Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1084 commits
Select commit Hold shift + click to select a range
7bab255
configs/config.novacustom_nuc_box: update to resolve regression issues
filipleple Jul 22, 2025
ee072a6
mb/novacustom/nuc_box/ramstage.c: enable S3 sleep
filipleple Jul 22, 2025
b558f8a
mb/novacustom/nuc_box/variants/nuc_box/data.vbt: update
filipleple Jul 24, 2025
121fc4f
mb/novacustom/nuc_box/devicetree.cb: devicetree fixes
filipleple Jul 28, 2025
370a7dc
arch/x86/smbios.c: fix incorrect L3 cache size in SMBIOS Type 7
filipleple Jul 28, 2025
3a9be12
.github/workflows/test.yml: bump Python to 3.13
SergiiDmytruk Jul 29, 2025
e402b31
.github/workflows/code-checks.yml: rename to checks.yml
SergiiDmytruk Jul 29, 2025
5fe5e4f
.github/workflows/check-upstream-status.yml: merge into checks.yml
SergiiDmytruk Jul 29, 2025
d8b24b8
configs/config.novacustom_v5*: bump RC number to 4
mkopec Jul 30, 2025
7440778
mb/novacustom/mtl-h: Reduce loglevel of dGPU GPIO prints
mkopec Aug 6, 2025
adc7a41
mb/novacustom/mtl-h: re-enable HAVE_ACPI_RESUME
mkopec Aug 6, 2025
405659e
configs/config.novacustom_v5*: enable sleep type option
mkopec Aug 6, 2025
ad8f4c1
mb/hardkernel/odroid-h4: Add Net Card 2 support
miczyg1 May 21, 2025
f147b8d
mb/hardkernel/odroid-h4/data.vbt: Update VBT for newest FSP GOP
miczyg1 Jun 10, 2025
2d0a144
configs/config.hardkernel_odroid_h4*: Enable quiet and fast boot
miczyg1 May 21, 2025
d1f4a21
mb/hardkernel/odroid-h4/devicetree.cb: Disable DSP
miczyg1 Jun 10, 2025
e04ef4b
vendorcode/dasharo,soc/intel: Add IBECC option
miczyg1 May 22, 2025
4f73b35
mainboard/hardkernel/odroid-h4: Add IBECC configuration
miczyg1 May 22, 2025
daeb498
payloads/external/edk2: Add IBECC option support
miczyg1 May 22, 2025
504e761
payloads/external/edk2: Update revision for new memory menu PCDs
miczyg1 May 22, 2025
3f601db
configs/config.hardkernel_odroid_h4*: Enable FW performance measurement
miczyg1 Jun 11, 2025
7cf332e
.github/workflows/build.yml: Build netcard variant of ODROID
miczyg1 Jun 16, 2025
7ef9a9b
configs/config.hardkernel_odroid_h4*: Bump to v0.9.1-rc1
miczyg1 Jun 16, 2025
d63194f
mb/hardkernel/odroid-h4/gpio.c: Fix GPP_A8 macro
miczyg1 Jul 17, 2025
37c9db6
payloads/external/iPXE: Update revision to 2025.03
miczyg1 Jul 17, 2025
5bb7b66
security/memory/memory_clear.c: step over capsules' data
SergiiDmytruk Aug 3, 2025
d90056a
config.hardkernel_odroid_h4*: enable capsule updates
DonVasyl Aug 1, 2025
1e0659e
.github/workflows/build.yml: build and upload capsules for Hardkernel…
SergiiDmytruk Aug 3, 2025
4fb387d
security/intel/txt/common.c: avoid clearing memory if SMX is absent
SergiiDmytruk Aug 4, 2025
c36beac
configs/config.novacustom_v5*: bump RC number to rc5
mkopec Aug 8, 2025
31ce99d
payloads/edk2/Kconfig.dasharo: bump EDK to fix /dev/efi_capsule_loader
SergiiDmytruk Aug 12, 2025
c4776fd
security/tpm/tspi: initialize TPM log in tpm_extend_pcr()
SergiiDmytruk Aug 13, 2025
d5e6a6b
configs/config.novacustom_v5*: fix CONFIG_DRIVERS_EFI_MAIN_FW_VERSION
SergiiDmytruk Aug 10, 2025
ad29334
Update µcode 2025-08-11
mkopec Aug 12, 2025
473d3eb
configs/config.novacustom_nuc_box: disable WiFi+BT option
filipleple Aug 18, 2025
6ec24ee
mb/novacustom/nuc_box/bootblock.c: set the Power on AC option in Supe…
