From: eliot Date: Sat, 18 Sep 2021 15:38:49 +0000 (+0200) Subject: (no commit message) X-Git-Url: https://git.g-eek.se/?a=commitdiff_plain;h=9287ac85660c4a28154f73f55f9c2e92e481fdbf;p=inbyggd-frihet-wiki.git --- diff --git a/guider.mdwn b/guider.mdwn index f571afa..609ae2f 100644 --- a/guider.mdwn +++ b/guider.mdwn @@ -8,6 +8,26 @@ BEFORE flashing laptops make sure EC version is up to date (yes it's proprietary # Coreboot and Libreboot general + +### Our external flashing setup +BeagleBone Black (BBB), powered by USB. 5A 2A +Tip: Don't power anything from a regular (computer) ATX power supply, it will work but is unreliable and a time waster. +Current setup is to connect to the BBB via Ethernet to a router and thus SSH. Can also connect directly with the SPI interface, see Libreboot flashing guide. + +Pomona chip holders + +10cm wires + +### General +For flashing see this [guide](https://libreboot.org/docs/install/x200_external.html) for a general idea, however each system has their own chip configuration which differs a little. + +When installing an OS on a Libreboot (/Coreboot) system, use these [guides](https://libreboot.org/docs/gnulinux/). + +When installing Debian I used [this guide](https://libreboot.org/docs/gnulinux/encrypted_debian.html) in particular. The guide uses LUKS->LVM->Partitions, thus everything is encrypted. You don't need to install GRUB since it is already on the libreboot ROM (if you're using the GRUB payload), however, using a local GRUB makes it possible to [change GRUB config](https://libreboot.org/docs/gnulinux/grub_cbfs.html) without reflashing ROM. But reflashing ROM can be done in the OS (boot with kernel flag iomem=relaxed). +If you have an unencrypted /boot the default GRUB-scripts works better, i e it boots automatically (using Libreboot2016). + + + ## GRUB ### Boot manually For some setups the default GRUB script does not work. Either try updating the grub.cfg (next section) or boot manually (below). @@ -75,26 +95,6 @@ Note these tools are built and ready [at](https://www.mirrorservice.org/sites/li #./cbfstool yourrom.rom add -f background.png -n background.png -t raw sudo ./flashrom -p internal -w libreboot.rom #updated image - -## Libreboot - -### Our external flashing setup -BeagleBone Black (BBB), powered by USB. 5A 2A -Tip: Don't power anything from a regular (computer) ATX power supply, it will work but is unreliable and a time waster. -Current setup is to connect to the BBB via Ethernet to a router and thus SSH. Can also connect directly with the SPI interface, see Libreboot flashing guide. - -Pomona chip holders - -10cm wires - -### General -For flashing see this [guide](https://libreboot.org/docs/install/x200_external.html) for a general idea, however each system has their own chip configuration which differs a little. - -When installing an OS on a Libreboot (/Coreboot) system, use these [guides](https://libreboot.org/docs/gnulinux/). - -When installing Debian I used [this guide](https://libreboot.org/docs/gnulinux/encrypted_debian.html) in particular. The guide uses LUKS->LVM->Partitions, thus everything is encrypted. You don't need to install GRUB since it is already on the libreboot ROM (if you're using the GRUB payload), however, using a local GRUB makes it possible to [change GRUB config](https://libreboot.org/docs/gnulinux/grub_cbfs.html) without reflashing ROM. But reflashing ROM can be done in the OS (boot with kernel flag iomem=relaxed). -If you have an unencrypted /boot the default GRUB-scripts works better, i e it boots automatically (using Libreboot2016). - ### OpenBSD guide When installing OpenBSD on the x200, the OS was first installed on the HDD then flashed. Then, add a "/grub" directory that allows grub to automatically boot into openbsd instead of going into command line. @@ -173,7 +173,7 @@ sha512sum factory*.rom ``` -## Building Libreboot +# Building Libreboot This script worked 2019-04, however we noted that the cryptomount program had less features in the version from Git at that time, compared to the 2016 stable release. Unlike Coreboot, this build process is fairly automated and does not present any customization choices by default @@ -508,7 +508,7 @@ ROM-chip (eg.): Winbond W25Q16DV (if ROM too small can extend, see: *Extend 2MB # If the sum EXACTLY matches atleast once, it is reasonable to assume that the write indeed succeeded (we believe). - +# More ## Free Wifi