configs/config.novacustom_v5*: enable SBOM for laptops - #945
Open
wiktormowinski wants to merge 1214 commits into
Open
configs/config.novacustom_v5*: enable SBOM for laptops#945wiktormowinski wants to merge 1214 commits into
wiktormowinski wants to merge 1214 commits into
Conversation
…g up after suspend Fix the root port flags by bringing back the values they were at in release v0.9.1 where suspend worked. This fixes issue where the dGPU would not come back after suspend [1] [1]: Dasharo/dasharo-issues#1593 Upstream-Status: Pending Change-Id: I359527c7095fad7aaeef310d7e163a28bd0d6e45 Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Change-Id: I0f423a5d31b5329dcb7b7547d702b0a2f3a0a13a Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Change-Id: I1b6cfd469362d50ed859240ac7de345c4134c4f5 Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Change-Id: I8b41c5b3a0a91ffc85e348c89477e5f56209efd5 Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Add detection of the new VP4651 model based on the i5-10310U CPU detection. Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Enable CONFIG_CBFS_ALLOW_UNVERIFIED_DECOMPRESSION to allow compressed bootsplash logos Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Frederik Boster <frederik@boster.de>
…resolution This change makes it so that the boot logo is shown in native resolution and correct aspect ratio, while the setup menu is scaled to 1920x1080 which is bigger and sligtly vertically stretched. Upstream-Status: Inappropriate [Dasharo downstream] Change-Id: I897bd00fb01414b5ea7e4c3668e54f0eb4d8813d Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Because UEFI DBX keeps growing in size, and we have a lot of UEFI variables, we've run into an issue where there's not enough free space to update the DBX. Increase the SMMSTORE region to 512K to mitigate this issue. Upstream-Status: Pending Change-Id: I3ceea4d7dfc1dcfe0f14a4e5fd0b7eb6b6e144d0 Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
… fix Upstream-Status: Inappropriate [Dasharo downstream] Change-Id: Iaa3c298d90b0a0ffeea51f40ff70a5d3a0ca4dcf Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
smmstoretool is effectively a UEFI variable store writing tool, with a specific emphasis on the SMMSTORE backend implementation. However, it could also support other backends. Since it's typical for the variable store to be `n / 2 - 1` blocks, but not typical how large each block should be, allow this to be overridden on the command line. This is necessary because in EDK2, the module producing the firmware volume block protocol, the backend, will initialise a HOB or set PCDs to indicate the size of the store to the rest of the stack, and an assertion will be hit if the store has been preseeded by smmstoretool using differently-sized blocks. For example, `make CFLAGS=-DSMM_BLOCK_SIZE=8192` builds this for a firmware volume block protocol implementation with 8K blocks. Upstream-Status: Backport [CB:88427] Change-Id: I08b78cfb0b591641f09fcf86f40dd31e6b6c9b30 Signed-off-by: Benjamin Doron <benjamin.doron@9elements.com> Reviewed-on: https://review.coreboot.org/c/coreboot/+/88427 Tested-by: build bot (Jenkins) <no-reply@coreboot.org> Reviewed-by: Alicja Michalska <ahplka19@gmail.com> Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Add the BOOTSPLASH region logo.bmp file from within the buildsystem, instead of having to patch it afterwards in build.sh or elsewhere. Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
The Protectli logo is now added within the buildsystem, it doesn't need to be patched externally in build.sh. Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Enable detection of PS/2 devices. This fixes PS/2 touchpad mode in the Windows installer: Dasharo/dasharo-issues#1657 TEST=Boot to Windows 11, test touchpad still works in i2c mode. Boot to Ubuntu 24.10, test that touchpad still works in i2c mode Boot to Windows 11 installer, test that the touchpad now works in PS/2 mode. Boot to UEFIPayload, test that the keyboard still works. Upstream-Status: Pending Change-Id: Ifcac8977ab4b76fcec7a2d8175c21b9d5fa1bdd1 Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Enable debug SMI, which works around issue Dasharo/dasharo-issues#1664. This is a workaround and should be removed once a proper solution to the issue is found. Upstream-Status: Inappropriate [Dasharo downstream] Change-Id: I47ce515248c3c3339a4e91f183e32ab79ae2bdcc Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Upstream-Status: Pending Change-Id: I8e3a235bf074fc38d1beef5bc6b0ff92636471f7 Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
The path should be equal to the path of the ACPI SOC domain, not to its scope. acpi_device_path evaluates to SB.PCI0 on single domain SoCs and SB on multi-domain SoCs like Xeon SPR. TEST=Boot Windows 11 on NovaCustom V540TU and confirm that TPM works. Upstream-Status: Pending Change-Id: I0b61dbccbb5472b498d91972be90cbd297dacfce Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Make ACM support independent from TXT being enabled. This is in preparation for CBnT to be used without also enabling TXT. Upstream-Status: Pending Change-Id: I82057e407d796f30d2b4fa9fd0fe348ddc07645f Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Depeending on customer requirements, CBnT may need to be enabled without also enabling TXT. In this configuration, only the Boot Guard component of CBnT is actively used. Upstream-Status: Pending Change-Id: Ie0fb096b6d70b98b1debeeb9bbcb64b5527b124b Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…r_error_type Needed to fix compilation error if CBnT is enabled and TXT is disabled. Upstream-Status: Pending Change-Id: I1e267cdc21e8e397d5021f3e5edfc6ddcd374016 Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Change-Id: I3f8eb4a19cb6b5f5bd87a850d1faf865959040a7 Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Change-Id: I31dd961a7eac92fea3d54226e5331bdba1bce9b7 Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Gołaś <filip.golas@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Gołaś <filip.golas@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Mateusz Maciejewski <mateusz.maciejewski@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Mateusz Maciejewski <mateusz.maciejewski@3mdeb.com>