filipleple Aug 18, 2025
430504e
config.novacustom_nuc_box: Add sleep mode selection option
philipanda Aug 14, 2025
ea608c6
mb/novacustom/nuc_box/devicetree.cb: disable IPU
filipleple Aug 19, 2025
66b416f
3rdparty/dasharo-blobs: bump up revision
filipleple Aug 19, 2025
b50b3c2
configs/config.novacustom_nuc_box: bump up to rc4
filipleple Aug 19, 2025
9f78b62
configs/config.novacustom_nuc_box: bump up to rc4, disable serial
filipleple Aug 19, 2025
dc9e28b
security/intel/cbnt/measurement.c: fix 3 comments
SergiiDmytruk Aug 10, 2025
43bc18b
security/intel/cbnt/measurement.c: handle SRTM_AC flag in IBBS
SergiiDmytruk Aug 10, 2025
5970634
security/intel/cbnt/measurement.c: assume locality 0 for TPM 1.2
SergiiDmytruk Aug 20, 2025
fbf6fcc
src/security/intel/cbnt/measurement.c: more generic structure
SergiiDmytruk Aug 20, 2025
b577aaa
security/intel/cbnt/measurement.c: support MTL and newer
SergiiDmytruk Aug 20, 2025
fe73350
configs/config.hardkernel_odroid_h4: bump to v0.9.1-rc3
macpijan Aug 22, 2025
dcd76be
configs/config.hardkernel_odroid_h4_netcard: Bump to v0.9.1-rc3
miczyg1 Aug 22, 2025
831ace5
configs/config.protectli_v*: use the black empty logo
filipleple Aug 1, 2025
4f76f7f
build.sh: protectli: add default logo
mkopec Mar 28, 2025
1eaca2b
configs/config.protectli_vp2430: bump version to v0.9.0-rc6
mkopec Mar 28, 2025
f079fb9
configs/config.protectli_vp2430: Disable 1G pages and bump to rc7
filipleple Apr 18, 2025
a9ebc5c
configs/config.protectli_vp2430: bump version to v0.9.0
mkopec Apr 30, 2025
b2883ee
configs/config.protectli_vp2440: remove Intel ME options
filipleple Aug 1, 2025
4974caf
mainboard/protectli/vault_adl_n: disable unused devices and params
filipleple Aug 4, 2025
36579d5
mb/protectli/vault_adl_n/Kconfig: disable S3 sleep
filipleple Aug 14, 2025
f4f3afd
configs/config.protectli_vp2440: Disable 1G pages
filipleple Aug 14, 2025
58c33de
configs/config.protectli_vp2440: bump to rc4
filipleple Aug 14, 2025
71c1651
mb/protectli/vault_adl_n/romstage_fsp_params.c: remove unnecessary ch…
filipleple Aug 20, 2025
b326fa7
3rdparty/dasharo-blobs: update to origin/main
filipleple Aug 25, 2025
6d16357
configs/config.protectli_vp2440: bump version to v0.9.0
filipleple Aug 25, 2025
05872a3
capsule.sh: name capsule consistently with ROMs built by build.sh
wiktormowinski Aug 25, 2025
fdea68a
configs/config.novacustom_nuc_box: bump up to v0.9.0
filipleple Aug 26, 2025
3897e74
mb/novacustom/mtl-h: Clean up GPIO tables
mkopec Aug 28, 2025
7c66d48
payloads/edk2/Kconfig.dasharo: bump EDK for SMMSTORE recovery
SergiiDmytruk Aug 28, 2025
5da61ef
drivers/crb/tis.c: reserve TPM MMIO address range
SergiiDmytruk Aug 31, 2025
26c7344
payloads/edk2/Kconfig.dasharo: bump EDK for TPM detection workaround
SergiiDmytruk Aug 31, 2025
00e8331
configs/config.protectli_vault_jsl_v1*: bump to v0.9.4-rc3
SergiiDmytruk Sep 1, 2025
eecfbfc
payloads/external/iPXE/Makefile: bump revision for i219 fix
filipleple Aug 21, 2025
dd51660
soc/intel/cmn/blk/graphics: ensure framebuffer is allocated <4G
filipleple Aug 26, 2025
8da053f
soc/intel/cmn/blk/i2c: ensure resources are allocated <4G
filipleple Aug 26, 2025
495ff2f
soc/intel/cmn/blk/cse/cse.c: ensure resources are allocated <4G
filipleple Aug 26, 2025
872d9bf
src/mainboard/novacustom/mtl-h/variants/*/gpio.c: allow USB-PD EEPROM…
