354,6 @@ You should see something like this: Now [install GNU+Linux](../gnulinux/). - - Copyright © 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/t500_external.md b/docs/install/t500_external.md @@ -6,17 +6,12 @@ This guide is for those who want libreboot on their ThinkPad T500 while they still have the original Lenovo BIOS present. This guide can also be followed (adapted) if you brick your T500, to know how to recover. - - - Libreboot T400 {#t400} ============== You may also be interested in the smaller, more portable [Libreboot T400](t400_external.html). - - Serial port {#serial_port} ----------- @@ -24,8 +19,6 @@ EHCI debug might not be needed. It has been reported that the docking station for this laptop has a serial port, so it might be possible to use that instead. - - A note about CPUs ================= @@ -40,8 +33,6 @@ Quad-core CPUs Incompatible. Do not use. - - A note about GPUs ================= @@ -60,19 +51,12 @@ CPU paste required See [\#paste](#paste). - - Flash chip size {#flashchips} =============== Use this to find out: # flashrom -p internal -V - -[Back to top of page.](#pagetop) - - - MAC address {#macaddress} =========== @@ -86,8 +70,6 @@ image before flashing it. It will be written in one of these locations: ![](images/t400/macaddress0.jpg) ![](images/t400/macaddress1.jpg) ![](images/x200/disassembly/0001.jpg) - - Initial BBB configuration ========================= @@ -305,10 +287,6 @@ Example output from running the command (see above): Erase/write done. Verifying flash... VERIFIED. -[Back to top of page.](#pagetop) - - - Thermal paste (IMPORTANT) ========================= @@ -326,8 +304,6 @@ NOTE: the photo above is for illustration purposes only, and does not show how to properly apply the thermal paste. Other guides online detail the proper application procedure. - - Wifi ==== @@ -348,8 +324,6 @@ The following photos show an Atheros AR5B95 being installed, to replace the Intel chip that this T500 came with:\ ![](images/t400/0012.jpg) ![](images/t400/ar5b95.jpg) - - WWAN ==== @@ -360,8 +334,6 @@ also track your movements. Not to be confused with wifi (wifi is fine). - - Memory ====== @@ -378,8 +350,6 @@ different, so this page might be BS) The following photo shows 8GiB (2x4GiB) of RAM installed:\ ![](images/t400/memory.jpg) - - Boot it! -------- @@ -389,8 +359,6 @@ You should see something like this: Now [install GNU+Linux](../gnulinux/). - - Copyright © 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/t60_unbrick.md b/docs/install/t60_unbrick.md @@ -5,8 +5,6 @@ your ThinkPad T60 from booting. [Back to previous index](./) - - Table of Contents ----------------- @@ -15,9 +13,6 @@ Table of Contents - [Brick type 2: bad rom (or user error), system won't boot](#recovery) - - - Brick type 1: bucts not reset. {#bucts_brick} ============================== @@ -44,8 +39,6 @@ still has Lenovo BIOS running, using those instructions: <http://www.coreboot.org/Board:lenovo/x60/Installation>. (it says x60, but instructions for t60 are identical) - - bad rom (or user error), system won't boot {#recovery} =========================================== @@ -210,8 +203,6 @@ Always stress test ('stress -c 2' and xsensors. below 90C is ok) when replacing cpu paste/heatsink:\ ![](../images/t60_dev/0074.JPG) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/x200_external.md b/docs/install/x200_external.md @@ -16,9 +16,6 @@ followed (adapted) if you brick your X200, to know how to recover. - [Memory](#memory) - [X200S and X200 Tablet users: GPIO33 trick will not work.](#gpio33) - - - X200 laptops with libreboot pre-installed {#preinstall} ========================================= @@ -28,24 +25,17 @@ GNU+Linux distribution. Check the [suppliers](../../suppliers) page for more information. - - Flash chip size {#flashchips} =============== Use this to find out: # flashrom -p internal -V - The X200S and X200 Tablet will use a WSON-8 flash chip, on the bottom of the motherboard (this requires removal of the motherboard). **Not all X200S/X200T are supported; see [../hcl/x200.html\#x200s](../hcl/x200.html#x200s).