This reverts commit f3dbe79. Signed-off-by: Thomas Clarke <tonux@riseup.net>
Signed-off-by: Thomas Clarke <tonux@riseup.net>
…etection feature Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Enable the new N95/AP2110 variant in the vault_adl_n directory. TEST=Successfully building and booting to EDK2 Upstream-Status: Pending Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Bump the blobs directory for the IFD and Management Engine firmware binaries. Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Based off of VP2440 config, with enabled verbose debug output for early stages of development. Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Move incompatible entries to each `variants/` overridetree, update AP2110's overridetree to match schematics and stock firmware logs. Changes include enabling M.2 WiFi, Bluetooth, each USB port and LAN adapter functionality. Upstream-Status: Pending Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
AP2110 routes the right stacked USB 3.x receptacle through TCSS (SS02, FSP index 1) without a Type-C connector or CC lines. By default, IOM waits for CC line assertion before activating a TCSS port; on a Type-A port that assertion never comes, leaving the SuperSpeed link stuck at Rx.Detect. Set EnableTcssCovTypeA[1] to tell IOM to treat SS02 as a non-CC, Type-A port, and set MappingPchXhciUsbA[1] = 6 to declare usb2_port6 (USB2P_6) as its USB 2.0 companion. Upstream-Status: Pending Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
…er Fail Set to accomodate development work. Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Reworked to use the target pad macro format. Upstream-Status: Pending Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
The reset button on the AP2110 is routed to a GPIO on the SuperIO. Enable the pin as GPIO in reset mode, to enable handling the button in OS. Upstream-Status: Pending Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
…ies that are off Clean up redundant information from the overridetree. Upstream-Status: Pending Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Update to use origin/main, once the AP2110 blobs have been merged Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Enable SBOM preparation and imprinting in the output binary. Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Change-Id: I08ce204f89686557b55bfebc5a11a67bc3ace1a4 Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
…LURE=y Added for parity with other Protectli boards. Change-Id: I33da40933cb4c63198cc54e16270632c3801c9d0 Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Change-Id: I95f727e0444f08840fa47c56af1c9640bb17d1b9 Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Upstream-Status: Inappropriate (Dasharo automation) Change-Id: Iccce2c99c45be1e89395e3d9f952a10b20834e55 Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
It's necessary to make builds reproducible. Change-Id: I29758c256c8c6f6852ca2ca16eebc0e87571d3a6 Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
This tells EDK the real workspace directory, which can be taken into account to make the build insensitive to absolute build paths. Change-Id: Ifae696b8c196be34ac526ec32f2b90511df8cfaa Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Set ME to HAP disable, as per Protectli requirements. Update config version to RC2 Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Mostly to obtain 2026.3 IoT FSP for Arrow/Meteor Lake Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
The ArrowLakeUH Edge/IoT FSP defaults I2cPostCodeEnable to 1, routing all internal FSP postcodes over I2C instead of the legacy Port80 path. On the NUC BOX this made FspMemoryInit/FspSiliconInit/ FspMultiPhaseSiInit uniformly ~10-125x slower (~20s total boot vs a ~2s boot with it disabled), and suppressed the board's postcode display, which only showed codes once Port80 routing was restored. Upstream-Status: Pending Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Add a Kconfig to direct FSP to skip sending the TBT Connect Topology (CNTP) command, which is not needed when using software connection manager (as opposed to firmware connection manager). There are also situations where boards using FW CM may wish to skip sending the command. When selected, the FSP UPD ITbtConnectTopologyTimeoutInMs will be set to zero, which tells FSP to skip sending the command. Previous SoCs always set this UPD to zero, but upon discussion it was determined that this is not universally desirable, so guard it with a Kconfig. Change-Id: I634dfb9969410b57e8415ac659fa3e8d6943d52c Upstream-Status: Backport [CB:87569] Signed-off-by: Sean Rhodes <sean@starlabs.systems> Signed-off-by: Matt DeVillier <matt.devillier@gmail.com> Reviewed-on: https://review.coreboot.org/c/coreboot/+/86989 Tested-by: build bot (Jenkins) <no-reply@coreboot.org> Reviewed-by: Jérémy Compostella <jeremy.compostella@intel.com> Reviewed-by: Subrata Banik <subratabanik@google.com> Reviewed-by: Angel Pons <th3fanbus@gmail.com>
Enable the option to potentially save a couple seconds of boot time, removing an unnecessary timeout Upstream-Status: Pending Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
Upstream-Status: Inappropriate [Dasharo downstream] Signed-off-by: Wiktor Mowinski <wiktor.mowinski@3mdeb.com>
wiktormowinski
force-pushed
the
novacustom_meteorlake_sbom
branch
from
July 22, 2026 14:44
deaa025 to
05b70c5
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
12 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.