filipleple Aug 28, 2025
7f6ebd1
configs/config.novacustom_v540tu: bump up to rc6
filipleple Aug 21, 2025
149992c
soc/intel/alderlake/fsp_params.c: Fix CPU features programming on S3 …
miczyg1 Sep 2, 2025
4b58775
payloads/external/edk2/Kconfig.dasharo: Bump edk2 rev to fix input drain
miczyg1 Sep 2, 2025
60b2a9a
vc/dasharo/options.h: Expose descriptor writeability flag as EFI var
mkopec Sep 1, 2025
e1c904d
vc/dasharo/options.c: Don't enable HMRFPO on capsule update
mkopec Sep 2, 2025
7d10ea6
configs/config.hardkernel_odroid_h4: Bump to v0.9.1
miczyg1 Sep 2, 2025
c1c7f92
configs/config.protectli_vault_jsl_v1*: bump to v0.9.4-rc4
SergiiDmytruk Sep 2, 2025
5feb3fa
configs/config.novacustom_v5*: bump to rc6
mkopec Sep 3, 2025
69a0c47
mb/asrock: Add SPR 1S server board ASRock Rack SPC741D8-2L2T/BCM
May 15, 2025
8a2323a
3rdparty/fsp: update for working EagleStream FSP
mkopec Sep 8, 2025
6a8c934
soc/intel/xeon-sp/spr: Hook up public FSP bin and headers
ArthurHeymans Feb 7, 2024
95a235f
soc/intel/cmn/blk/lpc/lpc_def.h: Add ESPI_CS1_ENABLE definition
mkopec Sep 10, 2025
6be1337
mb/asrock/spc741d8/bootblock.c: Enable BMC on eSPI CS1#
mkopec Sep 10, 2025
7a959a0
configs/config.asrock_spc741d8: Add Dasharo defconfig
mkopec Jul 24, 2025
f1b989b
3rdparty/dasharo-blobs: bump for SPC741D8 blobs
mkopec Sep 10, 2025
ccd1a5e
configs/config.asrock_spc741d8: Use blobs from dasharo-blobs
mkopec Sep 10, 2025
01b3ef0
configs: Regenerate defconfigs for Dasharo platforms
mkopec Sep 10, 2025
da77989
configs/config.asrock_spc741d8: Set CONFIG_LOCALVERSION
mkopec Sep 10, 2025
ebec5e1
build.sh: Add ASRock Rack SPC741D8-2L2T/BCM support
mkopec Sep 10, 2025
3011159
.github/workflows/build.yml: build ASRock Rack SPC741D8-2L2T/BCM
mkopec Sep 10, 2025
7ed3d58
mb/asrock/spc741d8/Kconfig: Enable Intel SPI block
mkopec Sep 10, 2025
c966d78
configs/config.asrock_spc741d8: Enable SMM_BWP
mkopec Sep 10, 2025
b3743b6
configs/config.asrock_spc741d8: reduce logging, enable edk2 cbmem log…
mkopec Sep 10, 2025
70778c2
configs/config.asrock_spc741d8: enable Dasharo logo
mkopec Sep 10, 2025
f65fa65
build.sh: Fix indentation of ASRock Rack helptext
mkopec Sep 10, 2025
9588952
.github/workflows/build.yml: Fix asrock rack build command
mkopec Sep 11, 2025
b55921c
build.sh: Fix ASRock Rack helptext alignment
mkopec Sep 11, 2025
d74a38f
tag-check.yml: Add CI workflow
philipanda Sep 9, 2025
5b5b0ad
tag-check.yml: Consistent print formatting
philipanda Sep 10, 2025
a72e5ac
tag-check.yml: remove redundant tag fetches
philipanda Sep 10, 2025
5e2741e
configs/config.asrock_spc741d8: Enable more Dasharo features
mkopec Sep 11, 2025
75f77aa
configs/config.asrock_spc741d8: bump to rc2
mkopec Sep 11, 2025
253809a
soc/intel/xeon_sp/spr/Kconfig: define max CPU temperature
mkopec Sep 11, 2025
2b121cc
Revert "soc/intel/xeon_sp/spr/Kconfig: define max CPU temperature"
mkopec Sep 12, 2025
30c9224
configs/config.asrock_spc741d8: disable CPU throttling option
mkopec Sep 12, 2025
b440295
configs/config.asrock_spc741d8: bump to rc3
mkopec Sep 12, 2025
20827de
configs/config.novacustom_v5*: bump to rc7
mkopec Sep 12, 2025
4fe6eaf
payloads/external/edk2/Kconfig.dasharo: bump for EFI var attribute fix
mkopec Sep 12, 2025
0826846
mb/protectli/vault_jsl/mainboard.c: don't report LANs via SMBIOS Type 41