** -[Back to top of page.](#pagetop) - - - MAC address {#macaddress} =========== @@ -60,8 +50,6 @@ image before flashing it. It will be written in one of these locations: ![](images/x200/disassembly/0002.jpg) ![](images/x200/disassembly/0001.jpg) - - Initial BBB configuration {#clip} ========================= @@ -100,8 +88,6 @@ header), for SOIC-8 (clip: Pomona 5250): This is how you will connect. Numbers refer to pin numbers on the BBB, on the plugs near the DC jack. Here is a photo of the SOIC-8 flash chip. The pins are labelled: - - Look at the pads in that photo, on the left and right. Those are for SOIC-16. Would it be possible to remove the SOIC-8 and solder a SOIC-16 chip on those pins? @@ -234,10 +220,6 @@ Example output from running the command (see above): Erase/write done. Verifying flash... VERIFIED. -[Back to top of page.](#pagetop) - - - Wifi ==== @@ -259,8 +241,6 @@ the Intel chip that this X200 came with:\ ![](images/x200/disassembly/0016.jpg) ![](images/x200/disassembly/0017.jpg) - - WWAN ==== @@ -271,8 +251,6 @@ track your movements. Not to be confused with wifi (wifi is fine). - - Memory ====== @@ -288,8 +266,6 @@ Make sure that the RAM you buy is the 2Rx8 density. In this photo, 8GiB of RAM (2x4GiB) is installed:\ ![](images/x200/disassembly/0018.jpg) - - Boot it! {#boot} -------- @@ -299,8 +275,6 @@ You should see something like this: Now [install GNU+Linux](../gnulinux/). - - X200S and X200 Tablet users: GPIO33 trick will not work. {#gpio33} -------------------------------------------------------- @@ -342,8 +316,6 @@ On a related note, libreboot has a utility that could help with investigating this: [../hcl/gm45\_remove\_me.html\#demefactory](../hcl/gm45_remove_me.html#demefactory) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/x60_unbrick.md b/docs/install/x60_unbrick.md @@ -5,8 +5,6 @@ your ThinkPad X60 from booting. [Back to previous index](./) - - Table of Contents ================= @@ -15,9 +13,6 @@ Table of Contents - [Brick type 2: bad rom (or user error), system won't boot](#recovery) - - - Brick type 1: bucts not reset. {#bucts_brick} ============================== @@ -43,8 +38,6 @@ coreboot.rom) - 0x20000\] count=64k conv=notrunc\ still has Lenovo BIOS running, using those instructions: <http://www.coreboot.org/Board:lenovo/x60/Installation>. - - bad rom (or user error), system won't boot {#recovery} =========================================== @@ -222,8 +215,6 @@ Power on!\ Operating system:\ ![](../images/x60_unbrick/0049.jpg) - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/install/x60tablet_unbrick.md b/docs/install/x60tablet_unbrick.md @@ -5,8 +5,6 @@ your ThinkPad X60 Tablet from booting. [Back to previous index](./) - - Table of Contents ----------------- @@ -15,9 +13,6 @@ Table of Contents - [Brick type 2: bad rom (or user error), system won't boot](#recovery) - - - Brick type 1: bucts not reset. {#bucts_brick} ============================== @@ -43,8 +38,6 @@ coreboot.rom) - 0x20000\] count=64k conv=notrunc\ still has Lenovo BIOS running, using those instructions: <http://www.coreboot.org/Board:lenovo/x60/Installation>. - - bad rom (or user error), system won't boot {#recovery} =========================================== @@ -129,8 +122,6 @@ one of them following the instructions in the output. Reverse the steps to re-assemble your system. - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/misc/bbb_ehci.md b/docs/misc/bbb_ehci.md @@ -2,8 +2,6 @@ [Back to previous index](./) - - EHCI debugging ============== @@ -353,8 +351,6 @@ Interface](http://cs.usfca.edu/~cruse/cs698s10/) 3. Patch and compule g\_dbgp on BBB instead cross-compile 4. Find a simple way to send debug messages from targets userland - - Copyright © 2015 Alex David <opdecirkel@gmail.com>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/misc/index.md b/docs/misc/index.md @@ -1,6 +1,5 @@ % Miscellaneous - - [High Pitched Whining Noise on Idle (how to remove in Debian or Devuan)](#debian_powertop) @@ -16,12 +15,9 @@ Black](bbb_ehci.html) - [e1000e driver trouble shooting (Intel NICs)](#e1000-hang) - - High Pitched Whining Noise on Idle (how to remove in Debian or Devuan) {#debian_powertop} ====================================================================== - Start powertop automatically at boot time {#debian_powertop_autostart} ----------------------------------------- @@ -37,11 +33,8 @@ If powertop doesn't work, another way (reduces battery life slightly) is to add *processor.max\_cstate=2* to the *linux* line in grub.cfg, using [this guide](../gnulinux/grub_cbfs.html). - [Back to top of page](#pagetop) - - High Pitched Whining Noise on Idle (how to remove in Parabola) {#high_pitch_parabola} ============================================================== @@ -96,8 +89,6 @@ using [this guide](../gnulinux/grub_cbfs.html). [Back to top of page](#pagetop) - - X60/T60: Serial port - how to use (for dock owners) {#serial} =================================================== @@ -138,8 +129,6 @@ change the **linux** line to add instructions for enabling getty. See [Back to top of page](#pagetop) - - Finetune backlight control on intel gpu's ========================================= @@ -222,8 +211,6 @@ is BLC\_PWM\_CTL described in on page 94. More research needs to be