Qubes-Community-Content/coreboot-x230.md

# Coreboot on Lenovo X230

This howto describes how to install Coreboot on a Lenovo X230.
This document is still a draft and needs some cleanup.

In order to flash the bios chip on the X230 you need special equipment to read and write to the two BIOS chips.
An easy way which for an in-place flashiung procedure is to use a raspberry pi and a special flashing clip to read from and write to the Bios chip.

The setup looks like this:

Lenovo X230 (target) BIOS Chip <-- Pomodo Flash Clip <-- Raspberry Pi <-- Building Machine.

Because you need to build coreboot and this takes a long time on a raspberry pi, this howto assumes that you have an additional laptop/PC which will be used as building machine.
The building machine will compile the coreboot ROm file and the raspberry pi is only used to read and write from and to the target device.

## Links
I have looked at the following ressources to learn more about coreboot adn write this howto

- https://www.coreboot.org/Board:lenovo/x230
- https://github.com/bibanon/Coreboot-ThinkPads/wiki/Hardware-Flashing-with-Raspberry-Pi
- [Coreboot on the ThinkPad X220 with a Raspberry Pi](https://tylercipriani.com/blog/2016/11/13/coreboot-on-the-thinkpad-x220-with-a-raspberry-pi/)
- [Karl Cordes - How to flash Coreboot on X220](https://karlcordes.com/coreboot-x220/)
  Gute Anleitung für Anschluss FlashClip an Pi
- [Johannes' Blog - Coreboot on X220](https://wej.k.vu/coreboot/coreboot_on_the_lenovo_thinkpad_x220/)
- [Coreboot X230]( https://blog.noq2.net/corebooting-thinkpad-x230.html)
- [Flashing Coreboot on the T430 with a Raspberry Pi](https://nm-projects.de/2017/08/flashing-coreboot-on-the-t430-with-a-raspberry-pi/)
- https://kennyballou.com/blog/2017/01/coreboot-x230/

Additional info has been provided by the Coreboot Mailinglist:

- https://mail.coreboot.org/pipermail/coreboot/2017-September/085173.html
- https://mail.coreboot.org/pipermail/coreboot/2017-September/085182.html
- https://mail.coreboot.org/pipermail/coreboot/2017-September/085185.html

## Hardware:
the following parts are needed to build a Coreboot flashing devices:

- Raspberry Pi 3 ~ 35 Eur
  https://www.amazon.de/dp/B01CD5VC92/
- 32 GB SDCard ~ 17 Eur
  https://www.amazon.de/dp/B073S8LQSL/
- Jumper Cables ~ 7 Eur
  https://www.amazon.de/dp/B072NSLB98/
- Pomona 5250 8-Pin Flash Clip ~ 12 Eur
  https://www.digikey.de/product-detail/de/pomona-electronics/5250/501-1311-ND/745102

## physical setup (FIXME!)
the information how to connect the Pomodo Clip to the rapsberry pi has to be included here.


## Procedure

- Setting up Raspberry Pi
- Install FlashROM
- Connect Flash Clip to Raspberry Pi
- Disassemble X230 Laptop
- Backup existing ROM
- Setting up Coreboot on building machine
- Compile Coreboot
- Configure Coreboot
- Flash new ROM

## Prepare Build machine
You can use another Qubes Laptop as Building machine.
1) Clone the Debian template
```
qvm-clone debian-9 t-coreboot
```
2) launch a terminal in this template an install the following packages
```
sudo apt-get install git wget build-essential gnat flex bison libncurses5-dev zlib1g-dev libfreetype6-dev unifont python3
sudo apt-get build-dep grub
```
3) Create an AppVM bases on this template
Important: increase private storage size, as the build process and the git repositories need some storage capacity.
Example 10GB


## Setting up Raspberry Pi

1. Download Noobs
2. Install Raspbian
3. Enable SSH

## Install FlashROM on Raspberry Pi
Flashrom is used to read the current ROM from the Bios Chip and make a backup of it.
It will also be used to flash the new coreboot Bios.
1) Install build enviroment and dependencies for flashrom
   ```
   sudo apt-get install libftdi1 libftdi-dev libusb-dev libpci-dev m4 bison flex libncurses5-dev  libncurses5 build-essential pciutils usbutils libpci-dev libusb-dev libftdi1 libftdi-dev zlib1g-dev subversion libusb-1.0 gnat wget zlib1g-dev
   ```
   Problem: some packackes could not be installed:
   [...]
   Package flex is not available, but is referred to by another package.
   This may mean that the package is missing, has been obsoleted, or
   is only available from another source
   [...]

