Make capsule_cabinet work independently of buildsystem state - #725

Open

mkopec wants to merge 1083 commits into

This pull request is big! We're only showing the most recent 250 commits

Commits on Jul 29, 2025

mb/novacustom/nuc_box/Kconfig: set MAINBOARD_FAMILY

filipleple
authored and
mkopec
committed
b3aa304
configs/config.novacustom_nuc_box: update to resolve regression issues

filipleple
authored and
mkopec
committed
7bab255
mb/novacustom/nuc_box/ramstage.c: enable S3 sleep

filipleple
authored and
mkopec
committed
ee072a6
mb/novacustom/nuc_box/variants/nuc_box/data.vbt: update

filipleple
authored and
mkopec
committed
b558f8a
mb/novacustom/nuc_box/devicetree.cb: devicetree fixes

filipleple
authored and
mkopec
committed
121fc4f
arch/x86/smbios.c: fix incorrect L3 cache size in SMBIOS Type 7

filipleple
authored and
mkopec
committed
370a7dc
.github/workflows/test.yml: bump Python to 3.13
SergiiDmytruk
committed
3a9be12
.github/workflows/code-checks.yml: rename to checks.yml
SergiiDmytruk
committed
e402b31
.github/workflows/check-upstream-status.yml: merge into checks.yml
SergiiDmytruk
committed
5fe5e4f

Commits on Jul 30, 2025

configs/config.novacustom_v5*: bump RC number to 4
mkopec
committed
d8b24b8

Commits on Aug 6, 2025

mb/novacustom/mtl-h: Reduce loglevel of dGPU GPIO prints
mkopec
committed
7440778
mb/novacustom/mtl-h: re-enable HAVE_ACPI_RESUME
mkopec
committed
adc7a41
configs/config.novacustom_v5*: enable sleep type option
mkopec
committed
405659e

Commits on Aug 7, 2025

mb/hardkernel/odroid-h4: Add Net Card 2 support

miczyg1
authored and
SergiiDmytruk
committed
ad8f4c1
mb/hardkernel/odroid-h4/data.vbt: Update VBT for newest FSP GOP

miczyg1
authored and
SergiiDmytruk
committed
f147b8d
configs/config.hardkernel_odroid_h4*: Enable quiet and fast boot

miczyg1
authored and
SergiiDmytruk
committed
2d0a144
mb/hardkernel/odroid-h4/devicetree.cb: Disable DSP

miczyg1
authored and
SergiiDmytruk
committed
d1f4a21
vendorcode/dasharo,soc/intel: Add IBECC option

miczyg1
authored and
SergiiDmytruk
committed
e04ef4b
mainboard/hardkernel/odroid-h4: Add IBECC configuration

miczyg1
authored and
SergiiDmytruk
committed
4f73b35
payloads/external/edk2: Add IBECC option support

miczyg1
authored and
SergiiDmytruk
committed
daeb498
payloads/external/edk2: Update revision for new memory menu PCDs

miczyg1
authored and
SergiiDmytruk
committed
504e761
configs/config.hardkernel_odroid_h4*: Enable FW performance measurement

miczyg1
authored and
SergiiDmytruk
committed
3f601db
.github/workflows/build.yml: Build netcard variant of ODROID

miczyg1
authored and
SergiiDmytruk
committed
7cf332e
configs/config.hardkernel_odroid_h4*: Bump to v0.9.1-rc1

miczyg1
authored and
SergiiDmytruk
committed
7ef9a9b
mb/hardkernel/odroid-h4/gpio.c: Fix GPP_A8 macro

miczyg1
authored and
SergiiDmytruk
committed
d63194f
payloads/external/iPXE: Update revision to 2025.03

miczyg1
authored and
SergiiDmytruk
committed
37c9db6
security/memory/memory_clear.c: step over capsules' data
SergiiDmytruk
committed
5bb7b66
config.hardkernel_odroid_h4*: enable capsule updates

DonVasyl
authored and
SergiiDmytruk
committed
d90056a
.github/workflows/build.yml: build and upload capsules for Hardkernel Odroid H4+
SergiiDmytruk
committed
1e0659e
security/intel/txt/common.c: avoid clearing memory if SMX is absent
SergiiDmytruk
committed
4fb387d