done on this target so proceed with care. - - Power Management Beeps on Thinkpads =================================== @@ -243,8 +230,6 @@ Disable or enable beeps when battery is low: A reboot is required, for these changes to take effect. - - Get EDID: Find out the name (model) of your LCD panel {#get_edid_panelname} ===================================================== @@ -265,10 +250,6 @@ If neither of these options work (or they are unavailable), physically removing the LCD panel is an option. Usually, there will be information printed on the back. -[Back to top of page.](#pagetop) - - - e1000e driver trouble shooting (Intel NICs) {#e1000-hang} =========================================== @@ -294,8 +275,6 @@ across subnets on the same interface (NIC). More information, including logs, can be found on [this page](https://notabug.org/vimuser/libreboot/issues/23). - - USB keyboard wakeup on GM45 laptops {#usb_keyboard_gm45} =================================== @@ -303,8 +282,6 @@ Look at resources/scripts/helpers/misc/libreboot\_usb\_bugfix Put this script in /etc/init.d/ on debian-based systems. - - Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/misc/patch.md b/docs/misc/patch.md @@ -4,8 +4,6 @@ This is just a quick guide for reference, use 'man' to know more. [Back to index](./) - - Apply a patch ============= @@ -13,7 +11,6 @@ To apply a patch to a single file, do that in it's directory: $ patch < foo.patch - Assuming that the patch is distributed in unified format identifying the file the patch should be applied to, the above will work. Otherwise: @@ -46,10 +43,6 @@ Removing a patch using the -R flag $ patch -p5 -R < baz.patch -[Back to top of page.](#pagetop) - - - Create a patch with diff ======================== @@ -65,10 +58,6 @@ Do whatever you want in new/ and then diff it: $ diff -rupN original/ new/ > original.patch -[Back to top of page.](#pagetop) - - - git diff ======== @@ -88,10 +77,6 @@ Alternatively (better yet), commit your changes and then use: $ git format-patch -N Replace N with the number of commits that you want to show. -[Back to top of page.](#pagetop) - - - git apply ========= @@ -110,10 +95,6 @@ If you use a patch from git format-patch, then use **git am patch.git** instead of **git apply patch.git**. git-am will re-create the commits aswell, instead of just applying the patch. -[Back to top of page.](#pagetop) - - - Copyright © 2014, 2015 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/docs/release.md b/docs/release.md @@ -3,16 +3,12 @@ Updated versions of libreboot can be found at [libreboot.org](http://libreboot.org/). - - Old releases ------------ See [archive\_old.html](archive_old.html) for information about older libreboot releases. - - Libreboot 20160907 {#release20160907} ================== @@ -30,7 +26,6 @@ Other bugfixes: - re-added "unset superusers" to the grub.cfg, which was needed for some users depending on the distros that they used - Libreboot 20160902 {#release20160922} ================== @@ -207,8 +202,6 @@ Kocialkowski) Various fixes to the ich9gen utility (e.g. flash component density is now set correctly in the descriptor, gbe-less descriptors now supported) - - Copyright © 2014, 2015, 2016 Leah Rowe <info@minifree.org>\ Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike 4.0 diff --git a/www/amd-libre.md b/www/amd-libre.md @@ -128,4 +128,3 @@ companies that care about software freedom. We in the Libreboot project are available to contact, using the details on the homepage. We look forward to working with AMD :) - diff --git a/www/contrib.md b/www/contrib.md @@ -2,7 +2,6 @@ title: Contributors ... - If we forgot to mention you here, let us know and we'll add you. (or if you don't want to be mentioned, let us know and we'll remove your entry) diff --git a/www/faq.md b/www/faq.md @@ -838,7 +838,6 @@ many HDDs (a few high-end ones can use more bandwidth than USB 2.0 is capable of), but for SSDs it might be problematic (unless you're using USB 3.0, which is not yet usable in freedom. See - Use of USB is also not an absolute guarantee of safety, so do beware. The attack surface becomes much smaller, but a malicious drive could still attempt a "fuzzing" attack (e.g. sending malformed USB diff --git a/www/git.md b/www/git.md @@ -125,7 +125,6 @@ information on which commits in what branch contain your changes. **Check [\#githosting](#githosting), for a list of Git hosting providers that we recommend.