SergiiDmytruk Sep 14, 2025
22e4349
src/include/smbios.h: fix SMBIOS_DEVICE_TYPE_COUNT
SergiiDmytruk Sep 14, 2025
91420db
configs/config.novacustom_v5.0tu: bump to 1.0.0
mkopec Sep 16, 2025
ff859fa
configs/config.asrock_spc741d8: disable power and ME submenus
mkopec Sep 16, 2025
6d5ff6a
mb/asrock/spc741d8/board.fmd: add BOOTSPLASH region
mkopec Sep 16, 2025
5107f9c
configs/config.asrock_spc741d8: bump to rc4
mkopec Sep 16, 2025
c362a0e
drivers/pc80/tpm/tis.c: Obtain PCI device path from domain
mkopec Sep 17, 2025
e3a739f
configs/config.msi_ms7d25: Bump to v1.1.5-rc1
miczyg1 Sep 16, 2025
500c7d9
configs/config.msi_ms7e06: Bump to v0.9.3-rc1
miczyg1 Sep 16, 2025
7cfe4f9
configs/config.msi_ms7d25_ddr4: Disable PCIe hotplug for consistency
miczyg1 Sep 17, 2025
36ba9d8
configs/config.msi_ms7d25: Bump to v1.1.5
miczyg1 Sep 17, 2025
8cd61b8
configs/config.msi_ms7e06: Bump to v0.9.3
miczyg1 Sep 17, 2025
cee8ddf
configs/config.asrock_spc741d8: bump to non-rc
mkopec Sep 18, 2025
6e197f5
config.novacustom_v5*: disable DMA protection option
filipleple Sep 10, 2025
6db1ef3
payloads/edk2/Kconfig.dasharo: bump EDK to disable MMX and SSE
SergiiDmytruk Sep 26, 2025
040f1e6
build.yml: Add a job for building nucbox
philipanda Aug 22, 2025
a14f742
.github/workflows/build.yml: fix build_novacustom dependency
filipleple Oct 1, 2025
d1bcdd1
.github/workflows/build.yml: don't look for EC for NUC BOX
filipleple Oct 1, 2025
8311312
configs/config.protectli_vault_jsl_*: bump up to rc5
filipleple Oct 1, 2025
17c0381
mb/novacustom/mtl-h/variants/dgpu/overridetree.cb: Fix dGPU not comin…
mkopec Oct 2, 2025
bc1ccfd
configs/config.novacustom_v5.0tu: bump version to v1.0.1-rc1
mkopec Oct 3, 2025
0bb89b5
configs/config.novacustom_v5.0tnx: bump version to v1.0.0-rc8
mkopec Oct 3, 2025
4eed42d
.github/scripts/capsule-lint.sh: fix hex->dec conversion
SergiiDmytruk Oct 3, 2025
344cb44
src/mb/protectli/vault_cml/mainboard.c: add VP4651
filipleple Oct 10, 2025
e088898
configs/config.novacustom_nv4x_adl: CBFS allow unverified decompression
Syquel Sep 10, 2025
62fc4f5
configs/config.novacustom_v5*: unset boot resolution, set setup menu …
mkopec Oct 16, 2025
487fdca
mb/{novacustom,clevo}: Bump SMMSTORE size to 512K
mkopec Oct 16, 2025
c0d2051
payloads/external/edk2/Kconfig.dasharo: bump for varstore calculation…
mkopec Oct 17, 2025
279a9aa
util/smmstoretool: Support other block sizes
benjamindoron Jul 11, 2025
9174358
src/Kconfig: add bootsplash region file path
filipleple Oct 1, 2025
fa6e69f
Makefile: add BOOTSPLASH region logo
filipleple Sep 11, 2025
5e8ac19
build.sh: don't patch the Protectli logo
filipleple Sep 11, 2025
06162ba
ec/dasharo/ec: Enable PS/2 probing
mkopec Oct 21, 2025
1e6a33d
mb/{clevo,novacustom}: enable debug SMI
mkopec Oct 24, 2025
74be0cd
configs/config.protectli_vp66xx: bump to rc2
filipleple Oct 28, 2025
49ff9e6
mb/novacustom/mtl-h: Add per-variant HDA subsystem IDs
mkopec Oct 28, 2025
c1c7940
drivers/pc80/tpm/tis.c: fix TPM ACPI device path again
mkopec Oct 21, 2025
ebe6b5a
security/intel: Split out ACM support from TXT directory
mkopec Oct 28, 2025
a57a691
security/intel/cbnt/Kconfig: Don't select Intel TXT
mkopec Oct 28, 2025
9dbfb0d
security/intel/cbnt/logging.c: Add CBnT version of intel_txt_processo…