Commits on Aug 8, 2025

configs/config.novacustom_v5*: bump RC number to rc5
mkopec
committed
c36beac

Commits on Aug 12, 2025

payloads/edk2/Kconfig.dasharo: bump EDK to fix /dev/efi_capsule_loader
SergiiDmytruk
committed
31ce99d

Commits on Aug 13, 2025

security/tpm/tspi: initialize TPM log in tpm_extend_pcr()
SergiiDmytruk
committed
c4776fd

Commits on Aug 18, 2025

configs/config.novacustom_v5*: fix CONFIG_DRIVERS_EFI_MAIN_FW_VERSION
SergiiDmytruk
committed
d5e6a6b

Commits on Aug 19, 2025

Update µcode 2025-08-11

mkopec
authored and
macpijan
committed
ad29334
configs/config.novacustom_nuc_box: disable WiFi+BT option

filipleple
authored and
macpijan
committed
473d3eb
mb/novacustom/nuc_box/bootblock.c: set the Power on AC option in Super IO as well

filipleple
authored and
macpijan
committed
6ec24ee
config.novacustom_nuc_box: Add sleep mode selection option

philipanda
authored and
macpijan
committed
430504e
mb/novacustom/nuc_box/devicetree.cb: disable IPU

filipleple
authored and
macpijan
committed
ea608c6
3rdparty/dasharo-blobs: bump up revision

filipleple
authored and
macpijan
committed
66b416f
configs/config.novacustom_nuc_box: bump up to rc4

filipleple
authored and
macpijan
committed
b50b3c2
configs/config.novacustom_nuc_box: bump up to rc4, disable serial
filipleple
committed
9f78b62

Commits on Aug 20, 2025

Commits on Aug 22, 2025

Commits on Aug 25, 2025

configs/config.protectli_v*: use the black empty logo
filipleple
committed
831ace5
build.sh: protectli: add default logo

mkopec
authored and
filipleple
committed
4f76f7f
configs/config.protectli_vp2430: bump version to v0.9.0-rc6

mkopec
authored and
filipleple
committed
1eaca2b
configs/config.protectli_vp2430: Disable 1G pages and bump to rc7
filipleple
committed
f079fb9
configs/config.protectli_vp2430: bump version to v0.9.0

mkopec
authored and
filipleple
committed
a9ebc5c
configs/config.protectli_vp2440: remove Intel ME options
filipleple
committed
b2883ee
mainboard/protectli/vault_adl_n: disable unused devices and params
filipleple
committed
4974caf
mb/protectli/vault_adl_n/Kconfig: disable S3 sleep
filipleple
committed
36579d5
configs/config.protectli_vp2440: Disable 1G pages
filipleple
committed
f4f3afd
configs/config.protectli_vp2440: bump to rc4
filipleple
committed
58c33de
mb/protectli/vault_adl_n/romstage_fsp_params.c: remove unnecessary changes
filipleple
committed
71c1651
3rdparty/dasharo-blobs: update to origin/main
filipleple
committed
b326fa7
configs/config.protectli_vp2440: bump version to v0.9.0
filipleple
committed
6d16357
capsule.sh: name capsule consistently with ROMs built by build.sh

wiktormowinski
authored and
SergiiDmytruk
committed
05872a3

Commits on Aug 27, 2025

configs/config.novacustom_nuc_box: bump up to v0.9.0
filipleple
committed
fdea68a

Commits on Aug 29, 2025

mb/novacustom/mtl-h: Clean up GPIO tables
mkopec
committed
3897e74
payloads/edk2/Kconfig.dasharo: bump EDK for SMMSTORE recovery

SergiiDmytruk
authored and
filipleple
committed
7c66d48

Commits on Sep 1, 2025

Commits on Sep 2, 2025

Commits on Sep 3, 2025

configs/config.novacustom_v5*: bump to rc6
mkopec
committed
5feb3fa

Commits on Sep 11, 2025

mb/asrock: Add SPR 1S server board ASRock Rack SPC741D8-2L2T/BCM

authored and
mkopec
committed
69a0c47
3rdparty/fsp: update for working EagleStream FSP
mkopec
committed
8a2323a
soc/intel/xeon-sp/spr: Hook up public FSP bin and headers

