boards: add vboot Ivy Bridge targets

added targets:
- vboot-x230 (Lenovo Thinkpad X230)
- vboot-x230-me
- vboot-t430 (Lenovo Thinkpad T430)
- vboot-t430-me
- vboot-t530 (Lenovo Thinkpad T530)
- vboot-t530-me
- vboot-w530 (Lenovo Thinkpad W530)
- vboot-w530-me

All targets with the `-me` suffix uses the full sized Intel ME
without shrinking it.

Warning:
the heads payload is currently 247 KiB too big for the targets
with the full sized ME.
(Tested on a X230 using the vboot-x230-me target)

Signed-off-by: Marcello Sylvester Bauer <sylv@sylv.io>

.gitignore

@@ -25,3 +25,6 @@ clean
 *.fv
 *.bin
 *.bad
+
+blobs/**/*.bin
+blobs/**/*.rom

boards/vboot-t430-me/vboot-t430-me.config

@@ -0,0 +1,36 @@
+# Configuration for a t430 running Qubes and other OSes
+export CONFIG_COREBOOT=y
+CONFIG_COREBOOT_CONFIG=config/coreboot-vboot-t430-me.config
+CONFIG_LINUX_CONFIG=config/linux-thinkpad.config
+
+CONFIG_CRYPTSETUP=y
+CONFIG_FLASHROM=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_DROPBEAR=y
+
+CONFIG_CAIRO=y
+CONFIG_FBWHIPTAIL=y
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000E=y
+
+export CONFIG_TPM=y
+export CONFIG_BOOTSCRIPT=/bin/gui-init
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on intel_iommu=igfx_off"
+export CONFIG_BOOT_KERNEL_REMOVE="quiet"
+export CONFIG_BOOT_DEV="/dev/sda1"
+export CONFIG_BOOT_GUI_MENU_NAME="Thinkpad T430 Heads Boot Menu"
+export CONFIG_WARNING_BG_COLOR="--background-gradient 0 0 0 150 125 0"
+export CONFIG_ERROR_BG_COLOR="--background-gradient 0 0 0 150 0 0"
+export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:laptop=force_I_want_a_brick,ich_spi_mode=hwseq --ifd --image bios"

boards/vboot-t430/vboot-t430.config

@@ -0,0 +1,36 @@
+# Configuration for a t430 running Qubes and other OSes
+export CONFIG_COREBOOT=y
+CONFIG_COREBOOT_CONFIG=config/coreboot-vboot-t430.config
+CONFIG_LINUX_CONFIG=config/linux-thinkpad.config
+
+CONFIG_CRYPTSETUP=y
+CONFIG_FLASHROM=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_DROPBEAR=y
+
+CONFIG_CAIRO=y
+CONFIG_FBWHIPTAIL=y
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000E=y
+
+export CONFIG_TPM=y
+export CONFIG_BOOTSCRIPT=/bin/gui-init
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on intel_iommu=igfx_off"
+export CONFIG_BOOT_KERNEL_REMOVE="quiet"
+export CONFIG_BOOT_DEV="/dev/sda1"
+export CONFIG_BOOT_GUI_MENU_NAME="Thinkpad T430 Heads Boot Menu"
+export CONFIG_WARNING_BG_COLOR="--background-gradient 0 0 0 150 125 0"
+export CONFIG_ERROR_BG_COLOR="--background-gradient 0 0 0 150 0 0"
+export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:laptop=force_I_want_a_brick,ich_spi_mode=hwseq --ifd --image bios"

boards/vboot-t530-me/vboot-t530-me.config

@@ -0,0 +1,36 @@
+# Configuration for a t530 running Qubes and other OSes
+export CONFIG_COREBOOT=y
+CONFIG_COREBOOT_CONFIG=config/coreboot-vboot-t530-me.config
+CONFIG_LINUX_CONFIG=config/linux-thinkpad.config
+
+CONFIG_CRYPTSETUP=y
+CONFIG_FLASHROM=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_DROPBEAR=y
+
+CONFIG_CAIRO=y
+CONFIG_FBWHIPTAIL=y
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000E=y
+
+export CONFIG_TPM=y
+export CONFIG_BOOTSCRIPT=/bin/gui-init
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on intel_iommu=igfx_off"
+export CONFIG_BOOT_KERNEL_REMOVE="quiet"
+export CONFIG_BOOT_DEV="/dev/sda1"
+export CONFIG_BOOT_GUI_MENU_NAME="Thinkpad T530 Heads Boot Menu"
+export CONFIG_WARNING_BG_COLOR="--background-gradient 0 0 0 150 125 0"
+export CONFIG_ERROR_BG_COLOR="--background-gradient 0 0 0 150 0 0"
+export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:laptop=force_I_want_a_brick,ich_spi_mode=hwseq --ifd --image bios"