mkopec Oct 28, 2025
2d268d4
configs: Regenerate defconfigs for Dasharo platforms
mkopec Oct 29, 2025
467b051
configs/config.novacustom_v5*: bump RC numbers
mkopec Nov 3, 2025
b9af8eb
NV4x_Adl bump defconfig to v1.8.0-rc4
philipanda Nov 5, 2025
431a1d1
ns5x_adl bump defconfig to v1.8.0-rc4
philipanda Nov 5, 2025
4cef6a3
pcengines_uefi_apu2 defconfig version bump to v0.9.1-rc3
DonVasyl Nov 6, 2025
68dc2a4
pcengines_uefi_apu3, 4, 6 defconfig version bump to v0.9.1-rc3
DonVasyl Nov 6, 2025
5bdb3f4
Revert "soc/alderlake/Makefile.mk: use microcode from dasharo-blobs"
Tonux599 Nov 12, 2025
11add38
intel-microcode: update to microcode-20251111
Tonux599 Nov 12, 2025
588dad2
payloads/external/edk2/Kconfig.dasharo: bump EDK2 for TPM multibank d…
filipleple Nov 7, 2025
6e96f19
configs/config.protectli_vault_jsl_*: bump version to v0.9.4-rc6
filipleple Nov 14, 2025
217612e
pcengines_uefi_apu2, 3, 4, 6 defconfig version bump to v0.9.1
DonVasyl Nov 20, 2025
3bff2c5
mb/protectli/vault_adl_n/variants/vp2440/overridetree.cb: disable ASP…
mkopec Nov 24, 2025
e26b10e
configs/config.protectli_vp2440: bump version number to v0.9.1-rc1
mkopec Nov 24, 2025
d98362e
src/mainboard/protectli/vault_jsl/mainboard.c: Disable ASPM for Wi-Fi…
mkopec Nov 25, 2025
43c5721
configs/config.protectli_vault_jsl_v1*: bump RC number to 7
mkopec Nov 25, 2025
2baf6f6
payloads/external/edk2/Kconfig.dasharo: bump for fused laptop update fix
mkopec Dec 3, 2025
0bc8495
configs/config.novacustom_v5*: bump to next RC
mkopec Dec 3, 2025
5337771
config.novacustom_ns5x_adl & nv4x_adl: version bump to 1.8.0-rc5
DonVasyl Dec 12, 2025
2f7fcc8
ns5x_adl & nv4x_adl: CONFIG_DRIVERS_EFI_MAIN_FW_VERSION & LSV bump.
DonVasyl Dec 12, 2025
270ea70
configs/config.protectli_vault_jsl_*: bump to non-rc
filipleple Dec 12, 2025
5bd5381
soc/intel: Add function to report ME FWSTS in SMBIOS
miczyg1 Dec 31, 2023
1ac3d12
mb/novacustom/mtl-h/ramstage.c: Generate SMBIOS table with ME FWSTS
mkopec Dec 9, 2025
dc779c4
payloads/external/edk2/Kconfig.dasharo: bump rev for BtG key checking
mkopec Dec 9, 2025
9de28ad
src/mainboard/protectli/vault_adl_p/devicetree.cb: add usb wake
wiktormowinski Dec 9, 2025
f0d9939
configs/config.protectli_vp66xx: enable ME
wiktormowinski Dec 9, 2025
61fbb24
src/mainboard/protectli/vault_adl_p/devicetree.cb: enable wake on eth
wiktormowinski Dec 10, 2025
3d2a284
src/mainboard/protectli/vault_adl_p/devicetree.cb:add all 3 ports
wiktormowinski Dec 18, 2025
b5b8c81
configs/config.protectli_vp66xx: bump to rc3
wiktormowinski Dec 19, 2025
c504b65
vendorcode/dasharo/options.c: extract fum_is_active()
SergiiDmytruk Jan 6, 2026
86ae818
vendor/dasharo/options.c: introduce "disk capsules" boot
SergiiDmytruk Jan 6, 2026
d4ca178
lib/coreboot_table: report "disk capsules" boot in CBMEM
SergiiDmytruk Dec 31, 2025
73c145e
drivers/efi/capsules.c: enable capsule access for "disc capsules" boot
SergiiDmytruk Dec 31, 2025
8f8f6e6
payloads/edk2/Kconfig.dasharo: bump EDK for "immediate" on-disk capsules
SergiiDmytruk Jan 6, 2026
45f5034
mb/hardkernel/odroid-h4/mainboard.c: generate SMBIOS table with ME FWSTS
SergiiDmytruk Jan 7, 2026
3ea91b8
payloads/edk2: add EDK2_CAPSULE_ON_DISK_SUPPORT option
SergiiDmytruk Jan 7, 2026
8c3789c
configs/config.msi_*: enable EDK2_CAPSULE_ON_DISK_SUPPORT