ArthurHeymans
authored and
mkopec
committed
6a8c934
soc/intel/cmn/blk/lpc/lpc_def.h: Add ESPI_CS1_ENABLE definition
mkopec
committed
95a235f
mb/asrock/spc741d8/bootblock.c: Enable BMC on eSPI CS1#
mkopec
committed
6be1337
configs/config.asrock_spc741d8: Add Dasharo defconfig
mkopec
committed
7a959a0
3rdparty/dasharo-blobs: bump for SPC741D8 blobs
mkopec
committed
f1b989b
configs/config.asrock_spc741d8: Use blobs from dasharo-blobs
mkopec
committed
ccd1a5e
configs: Regenerate defconfigs for Dasharo platforms
mkopec
committed
01b3ef0
configs/config.asrock_spc741d8: Set CONFIG_LOCALVERSION
mkopec
committed
da77989
build.sh: Add ASRock Rack SPC741D8-2L2T/BCM support
mkopec
committed
ebec5e1
.github/workflows/build.yml: build ASRock Rack SPC741D8-2L2T/BCM
mkopec
committed
3011159
mb/asrock/spc741d8/Kconfig: Enable Intel SPI block
mkopec
committed
7ed3d58
configs/config.asrock_spc741d8: Enable SMM_BWP
mkopec
committed
c966d78
configs/config.asrock_spc741d8: reduce logging, enable edk2 cbmem logging
mkopec
committed
b3743b6
configs/config.asrock_spc741d8: enable Dasharo logo
mkopec
committed
70778c2
build.sh: Fix indentation of ASRock Rack helptext

mkopec
and
filipleple
committed
f65fa65
.github/workflows/build.yml: Fix asrock rack build command

mkopec
and
SergiiDmytruk
committed
9588952
build.sh: Fix ASRock Rack helptext alignment

mkopec
and
SergiiDmytruk
committed
b55921c
tag-check.yml: Add CI workflow

philipanda
authored and
mkopec
committed
d74a38f
tag-check.yml: Consistent print formatting

authored and
mkopec
committed
5b5b0ad
tag-check.yml: remove redundant tag fetches

philipanda
authored and
mkopec
committed
a72e5ac
configs/config.asrock_spc741d8: Enable more Dasharo features
mkopec
committed
5e2741e
configs/config.asrock_spc741d8: bump to rc2
mkopec
committed
75f77aa
soc/intel/xeon_sp/spr/Kconfig: define max CPU temperature
mkopec
committed
253809a

Commits on Sep 12, 2025

Revert "soc/intel/xeon_sp/spr/Kconfig: define max CPU temperature"
mkopec
committed
2b121cc
configs/config.asrock_spc741d8: disable CPU throttling option
mkopec
committed
30c9224
configs/config.asrock_spc741d8: bump to rc3
mkopec
committed
b440295
configs/config.novacustom_v5*: bump to rc7
mkopec
committed
20827de
payloads/external/edk2/Kconfig.dasharo: bump for EFI var attribute fix
mkopec
committed
4fe6eaf

Commits on Sep 14, 2025

Commits on Sep 16, 2025

configs/config.novacustom_v5.0tu: bump to 1.0.0
mkopec
committed
91420db

Commits on Sep 17, 2025

Commits on Sep 18, 2025

configs/config.msi_ms7d25: Bump to v1.1.5-rc1
miczyg1
committed
e3a739f
configs/config.msi_ms7e06: Bump to v0.9.3-rc1
miczyg1
committed
500c7d9
configs/config.msi_ms7d25_ddr4: Disable PCIe hotplug for consistency
miczyg1
committed
7cfe4f9
configs/config.msi_ms7d25: Bump to v1.1.5
miczyg1
committed
36ba9d8
configs/config.msi_ms7e06: Bump to v0.9.3
miczyg1
committed
8cd61b8
configs/config.asrock_spc741d8: bump to non-rc
mkopec
committed
cee8ddf

Commits on Sep 25, 2025

config.novacustom_v5*: disable DMA protection option

filipleple
authored and
mkopec
committed
6e197f5

Commits on Sep 26, 2025

payloads/edk2/Kconfig.dasharo: bump EDK to disable MMX and SSE
SergiiDmytruk
committed
6db1ef3