boards/vboot-t530/vboot-t530.config

@@ -0,0 +1,37 @@
+# Configuration for a t530 running Qubes and other OSes
+export CONFIG_COREBOOT=y
+CONFIG_COREBOOT_CONFIG=config/coreboot-vboot-t530.config
+CONFIG_LINUX_CONFIG=config/linux-thinkpad.config
+
+CONFIG_CRYPTSETUP=y
+CONFIG_FLASHROM=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_DROPBEAR=y
+
+CONFIG_CAIRO=y
+CONFIG_FBWHIPTAIL=y
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000E=y
+
+export CONFIG_TPM=y
+export CONFIG_BOOTSCRIPT=/bin/gui-init
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on intel_iommu=igfx_off"
+export CONFIG_BOOT_KERNEL_REMOVE="quiet"
+export CONFIG_BOOT_DEV="/dev/sda1"
+export CONFIG_BOOT_GUI_MENU_NAME="Thinkpad T530 Heads Boot Menu"
+export CONFIG_WARNING_BG_COLOR="--background-gradient 0 0 0 150 125 0"
+export CONFIG_ERROR_BG_COLOR="--background-gradient 0 0 0 150 0 0"
+export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:laptop=force_I_want_a_brick,ich_spi_mode=hwseq --ifd --image bios"
+

boards/vboot-w530-me/vboot-w530-me.config

@@ -0,0 +1,37 @@
+# Configuration for a w530 running Qubes and other OSes
+export CONFIG_COREBOOT=y
+CONFIG_COREBOOT_CONFIG=config/coreboot-vboot-w530-me.config
+CONFIG_LINUX_CONFIG=config/linux-thinkpad.config
+
+CONFIG_CRYPTSETUP=y
+CONFIG_FLASHROM=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_DROPBEAR=y
+
+CONFIG_CAIRO=y
+CONFIG_FBWHIPTAIL=y
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000E=y
+
+export CONFIG_TPM=y
+export CONFIG_BOOTSCRIPT=/bin/gui-init
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on intel_iommu=igfx_off"
+export CONFIG_BOOT_KERNEL_REMOVE="quiet"
+export CONFIG_BOOT_DEV="/dev/sda1"
+export CONFIG_BOOT_GUI_MENU_NAME="Thinkpad W530 Heads Boot Menu"
+export CONFIG_WARNING_BG_COLOR="--background-gradient 0 0 0 150 125 0"
+export CONFIG_ERROR_BG_COLOR="--background-gradient 0 0 0 150 0 0"
+export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:laptop=force_I_want_a_brick,ich_spi_mode=hwseq --ifd --image bios"
+

boards/vboot-w530/vboot-w530.config

@@ -0,0 +1,36 @@
+# Configuration for a w530 running Qubes and other OSes
+export CONFIG_COREBOOT=y
+CONFIG_COREBOOT_CONFIG=config/coreboot-vboot-w530.config
+CONFIG_LINUX_CONFIG=config/linux-thinkpad.config
+
+CONFIG_CRYPTSETUP=y
+CONFIG_FLASHROM=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_DROPBEAR=y
+
+CONFIG_CAIRO=y
+CONFIG_FBWHIPTAIL=y
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000E=y
+
+export CONFIG_TPM=y
+export CONFIG_BOOTSCRIPT=/bin/gui-init
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on intel_iommu=igfx_off"
+export CONFIG_BOOT_KERNEL_REMOVE="quiet"
+export CONFIG_BOOT_DEV="/dev/sda1"
+export CONFIG_BOOT_GUI_MENU_NAME="Thinkpad W530 Heads Boot Menu"
+export CONFIG_WARNING_BG_COLOR="--background-gradient 0 0 0 150 125 0"
+export CONFIG_ERROR_BG_COLOR="--background-gradient 0 0 0 150 0 0"
+export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:laptop=force_I_want_a_brick,ich_spi_mode=hwseq --ifd --image bios"