SergiiDmytruk Jan 7, 2026
1d9783f
security/tpm/tss/tcg-2.0/tss: move tpm2_get_capability_pcrs() here
SergiiDmytruk Nov 30, 2025
f914321
security/tpm: prepare API for multiple active banks
SergiiDmytruk Dec 1, 2025
0d078b0
security/tpm/tss/tcg-2.0: enable extending multiple PCR banks
SergiiDmytruk Dec 12, 2025
e30e24d
security/tpm: stop using fixed-size entries in TPM 2.0 log
SergiiDmytruk Dec 13, 2025
43d9efb
security/intel/cbnt/measurement.c: extract measurement functions
SergiiDmytruk Dec 14, 2025
06a919b
security/intel/cbnt/measurement.c: support multiple PCR banks
SergiiDmytruk Dec 15, 2025
194f4ca
security/vboot/tpm_common.c: support multiple banks
SergiiDmytruk Dec 15, 2025
3bb636b
lib/cbfs.c,security/tpm/tspi: support multiple banks
SergiiDmytruk Dec 15, 2025
e4f7fa4
security/tpm: detect and use all active PCR banks
SergiiDmytruk Dec 15, 2025
a7bd2ea
payloads/edk2: add EDK2_SHOW_CAPSULE_REPORT option
SergiiDmytruk Jan 15, 2026
9dc69c5
configs/config.msi_*: enable EDK2_SHOW_CAPSULE_REPORT
SergiiDmytruk Jan 15, 2026
2efa30b
payloads/edk2/Kconfig.dasharo: bump EDK for capsule results dialog
SergiiDmytruk Jan 15, 2026
a3897ac
mb/protectli/vault_adl_n: vp2440: reenable ASPM and disable clk gating
mkopec Jan 20, 2026
7141c82
configs/config.protectli_vp2440: bump to v0.9.1-rc2
mkopec Jan 23, 2026
cffafc0
ifdtool: Add set top swap size PCH strap subcommand
philipanda Oct 6, 2025
6cd2a2b
ifittool: allow adding files from a separate region
filipleple Oct 16, 2025
1338bb2
intel soc,southbridge: Add Kconfig to set TSBS in IFD during build
philipanda Oct 9, 2025
a76884d
Makefile.mk: separate bootblocks into BOOTBLOCK and TOPSWAP
filipleple Oct 17, 2025
d53f711
src/southbridge/intel/common/firmware/Makefile.mk: fix after cherrypick
filipleple Nov 18, 2025
6387a57
soc/intel/common/block/rtc/rtc.c: control Top Swap via CMOS option
filipleple Nov 21, 2025
efb6a7d
soc/intel/common/block/rtc/rtc.c: Top Swap: add Slot B selection mech…
filipleple Nov 21, 2025
45465bb
sb/intel/common/firmware/Makefile.mk: fix INTEL_IFD_SET_TOP_SWAP_BOOT…
SergiiDmytruk Dec 8, 2025
06cf949
src/Kconfig: add MAINBOARD_NEEDS_CMOS_OPTIONS
SergiiDmytruk Dec 9, 2025
29b4a6e
cpu/intel/fit/Makefile.mk: make FIT in TOPSWAP point at MCU in COREBO…
SergiiDmytruk Dec 9, 2025
d96d6b7
Makefile.mk,cpu/intel/fit/Makefile.mk: introduce CBFS_REGIONS
SergiiDmytruk Dec 9, 2025
315b6d1
Makefile.mk: don't add bootblock after other files
SergiiDmytruk Dec 9, 2025
e8edcf0
security/lockdown/lockdown.c: option to lock COREBOOT and BOOTBLOCK
filipleple Dec 8, 2025
d6065d7
CBFS verification: support Top Swap redundancy
philipanda Dec 10, 2025
8a79ad1
src/mainboard/protectli/vault_adl_p/: Redundancy configuration
filipleple Nov 13, 2025
c9a3f7c
src/mainboard/protectli/vault_adl_p/Kconfig: cleanup after redundancy
filipleple Jan 20, 2026
10e9b41
src/mainboard/protectli/vault_adl_p/Kconfig: Capsule Update config
filipleple Nov 13, 2025
877f1da
soc/intel/common/block: build rtc into postcar
filipleple Jan 21, 2026
8a63e17
configs/config.protectli_vp66xx: unset ME HAP disable
filipleple Jan 21, 2026
b5848f9
src/lib/cbfs.c: fix cbfs_fmap_region_hint() call
filipleple Jan 21, 2026
5142035
mainboard/protectli/vault_adl_p/Kconfig: remove duplicate flag
filipleple Jan 23, 2026
e8941b3