Commits on Oct 1, 2025

Commits on Oct 17, 2025

src/mb/protectli/vault_cml/mainboard.c: add VP4651

filipleple
authored and
DonVasyl
committed
344cb44

Commits on Oct 20, 2025

configs/config.novacustom_nv4x_adl: CBFS allow unverified decompression

Syquel
authored and
mkopec
committed
e088898
configs/config.novacustom_v5*: unset boot resolution, set setup menu resolution
mkopec
committed
62fc4f5
mb/{novacustom,clevo}: Bump SMMSTORE size to 512K
mkopec
committed
487fdca
payloads/external/edk2/Kconfig.dasharo: bump for varstore calculation fix
mkopec
committed
c0d2051
util/smmstoretool: Support other block sizes

benjamindoron
authored and
mkopec
committed
279a9aa

Commits on Oct 21, 2025

src/Kconfig: add bootsplash region file path

filipleple
authored and
mkopec
committed
9174358
Makefile: add BOOTSPLASH region logo

filipleple
authored and
mkopec
committed
fa6e69f
build.sh: don't patch the Protectli logo

filipleple
authored and
mkopec
committed
5e8ac19

Commits on Oct 23, 2025

ec/dasharo/ec: Enable PS/2 probing

mkopec
authored and
SergiiDmytruk
committed
06162ba

Commits on Oct 27, 2025

mb/{clevo,novacustom}: enable debug SMI
mkopec
committed
1e6a33d

Commits on Oct 28, 2025

configs/config.protectli_vp66xx: bump to rc2
filipleple
committed
74be0cd

Commits on Oct 29, 2025

mb/novacustom/mtl-h: Add per-variant HDA subsystem IDs

mkopec
authored and
filipleple
committed
49ff9e6

Commits on Oct 30, 2025

drivers/pc80/tpm/tis.c: fix TPM ACPI device path again
mkopec
committed
c1c7940

Commits on Oct 31, 2025

Commits on Nov 3, 2025

configs/config.novacustom_v5*: bump RC numbers
mkopec
committed
467b051

Commits on Nov 5, 2025

NV4x_Adl bump defconfig to v1.8.0-rc4
philipanda
committed
b9af8eb
ns5x_adl bump defconfig to v1.8.0-rc4
philipanda
committed
431a1d1

Commits on Nov 6, 2025

Commits on Nov 12, 2025

Commits on Nov 13, 2025

payloads/external/edk2/Kconfig.dasharo: bump EDK2 for TPM multibank detection feature

filipleple
authored and
SergiiDmytruk
committed
588dad2

Commits on Nov 14, 2025

configs/config.protectli_vault_jsl_*: bump version to v0.9.4-rc6
filipleple
committed
6e96f19

Commits on Nov 20, 2025

pcengines_uefi_apu2, 3, 4, 6 defconfig version bump to v0.9.1
DonVasyl
committed
217612e

Commits on Nov 24, 2025

Commits on Nov 25, 2025

Commits on Dec 3, 2025

Commits on Dec 12, 2025

Commits on Dec 18, 2025

soc/intel: Add function to report ME FWSTS in SMBIOS

miczyg1
authored and
SergiiDmytruk
committed
5bd5381
mb/novacustom/mtl-h/ramstage.c: Generate SMBIOS table with ME FWSTS

mkopec
authored and
SergiiDmytruk
committed
1ac3d12
payloads/external/edk2/Kconfig.dasharo: bump rev for BtG key checking

mkopec
authored and
SergiiDmytruk
committed
dc779c4

Commits on Jan 8, 2026

Commits on Jan 9, 2026

vendorcode/dasharo/options.c: extract fum_is_active()

SergiiDmytruk
authored and
mkopec
committed
c504b65
vendor/dasharo/options.c: introduce "disk capsules" boot

SergiiDmytruk
authored and
mkopec
committed
86ae818
lib/coreboot_table: report "disk capsules" boot in CBMEM

SergiiDmytruk
authored and
mkopec
committed
d4ca178
drivers/efi/capsules.c: enable capsule access for "disc capsules" boot

SergiiDmytruk
authored and
mkopec
committed
73c145e
payloads/edk2/Kconfig.dasharo: bump EDK for "immediate" on-disk capsules