   Solution:
   delete all files in /var/lib/apt/lists
2) Download and install Flashrom
   ```
   git clone https://github.com/flashrom/flashrom
   cd flashrom
   make
   sudo make install
   ```
3) Enable the SPI device on the Raspberry Pi.
   ```
   sudo raspi-config
   # In the menu choose:
   # - 5 Interfacing Options  Configure connections to peripherals 
   # - P4 SPI Enable/Disable automatic loading of SPI kernel module
   # - Would you like the SPI interface to be enabled?
   # - Yes 
   sudo reboot
   ```
4) Modprobe SPI driver
   ```
   sudo modprobe spi_bcm2835
   sudo modprobe spidev
   ```


## Prepare Build machine (the AppVM NOT the template)
### Setup Coreboot
Cloning the coreboot git. and recursively clone the necessary other gits.
```
git clone --recursive https://github.com/coreboot/coreboot
cd ~/coreboot/3rdparty
git clone http://review.coreboot.org/p/blobs.git
```

### Setup Extraction Tool for binary blobs
Build and install the extraction tool for the binary blobs.
```
cd ~/coreboot/util/ifdtool
make
sudo make install
```

## on Raspberry Pi
read existing BIOS and transfer it to build machine

1) Read upper bios chip (4MB)
   ```
   pi@raspberrypi:~ $ flashrom -p linux_spi:dev=/dev/spidev0.0,spispeed=1000 -c "MX25L3205D/MX25L3208D" -r x230-bios-top1.bin
   flashrom p1.0-69-g3f7e341 on Linux 4.14.30-v7+ (armv7l)
   flashrom is free software, get the source code at https://flashrom.org

   Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
   Found Macronix flash chip "MX25L3205D/MX25L3208D" (4096 kB, SPI) on linux_spi.
   Reading flash... done.
   
   ```
   Repeat this two more times creating: x230-bios-top2.bin and x230-bios-top3.bin

2) Read lower bios chip (8MB)
   ```
   pi@raspberrypi:~ $ flashrom -p linux_spi:dev=/dev/spidev0.0,spispeed=1000 -r x230-bios-bottom1.bin
   flashrom p1.0-69-g3f7e341 on Linux 4.14.30-v7+ (armv7l)
   flashrom is free software, get the source code at https://flashrom.org

   Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
   Found Eon flash chip "EN25QH64" (8192 kB, SPI) on linux_spi.
   Reading flash... done.

   ```
   Repeat this 2 more times and create two more copies x230-bios-bottom2.bin and x230-bios-bottom3.bin

3) verify that all files are identical
   for the top 4MB bios chip:
   ```
   pi@raspberrypi:~ $ md5sum x230-bios-top?.bin
   54bfde566dffa17760a6115f27309681  x230-bios-top1.bin
   54bfde566dffa17760a6115f27309681  x230-bios-top2.bin
   54bfde566dffa17760a6115f27309681  x230-bios-top3.bin

   ```
   for the lower 8MB bios chip:
   ```
   pi@raspberrypi:~ $ md5sum x230-bios-bottom?.bin
   ac7dffb64f7d11ec9b13cc9449e48a64  x230-bios-bottom1.bin
   ac7dffb64f7d11ec9b13cc9449e48a64  x230-bios-bottom2.bin
   ac7dffb64f7d11ec9b13cc9449e48a64  x230-bios-bottom3.bin

   ```   

## on build machine: copy ROM files from raspberry pi

4) Copy the ROMs from raspberry pi to the "build machine"
   ```
   user@my-coreboot:~/coreboot/ROM$ scp pi@192.168.200.107:~/x230-bios-* .
   pi@192.168.200.107's password: 
   x230-bios-bottom1.bin                                                                        100% 8192KB  10.8MB/s   00:00    
   x230-bios-top1.bin                                                                           100% 4096KB  11.1MB/s   00:00    
   ```

5) Merge two files into one ROM file
   ```
   cat x230-bios-bottom1.bin x230-bios-top1.bin > x230-bios.rom
   ```