src/lib/cbfs.c: Add more helpers for unverified areas
mkopec Jan 13, 2026
58e4479
security/intel/txt: load TXT ACMs from BOOTBLOCK region if redundancy
mkopec Jan 13, 2026
be3ac2f
security/intel/acm/Makefile.mk: add ACMs to appropriate redundancy re…
mkopec Dec 1, 2025
61db5ed
protectli/vault_adl_p/cmos.layout: define CBNT CMOS data
mkopec Jan 13, 2026
99c4344
security/intel/acm/Makefile.mk: Fix including ACMs in topswap regions
mkopec Jan 13, 2026
707660a
security/intel/cbnt/Makefile.mk: include manifests in topswap blocks
mkopec Jan 13, 2026
086d893
mb/protectli/vault_adl_p: enable Boot Guard and add fixes for ACM pla…
mkopec Jan 13, 2026
d6059b3
security/intel/cbnt/Makefile.mk: add KM to TS FIT
mkopec Jan 14, 2026
1022543
mb/protectli/vault_adl_p/romstage_fsp_params.c: map BIOS ACM properly…
mkopec Jan 14, 2026
efa239c
cpu/intel/fit/Makefile.mk: make TS FIT point to ucode in slot B
mkopec Jan 14, 2026
cde0a4b
util/cbfstool/ifittool.c: Use relative addresses when adding FIT entries
mkopec Jan 14, 2026
db7d338
lib/cbfs.c: cbfs_unverified_area_lookup: add missing return
mkopec Jan 19, 2026
81a6626
security/intel/cbnt/Makefile.mk: Place BPM in topswap blocks only if …
mkopec Jan 19, 2026
25bd783
security/intel/txt/ramstage.c: don't unconditionally map ACM from boo…
mkopec Jan 19, 2026
3b152fa
configs/config.protectli_vp66xx: enable CBnT
mkopec Jan 21, 2026
28b2a89
security/intel/cbnt/Makefile.mk: Place KM in topswap blocks only if r…
mkopec Jan 21, 2026
9221df9
cpu/intel/fit/Makefile.mk: set TS_MCU_REGION=COREBOOT_TS only once
mkopec Jan 21, 2026
12c12eb
mb/protectli/vault_adl_p/top_swap.fmd: set TSBS size to 1M
mkopec Jan 21, 2026
aedffff
configs/config.protectli_vp66xx: set TSBS size and enable CBnT logging
mkopec Jan 21, 2026
84767f7
mb/protectli/vault_adl_p/Kconfig: set default TSBB size to 1M
mkopec Jan 22, 2026
a0a41c9
mb/protectli/vault_adl_p/top_swap.fmd: rearrange to fill space
mkopec Jan 22, 2026
e5aa7af
security/intel: drop redundant TS region definitions
mkopec Jan 22, 2026
00b6cf7
configs/config.protectli_vp66xx: enable CBnT stauts menu
mkopec Jan 23, 2026
7d8567b
configs/config.protectli_vp66xx: bump to rc4
filipleple Jan 23, 2026
020318e
configs/config.novacustom_v5*0tnx: bump version to final v1.0.0
mkopec Jan 28, 2026
1d07968
configs/config.novacustom_v5*0tu: bump version to final v1.0.1
mkopec Jan 28, 2026
e92d770
configs/config.emulation_qemu_x86_q35_uefi: Enable ReBAR and Above 4G…
mkopec Feb 3, 2026
f830a23
configs/config.emulation_qemu_x86_q35_uefi_all_menus: sync with base …
mkopec Feb 3, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
3 changes: 3 additions & 0 deletions .codespellrc
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
[codespell]
exclude-file = .codespellx
ignore-words-list = "FPT,FTP,fpt,ftp"
Empty file added .codespellx
Empty file.
16 changes: 16 additions & 0 deletions .conform.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
---
policies:
- type: commit
spec:
header:
length: 80
imperative: false
invalidLastCharacters: .
body:
required: false
dco: true
gpg:
required: true
spellcheck:
locale: US
maximumOfOneCommit: false
87 changes: 87 additions & 0 deletions .github/scripts/capsule-lint.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,87 @@
#!/bin/bash