SergiiDmytruk
authored and
mkopec
committed
8f8f6e6
mb/hardkernel/odroid-h4/mainboard.c: generate SMBIOS table with ME FWSTS

SergiiDmytruk
authored and
mkopec
committed
45f5034
payloads/edk2: add EDK2_CAPSULE_ON_DISK_SUPPORT option

SergiiDmytruk
authored and
mkopec
committed
3ea91b8
configs/config.msi_*: enable EDK2_CAPSULE_ON_DISK_SUPPORT

SergiiDmytruk
authored and
mkopec
committed
8c3789c

Commits on Jan 12, 2026

security/tpm/tss/tcg-2.0/tss: move tpm2_get_capability_pcrs() here

SergiiDmytruk
authored and
filipleple
committed
1d9783f
security/tpm: prepare API for multiple active banks

SergiiDmytruk
authored and
filipleple
committed
f914321
security/tpm/tss/tcg-2.0: enable extending multiple PCR banks

SergiiDmytruk
authored and
filipleple
committed
0d078b0
security/tpm: stop using fixed-size entries in TPM 2.0 log

SergiiDmytruk
authored and
filipleple
committed
e30e24d
security/intel/cbnt/measurement.c: extract measurement functions

SergiiDmytruk
authored and
filipleple
committed
43d9efb
security/intel/cbnt/measurement.c: support multiple PCR banks

SergiiDmytruk
authored and
filipleple
committed
06a919b
security/vboot/tpm_common.c: support multiple banks

SergiiDmytruk
authored and
filipleple
committed
194f4ca
lib/cbfs.c,security/tpm/tspi: support multiple banks

SergiiDmytruk
authored and
filipleple
committed
3bb636b
security/tpm: detect and use all active PCR banks

SergiiDmytruk
authored and
filipleple
committed
e4f7fa4

Commits on Jan 15, 2026

Commits on Jan 20, 2026

payloads/edk2/Kconfig.dasharo: bump EDK for capsule results dialog
SergiiDmytruk
committed
2efa30b

Commits on Jan 23, 2026

mb/protectli/vault_adl_n: vp2440: reenable ASPM and disable clk gating
mkopec
committed
a3897ac
configs/config.protectli_vp2440: bump to v0.9.1-rc2
mkopec
committed
7141c82
ifdtool: Add set top swap size PCH strap subcommand

philipanda
authored and
filipleple
committed
cffafc0
ifittool: allow adding files from a separate region
filipleple
committed
6cd2a2b
intel soc,southbridge: Add Kconfig to set TSBS in IFD during build

philipanda
authored and
filipleple
committed
1338bb2
Makefile.mk: separate bootblocks into BOOTBLOCK and TOPSWAP
filipleple
committed
a76884d
src/southbridge/intel/common/firmware/Makefile.mk: fix after cherrypick
filipleple
committed
d53f711
soc/intel/common/block/rtc/rtc.c: control Top Swap via CMOS option
filipleple
committed
6387a57
soc/intel/common/block/rtc/rtc.c: Top Swap: add Slot B selection mechanism
filipleple
committed
efb6a7d
sb/intel/common/firmware/Makefile.mk: fix INTEL_IFD_SET_TOP_SWAP_BOOTBLOCK_SIZE

SergiiDmytruk
authored and
filipleple
committed
45465bb
src/Kconfig: add MAINBOARD_NEEDS_CMOS_OPTIONS

SergiiDmytruk
authored and
filipleple
committed
06cf949
cpu/intel/fit/Makefile.mk: make FIT in TOPSWAP point at MCU in COREBOOT_TS

SergiiDmytruk
authored and
filipleple
committed
29b4a6e
Makefile.mk,cpu/intel/fit/Makefile.mk: introduce CBFS_REGIONS

SergiiDmytruk
authored and
filipleple
committed
d96d6b7
Makefile.mk: don't add bootblock after other files