6) move all rom files to ~/coreboot/ROM
   ```
   mkdir ~/coreboot/ROM
   mv x230-* ~/coreboot/ROM
   ```


### Extract Blobs from exracted ROM
```
user@my-coreboot:~/coreboot/ROM$ cd ~/coreboot/ROM
user@my-coreboot:~/coreboot/ROM$ ifdtool -x x230-bios.rom
File x230-bios-bottom1.bin is 8388608 bytes
  Flash Region 0 (Flash Descriptor): 00000000 - 00000fff 
  Flash Region 1 (BIOS): 00500000 - 00bfffff 
Error while writing: Success
  Flash Region 2 (Intel ME): 00003000 - 004fffff 
  Flash Region 3 (GbE): 00001000 - 00002fff 
  Flash Region 4 (Platform Data): 00fff000 - 00000fff (unused)
```
you will now find the following files:
```
user@my-coreboot:~/coreboot/ROM$ ls -la
total 36872
drwxr-xr-x  2 user user     4096 Apr  6 00:48 .
drwxr-xr-x 10 user user     4096 Apr  6 00:43 ..
-rw-r--r--  1 user user     4096 Apr  6 00:48 flashregion_0_flashdescriptor.bin
-rw-r--r--  1 user user  7340032 Apr  6 00:48 flashregion_1_bios.bin
-rw-r--r--  1 user user  5230592 Apr  6 00:48 flashregion_2_intel_me.bin
-rw-r--r--  1 user user     8192 Apr  6 00:48 flashregion_3_gbe.bin
-rw-r--r--  1 user user 12582912 Apr  6 00:30 x230-bios.bin
-rw-r--r--  1 user user  8388608 Apr  5 23:38 x230-bios-bottom1.bin
-rw-r--r--  1 user user  4194304 Apr  5 23:38 x230-bios-top1.bin
```

## Extract VGA Blob
https://www.coreboot.org/VGA_support#UEFI_Method

```
cd ~/coreboot
sudo apt-get install qt5-default
git clone http://github.com/LongSoft/UEFITool.git
cd UEFITool
qmake
make
```
Start UEFITool
```
./UEFITool
```
File > Open BIOS Image File
Open the ROM-file from the 4MB BIOS-Chip (x230-bios-top1.bin) or the merged ROM (x230-bios.bin)

will generate the following messages:
"parseVolume: unknown file system FFF12B8D-7696-4C8B-A985-2747075B4F50
parseBios: volume size stored in header 61000h (397312) differs from calculated using block map 40000h (262144)
parseVolume: unknown file system 00504624-8A59-4EEB-BD0F-6B36E96128E0
parseBios: volume size stored in header 2F000h (192512) differs from calculated using block map 30000h (196608)
parseFile: invalid data checksum"


- Hit CTRL+F (Search...), 3rd Tab (Text)
- Search for: VGA Compatible BIOS
  (Uncheck Unicode)
- Will show the following message in the lower part of the window:
  ASCII text "VGA Compatible BIOS" found in Raw section at offset 22h
- Double click on the line in the message windows which bring you to the raw section
- Right Click on "Raw section" and choose "Extract Body"
- Save file as ~/coreboot/ROM/vga.rom


## Configure and build Coreboot

1) Launch Configuration menu
   ```
   cd ~/coreboot/
   make nconfig
   ```

   Enter to open Submenu, Escape to switch back.
   F6 saves config to /home/user/coreboot/.config
   F9 quits config menu

2) build coreboot using 7 from total 8 cores on my W540 (adapt this to your possibilities)
   ```
   make crossgcc-i386 CPUS=7
   make iasl
   make
   ```

## Split coreboot ROM
after building coreboot you need to the 12mb file into a 4mb and 8mb file.
```
mkdir ~/coreboot/ROM-ready
# Split first 8MB of coreboot.rom (bottom-chip)
dd if=~/coreboot/build/coreboot.rom of=~/coreboot/ROM-ready/x230-coreboot-8mb.rom bs=1024 count=$[1024*8] skip=0

# Split last 4MB of coreboot.rom (top-chip)
dd if=~/coreboot/build/coreboot.rom of=~/coreboot/ROM-ready/x230-coreboot-4mb.rom bs=1024 count=$[1024*4] skip=$[1024*8]