** - List of recommended Git hosting providers ----------------------------------------- diff --git a/www/gpg.md b/www/gpg.md @@ -4,11 +4,9 @@ title: GPG $ gpg --recv-keys - The GPG key can also be downloaded with this exported dump of the pubkey: [lbkey.asc](lbkey.asc). - $ sha512sum -c sha512sum.txt $ gpg --verify sha512sum.txt.sig diff --git a/www/license.md b/www/license.md @@ -1,3 +1,4 @@ +Website: Copyright 2015-2017 Leah Rowe <info@minifree.org> \ Copyright 2017 Alyssa Rosenzweig <alyssa@rosenzweig.io> @@ -9,3 +10,36 @@ can be found at "cc-by-sa-4.txt". This document is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See cc-by-sa-4.txt for more information. + +Template: + +Copyright (c) 2014--2017, John MacFarlane + +All rights reserved. + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions are met: + +Redistributions of source code must retain the above copyright notice, this +list of conditions and the following disclaimer. + +Redistributions in binary form must reproduce the above copyright +notice, this list of conditions and the following disclaimer in the +documentation and/or other materials provided with the distribution. + +Neither the name of John MacFarlane nor the names of other +contributors may be used to endorse or promote products derived +from this software without specific prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS +"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT +LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS +FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE +COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, +INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES +(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR +SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, +STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) +ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED +OF THE POSSIBILITY OF SUCH DAMAGE. diff --git a/www/lists.md b/www/lists.md @@ -31,4 +31,3 @@ Backup of old Libreboot mailing lists - [Developer mailing list (mbox format)](old/libreboot-dev/mbox/lists.gnu.org/libreboot-dev/) - diff --git a/www/logo-info.md b/www/logo-info.md @@ -2,7 +2,6 @@ title: Logo Info ... - ![Standard Logo](logo/logo.png) The Libreboot logo is available as a [bitmap](logo/logo.png), a [vector](logo/logo.svg), or a [greyscale vector](logo/logo_grey.svg). diff --git a/www/publish.sh b/www/publish.sh @@ -3,22 +3,13 @@ echo $1 FILE=${1%.md} -# get title block -head -n 4 $FILE.md > temp.md - # if not homepage, add a link back to the homepage if [ "${FILE}" != "./index" ]; then - printf "[Go back to homepage](/index.md)\n\n" >> temp.md + RETURN="<p><a href='/index.md'>Go back to homepage</a></p>" fi -# read rest of file -tail -n +5 $FILE.md >> temp.md - -# add license notice where applicable -# TODO: make this less intrusive -#if [[ ${FILE} != "docs*" ]] ; then -# cat license.md >> temp.md -#fi +cat $1 > temp.md +echo "[License](license.md)" >> temp.md # change out .md -> .html sed temp.md -i -e 's/\.md\(#[a-z\-]*\)*)/.html\1)/g' @@ -30,4 +21,5 @@ TOC=$(grep -q "^x-toc-enable: true$" temp.md && echo "--toc") SMART=$(pandoc -v | grep -q '2\.0' || echo "--smart") # chuck through pandoc -pandoc $SMART temp.md -s --css /global.css --section-divs -T Libreboot $TOC > $FILE.html +pandoc $SMART temp.md -s --css /global.css --section-divs -T Libreboot $TOC \ + --template=template.html --metadata "return=$RETURN" > $FILE.html diff --git a/www/template.html b/www/template.html @@ -0,0 +1,67 @@ +<!DOCTYPE html> +<html$if(lang)$ lang="$lang$"$endif$$if(dir)$ dir="$dir$"$endif$> +<head> + <meta charset="utf-8"> + <meta name="generator" content="pandoc"> + <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes"> +$for(author-meta)$ + <meta name="author" content="$author-meta$"> +$endfor$ +$if(date-meta)$ + <meta name="dcterms.date" content="$date-meta$"> +$endif$ +$if(keywords)$ + <meta name="keywords" content="$for(keywords)$$keywords$$sep$, $endfor$"> +$endif$ + <title>$if(title-prefix)$$title-prefix$ – $endif$$pagetitle$</title> + <style type="text/css">code{white-space: pre;}</style> +$if(quotes)$ + <style type="text/css">q { quotes: "“" "”" "‘" "’"; }</style> +$endif$ +$if(highlighting-css)$ + <style type="text/css"> +$highlighting-css$ + </style> +$endif$ +$for(css)$ + <link rel="stylesheet" href="$css$"> +$endfor$ +$if(math)$ + $math$ +$endif$ +$for(header-includes)$ + $header-includes$ +$endfor$ +</head> +<body> +$for(include-before)$ +$include-before$ +$endfor$ +$if(title)$ +<header> +<h1 class="title">$title$</h1> +$if(subtitle)$ +<p class="subtitle">$subtitle$</p> +$endif$ +$for(author)$ +<p class="author">$author$</p> +$endfor$ +$if(date)$ +<p class="date">$date$</p> +$endif$ +</header> +$endif$ +$if(return)$ +$return$ +$endif$ +$if(toc)$ +<nav id="$idprefix$TOC"> +$toc$ +</nav> +$endif$ +$body$ +$for(include-after)$ +$include-after$ +$endfor$ +</body> +</html>