function get_str() {
local cfg=$1
local name=$2
sed -n 's/^'"$name"'="\(.*\)"$/\1/p' "$cfg"
}

function get_hex() {
local cfg=$1
local name=$2
sed -n 's/^'"$name"'=\(.*\)$/\1/p' "$cfg"
}

function hex_to_ver_str() {
local hex=$1

local major=${hex:2:2}
local minor=${hex:4:2}
local bugfix=${hex:6:2}
local rc=${hex:8:2}

local ver="v$((0x$major)).$((0x$minor)).$((0x$bugfix))"
if [ "$((0x$rc))" -lt 128 ]; then
ver="$ver-rc$((0x$rc))"
fi
echo "$ver"
}

if [ ! -d configs ]; then
echo "error: $(basename "$0") should be run from the root of coreboot's tree"
exit 1
fi

declare -A guids
fail=0

mapfile -t configs < <(grep -l 'EFI_UPDATE_CAPSULE' configs/config.*)
for c in "${configs[@]}"; do
local_ver=$(get_str "$c" 'CONFIG_LOCALVERSION')

guid=$(get_str "$c" 'CONFIG_DRIVERS_EFI_MAIN_FW_GUID')
ver=$(get_hex "$c" 'CONFIG_DRIVERS_EFI_MAIN_FW_VERSION')
lsv=$(get_hex "$c" 'CONFIG_DRIVERS_EFI_MAIN_FW_LSV')

# convert to lower case as normalization
guid=${guid,,*}
# remove common prefix to shorten error messages
c=${c##*/}

if [ -z "$guid" ]; then
echo "$c: missing CONFIG_DRIVERS_EFI_MAIN_FW_GUID"
fail=1
elif [ -n "${guids["$guid"]}" ]; then
echo "$c: duplicated CONFIG_DRIVERS_EFI_MAIN_FW_GUID value ($guid)"
echo "${c//?/ } also appears in ${guids["$guid"]}"
fail=1
else
guids["$guid"]=$c
fi

if [ -z "$ver" ]; then
echo "$c: missing CONFIG_DRIVERS_EFI_MAIN_FW_VERSION"
fail=1
fi
if [ -z "$lsv" ]; then
echo "$c: missing CONFIG_DRIVERS_EFI_MAIN_FW_LSV"
fail=1
fi

if [ -n "$ver" ] && [ -n "$lsv" ] && [ $(( ver < lsv )) -eq 1 ]; then
echo "$c: CONFIG_DRIVERS_EFI_MAIN_FW_VERSION < CONFIG_DRIVERS_EFI_MAIN_FW_LSV"
echo "${c//?/ } $ver < $lsv"
fail=1
fi

if [ -n "$ver" ]; then
str_ver=$(hex_to_ver_str "$ver")
if [ "$str_ver" != "$local_ver" ]; then
echo "$c: CONFIG_LOCALVERSION doesn't match CONFIG_DRIVERS_EFI_MAIN_FW_VERSION"
echo "${c//?/ } $local_ver != $str_ver ($ver)"
fail=1
fi
fi
done

exit "$fail"
Loading
Loading