SergiiDmytruk
authored and
filipleple
committed
315b6d1
security/lockdown/lockdown.c: option to lock COREBOOT and BOOTBLOCK
filipleple
committed
e8edcf0
CBFS verification: support Top Swap redundancy

philipanda
authored and
filipleple
committed
d6065d7
src/mainboard/protectli/vault_adl_p/: Redundancy configuration
filipleple
committed
8a79ad1
src/mainboard/protectli/vault_adl_p/Kconfig: cleanup after redundancy
filipleple
committed
c9a3f7c
src/mainboard/protectli/vault_adl_p/Kconfig: Capsule Update config
filipleple
committed
10e9b41
soc/intel/common/block: build rtc into postcar
filipleple
committed
877f1da
configs/config.protectli_vp66xx: unset ME HAP disable
filipleple
committed
8a63e17
src/lib/cbfs.c: fix cbfs_fmap_region_hint() call
filipleple
committed
b5848f9
mainboard/protectli/vault_adl_p/Kconfig: remove duplicate flag
filipleple
committed
5142035
src/lib/cbfs.c: Add more helpers for unverified areas

mkopec
authored and
filipleple
committed
e8941b3
security/intel/txt: load TXT ACMs from BOOTBLOCK region if redundancy

mkopec
authored and
filipleple
committed
58e4479
security/intel/acm/Makefile.mk: add ACMs to appropriate redundancy regions

mkopec
authored and
filipleple
committed
be3ac2f
protectli/vault_adl_p/cmos.layout: define CBNT CMOS data

mkopec
authored and
filipleple
committed
61db5ed
security/intel/acm/Makefile.mk: Fix including ACMs in topswap regions

mkopec
authored and
filipleple
committed
99c4344
security/intel/cbnt/Makefile.mk: include manifests in topswap blocks

mkopec
authored and
filipleple
committed
707660a
mb/protectli/vault_adl_p: enable Boot Guard and add fixes for ACM placement in TS blocks

mkopec
authored and
filipleple
committed
086d893
security/intel/cbnt/Makefile.mk: add KM to TS FIT

mkopec
authored and
filipleple
committed
d6059b3
mb/protectli/vault_adl_p/romstage_fsp_params.c: map BIOS ACM properly with TS

mkopec
authored and
filipleple
committed
1022543
cpu/intel/fit/Makefile.mk: make TS FIT point to ucode in slot B

mkopec
authored and
filipleple
committed
efa239c
util/cbfstool/ifittool.c: Use relative addresses when adding FIT entries

mkopec
authored and
filipleple
committed
cde0a4b
lib/cbfs.c: cbfs_unverified_area_lookup: add missing return

mkopec
authored and
filipleple
committed
db7d338
security/intel/cbnt/Makefile.mk: Place BPM in topswap blocks only if redudnancy enabled

mkopec
authored and
filipleple
committed
81a6626
security/intel/txt/ramstage.c: don't unconditionally map ACM from bootmedia

mkopec
authored and
filipleple
committed
25bd783
configs/config.protectli_vp66xx: enable CBnT

mkopec
authored and
filipleple
committed
3b152fa
security/intel/cbnt/Makefile.mk: Place KM in topswap blocks only if redudnancy enabled

mkopec
authored and
filipleple
committed
28b2a89
cpu/intel/fit/Makefile.mk: set TS_MCU_REGION=COREBOOT_TS only once

mkopec
authored and
filipleple
committed
9221df9
mb/protectli/vault_adl_p/top_swap.fmd: set TSBS size to 1M

mkopec
authored and
filipleple
committed
12c12eb
configs/config.protectli_vp66xx: set TSBS size and enable CBnT logging

mkopec
authored and
filipleple
committed
aedffff
mb/protectli/vault_adl_p/Kconfig: set default TSBB size to 1M

mkopec
authored and
filipleple
committed
84767f7
mb/protectli/vault_adl_p/top_swap.fmd: rearrange to fill space

mkopec
authored and
filipleple
committed
a0a41c9
security/intel: drop redundant TS region definitions

mkopec
authored and
filipleple
committed
e5aa7af
configs/config.protectli_vp66xx: enable CBnT stauts menu

mkopec
authored and
filipleple
committed
00b6cf7
configs/config.protectli_vp66xx: bump to rc4
filipleple
committed
7d8567b

Commits on Jan 28, 2026

Commits on Jan 30, 2026

capsule_cabinet.sh: make it work independent of .config

mkopec
authored and
filipleple
committed
4ab4432