boards/vboot-x230-me/vboot-x230-me.config

@@ -0,0 +1,36 @@
+# Configuration for a x230 running Qubes and other OSes
+export CONFIG_COREBOOT=y
+CONFIG_COREBOOT_CONFIG=config/coreboot-vboot-x230-me.config
+CONFIG_LINUX_CONFIG=config/linux-thinkpad.config
+
+CONFIG_CRYPTSETUP=y
+CONFIG_FLASHROM=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_DROPBEAR=y
+
+CONFIG_CAIRO=y
+CONFIG_FBWHIPTAIL=y
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000E=y
+
+export CONFIG_TPM=y
+export CONFIG_BOOTSCRIPT=/bin/gui-init
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on intel_iommu=igfx_off"
+export CONFIG_BOOT_KERNEL_REMOVE="quiet"
+export CONFIG_BOOT_DEV="/dev/sda1"
+export CONFIG_BOOT_GUI_MENU_NAME="Thinkpad X230 Heads Boot Menu"
+export CONFIG_WARNING_BG_COLOR="--background-gradient 0 0 0 150 125 0"
+export CONFIG_ERROR_BG_COLOR="--background-gradient 0 0 0 150 0 0"
+export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:laptop=force_I_want_a_brick,ich_spi_mode=hwseq --ifd --image bios"

boards/vboot-x230/vboot-x230.config

@@ -0,0 +1,36 @@
+# Configuration for a x230 running Qubes and other OSes
+export CONFIG_COREBOOT=y
+CONFIG_COREBOOT_CONFIG=config/coreboot-vboot-x230.config
+CONFIG_LINUX_CONFIG=config/linux-thinkpad.config
+
+CONFIG_CRYPTSETUP=y
+CONFIG_FLASHROM=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_DROPBEAR=y
+
+CONFIG_CAIRO=y
+CONFIG_FBWHIPTAIL=y
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000E=y
+
+export CONFIG_TPM=y
+export CONFIG_BOOTSCRIPT=/bin/gui-init
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on intel_iommu=igfx_off"
+export CONFIG_BOOT_KERNEL_REMOVE="quiet"
+export CONFIG_BOOT_DEV="/dev/sda1"
+export CONFIG_BOOT_GUI_MENU_NAME="Thinkpad X230 Heads Boot Menu"
+export CONFIG_WARNING_BG_COLOR="--background-gradient 0 0 0 150 125 0"
+export CONFIG_ERROR_BG_COLOR="--background-gradient 0 0 0 150 0 0"
+export CONFIG_FLASHROM_OPTIONS="--force --noverify-all -p internal:laptop=force_I_want_a_brick,ich_spi_mode=hwseq --ifd --image bios"

config/coreboot-vboot-t430-me.config

@@ -0,0 +1,20 @@
+CONFIG_LOCALVERSION="heads"
+CONFIG_VENDOR_LENOVO=y
+CONFIG_FMDFILE="../../fmaps/12MiB_vboot-ro.fmd"
+CONFIG_VBOOT=y
+# CONFIG_VBOOT_SLOTS_RW_AB is not set
+CONFIG_IFD_BIN_PATH="../../blobs/t430/ifd.bin"
+CONFIG_ME_BIN_PATH="../../blobs/t430/me.bin"
+CONFIG_HAVE_IFD_BIN=y
+CONFIG_BOARD_LENOVO_X230=y
+CONFIG_VALIDATE_INTEL_DESCRIPTOR=y
+CONFIG_HAVE_ME_BIN=y
+CONFIG_CHECK_ME=y
+CONFIG_HAVE_GBE_BIN=y
+CONFIG_GBE_BIN_PATH="../../blobs/t430/gbe.bin"
+CONFIG_GENERIC_LINEAR_FRAMEBUFFER=y
+CONFIG_VBOOT_MEASURED_BOOT=y
+CONFIG_DEFAULT_CONSOLE_LOGLEVEL_5=y
+CONFIG_PAYLOAD_LINUX=y
+CONFIG_PAYLOAD_FILE="../../build/vboot-t430-me/bzImage"
+CONFIG_LINUX_INITRD="../../build/vboot-t430-me/initrd.cpio.xz"