```

## Copy ROM to raspberry pi and flash 
Transfer the two new ROM files over to the raspberry pi
```
scp x230-coreboot-* pi@192.168.200.107:~/
```
I have moved the coreboot-ROM files to a new directory ~/ROM-ready on the raspberry pi


Logon to the pi and flash both chips:
```
# write top chip (4MB)
pi@raspberrypi:~/ROM-ready $ sudo flashrom -p linux_spi:dev=/dev/spidev0.0,spispeed=1000 -c "MX25L3205D/MX25L3208D" -w x230-coreboot-4mb.rom 
flashrom p1.0-69-g3f7e341 on Linux 4.14.30-v7+ (armv7l)
flashrom is free software, get the source code at https://flashrom.org

Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
Found Macronix flash chip "MX25L3205D/MX25L3208D" (4096 kB, SPI) on linux_spi.
Reading old flash chip contents... done.
Erasing and writing flash chip... Erase/write done.
Verifying flash... VERIFIED.

# write bottom chip (8MB)
pi@raspberrypi:~/ROM-ready $ sudo flashrom -p linux_spi:dev=/dev/spidev0.0,spispeed=1000 -w x230-coreboot-8mb.rom 
flashrom p1.0-69-g3f7e341 on Linux 4.14.30-v7+ (armv7l)
flashrom is free software, get the source code at https://flashrom.org

Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
Found Eon flash chip "EN25QH64" (8192 kB, SPI) on linux_spi.
Reading old flash chip contents... done.
Erasing and writing flash chip... Erase/write done.
Verifying flash... VERIFIED.

```
## Test drive
now it is time to cross fingers and try if you was able to flash coreboot.
Remove the Pomodo-Clip, put your keyboard back, put your battery in and power on.
In case you run into any problems, you can always reflash your stock rom.



## From my older notes (FIXME!) 
(this needs to be rewritten/updated to the above procedure)

--- on your raspberry pi ---

0) Put External Flash Clip, female jumper cables and Raspberry pi together
   (kind of a lego thing)

1) Install Raspberian on Pi using Noobs

2) Update Pi and install additional packages including 'flashrom'

3) take keyboard and palmrest of your "coreboot target laptop" (target) off
   to access the BIOS Chip(s)

4) Connect the BIOS-Clip to BIOS-chips and read the content from your pi
   (x230-default-part2-4mb.rom / x230-default-part2-8mb.rom)

5) merge the two files into one 12 MB ROM file
   (x230-default-12mb.rom)

--- on your build laptop ---

6) Copy all three files to your "build laptop" (laptop)
   Build Laptop must run Linux, this howto assumes you are using Ubuntu 16.04.3 LTS
   (could also be installed on an USB thumbdrive or external harddrive)

7) Download Coreboot from GIT

7) Install UEFITool on laptop

8) Extract VGA BLOB from the x230-default-12mb.rom file
   save the file in the coreboot/blobs directory
   (./coreboot/3rdparty/blobs/mainboard/lenovo/x230/pci8086,0166.rom)

9) Build Coreboot Toolchain

10) Compile ifdtool located in the coreboot/utils directory

11) Extract BLOBS from x230-default-12mb.rom using ifdtool
    save the files in the coreboot/blobs directory
    (./coreboot/3rdparty/blobs/mainboard/lenovo/x230/descriptor.bin)
    (./coreboot/3rdparty/blobs/mainboard/lenovo/x230/me.bin)
    (./coreboot/3rdparty/blobs/mainboard/lenovo/x230/gbe.bin)

11b) [Optionally] Use ME_Cleaner on me.bin file )
     (also it seems that ME_Cleaner is included in Coreboot:
     Coreboot nconfig:
     Chipset > Add Intel descriptor.bin file > Add Intel ME/TXE firmware
     --> Strip down the Intel ME/TXE firmware )
     I've choosen to leave the me.bin as is until everything is working.

12) Configure Coreboot (make nconfig)
    choose parameters/features and add the 4 binary blobs (step 8 and 11)

13) build coreboot image
    (./coreboot/build/coreboot.rom)

14) Split coreboot.rom into two separate files to flash them to your 2 chips
    (x230-coreboot-8mb.rom and x230-coreboot-4mb.rom)

15) copy both files to your Raspberry Pi

--- on your Raspberry pi ---

16) flash both files using flashrom again

17) Reboot target laptop

18) should boot up with coreboot.