config/coreboot-vboot-t430.config

@@ -0,0 +1,20 @@
+CONFIG_LOCALVERSION="heads"
+CONFIG_VENDOR_LENOVO=y
+CONFIG_FMDFILE="../../fmaps/12MiB_vboot-ro-minimal_me.fmd"
+CONFIG_VBOOT=y
+# CONFIG_VBOOT_SLOTS_RW_AB is not set
+CONFIG_IFD_BIN_PATH="../../blobs/t430/ifd-minimal_me.bin"
+CONFIG_ME_BIN_PATH="../../blobs/t430/minimal_me.bin"
+CONFIG_HAVE_IFD_BIN=y
+CONFIG_BOARD_LENOVO_X230=y
+CONFIG_VALIDATE_INTEL_DESCRIPTOR=y
+CONFIG_HAVE_ME_BIN=y
+CONFIG_CHECK_ME=y
+CONFIG_HAVE_GBE_BIN=y
+CONFIG_GBE_BIN_PATH="../../blobs/t430/gbe.bin"
+CONFIG_GENERIC_LINEAR_FRAMEBUFFER=y
+CONFIG_VBOOT_MEASURED_BOOT=y
+CONFIG_DEFAULT_CONSOLE_LOGLEVEL_5=y
+CONFIG_PAYLOAD_LINUX=y
+CONFIG_PAYLOAD_FILE="../../build/vboot-t430/bzImage"
+CONFIG_LINUX_INITRD="../../build/vboot-t430/initrd.cpio.xz"

config/coreboot-vboot-t530-me.config

@@ -0,0 +1,20 @@
+CONFIG_LOCALVERSION="heads"
+CONFIG_VENDOR_LENOVO=y
+CONFIG_FMDFILE="../../fmaps/12MiB_vboot-ro.fmd"
+CONFIG_VBOOT=y
+# CONFIG_VBOOT_SLOTS_RW_AB is not set
+CONFIG_IFD_BIN_PATH="../../blobs/t530/ifd.bin"
+CONFIG_ME_BIN_PATH="../../blobs/t530/me.bin"
+CONFIG_HAVE_IFD_BIN=y
+CONFIG_BOARD_LENOVO_X230=y
+CONFIG_VALIDATE_INTEL_DESCRIPTOR=y
+CONFIG_HAVE_ME_BIN=y
+CONFIG_CHECK_ME=y
+CONFIG_HAVE_GBE_BIN=y
+CONFIG_GBE_BIN_PATH="../../blobs/t530/gbe.bin"
+CONFIG_GENERIC_LINEAR_FRAMEBUFFER=y
+CONFIG_VBOOT_MEASURED_BOOT=y
+CONFIG_DEFAULT_CONSOLE_LOGLEVEL_5=y
+CONFIG_PAYLOAD_LINUX=y
+CONFIG_PAYLOAD_FILE="../../build/vboot-t530-me/bzImage"
+CONFIG_LINUX_INITRD="../../build/vboot-t530-me/initrd.cpio.xz"

config/coreboot-vboot-t530.config

@@ -0,0 +1,20 @@
+CONFIG_LOCALVERSION="heads"
+CONFIG_VENDOR_LENOVO=y
+CONFIG_FMDFILE="../../fmaps/12MiB_vboot-ro-minimal_me.fmd"
+CONFIG_VBOOT=y
+# CONFIG_VBOOT_SLOTS_RW_AB is not set
+CONFIG_IFD_BIN_PATH="../../blobs/t530/ifd-minimal_me.bin"
+CONFIG_ME_BIN_PATH="../../blobs/t530/minimal_me.bin"
+CONFIG_HAVE_IFD_BIN=y
+CONFIG_BOARD_LENOVO_X230=y
+CONFIG_VALIDATE_INTEL_DESCRIPTOR=y
+CONFIG_HAVE_ME_BIN=y
+CONFIG_CHECK_ME=y
+CONFIG_HAVE_GBE_BIN=y
+CONFIG_GBE_BIN_PATH="../../blobs/t530/gbe.bin"
+CONFIG_GENERIC_LINEAR_FRAMEBUFFER=y
+CONFIG_VBOOT_MEASURED_BOOT=y
+CONFIG_DEFAULT_CONSOLE_LOGLEVEL_5=y
+CONFIG_PAYLOAD_LINUX=y
+CONFIG_PAYLOAD_FILE="../../build/vboot-t530/bzImage"
+CONFIG_LINUX_INITRD="../../build/vboot-t530/initrd.cpio.xz"