Git-Mirrors/Qubes-Community-Content
1
0
Fork 0
mirror of https://github.com/Qubes-Community/Contents.git synced 2024-07-23 03:01:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
3a7916e39f
Qubes-Community-Content/docs/coreboot/x230.md

15 KiB
Raw Blame History

Coreboot on Lenovo X230

This howto describes how to install Coreboot on a Lenovo X230. This document is still a draft and needs some cleanup.

In order to flash the bios chip on the X230 you need special equipment to read and write to the two BIOS chips. An easy way which for an in-place flashiung procedure is to use a raspberry pi and a special flashing clip to read from and write to the Bios chip.

The setup looks like this:

Lenovo X230 (target) BIOS Chip <-- Pomodo Flash Clip <-- Raspberry Pi <-- Building Machine.

Because you need to build coreboot and this takes a long time on a raspberry pi, this howto assumes that you have an additional laptop/PC which will be used as building machine. The building machine will compile the coreboot ROm file and the raspberry pi is only used to read and write from and to the target device.

Links

I have looked at the following ressources to learn more about coreboot adn write this howto

Additional info has been provided by the Coreboot Mailinglist:

Hardware:

the following parts are needed to build a Coreboot flashing devices:

physical setup (FIXME!)

the information how to connect the Pomodo Clip to the rapsberry pi has to be included here.

Procedure

  • Setting up Raspberry Pi
  • Install FlashROM
  • Connect Flash Clip to Raspberry Pi
  • Disassemble X230 Laptop
  • Backup existing ROM
  • Setting up Coreboot on building machine
  • Compile Coreboot
  • Configure Coreboot
  • Flash new ROM

Prepare Build machine

You can use another Qubes Laptop as Building machine.

  1. Clone the Debian template
qvm-clone debian-9 t-coreboot
  1. launch a terminal in this template an install the following packages
sudo apt-get install git wget build-essential gnat flex bison libncurses5-dev zlib1g-dev libfreetype6-dev unifont python3
sudo apt-get build-dep grub
  1. Create an AppVM bases on this template Important: increase private storage size, as the build process and the git repositories need some storage capacity. Example 10GB

Setting up Raspberry Pi

  1. Download Noobs
  2. Install Raspbian
  3. Enable SSH

Install FlashROM on Raspberry Pi

Flashrom is used to read the current ROM from the Bios Chip and make a backup of it. It will also be used to flash the new coreboot Bios.

  1. Install build enviroment and dependencies for flashrom

    sudo apt-get install libftdi1 libftdi-dev libusb-dev libpci-dev m4 bison flex libncurses5-dev  libncurses5 build-essential pciutils usbutils libpci-dev libusb-dev libftdi1 libftdi-dev zlib1g-dev subversion libusb-1.0 gnat wget zlib1g-dev

    Problem: some packackes could not be installed: [...] Package flex is not available, but is referred to by another package. This may mean that the package is missing, has been obsoleted, or is only available from another source [...]

    Solution: delete all files in /var/lib/apt/lists

  2. Download and install Flashrom

    git clone https://github.com/flashrom/flashrom
cd flashrom
make
sudo make install

  3. Enable the SPI device on the Raspberry Pi.

    sudo raspi-config
# In the menu choose:
# - 5 Interfacing Options  Configure connections to peripherals 
# - P4 SPI Enable/Disable automatic loading of SPI kernel module
# - Would you like the SPI interface to be enabled?
# - Yes 
sudo reboot

  4. Modprobe SPI driver

    sudo modprobe spi_bcm2835
sudo modprobe spidev

Prepare Build machine (the AppVM NOT the template)

Setup Coreboot

Cloning the coreboot git. and recursively clone the necessary other gits.

git clone --recursive https://github.com/coreboot/coreboot
cd ~/coreboot/3rdparty
git clone http://review.coreboot.org/p/blobs.git

Setup Extraction Tool for binary blobs

Build and install the extraction tool for the binary blobs.

cd ~/coreboot/util/ifdtool
make
sudo make install

on Raspberry Pi

read existing BIOS and transfer it to build machine

  1. Read upper bios chip (4MB)

    pi@raspberrypi:~ $ flashrom -p linux_spi:dev=/dev/spidev0.0,spispeed=1000 -c "MX25L3205D/MX25L3208D" -r x230-bios-top1.bin
flashrom p1.0-69-g3f7e341 on Linux 4.14.30-v7+ (armv7l)
flashrom is free software, get the source code at https://flashrom.org

Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
Found Macronix flash chip "MX25L3205D/MX25L3208D" (4096 kB, SPI) on linux_spi.
Reading flash... done.

    Repeat this two more times creating: x230-bios-top2.bin and x230-bios-top3.bin

  2. Read lower bios chip (8MB)

    pi@raspberrypi:~ $ flashrom -p linux_spi:dev=/dev/spidev0.0,spispeed=1000 -r x230-bios-bottom1.bin
flashrom p1.0-69-g3f7e341 on Linux 4.14.30-v7+ (armv7l)
flashrom is free software, get the source code at https://flashrom.org

Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
Found Eon flash chip "EN25QH64" (8192 kB, SPI) on linux_spi.
Reading flash... done.

    Repeat this 2 more times and create two more copies x230-bios-bottom2.bin and x230-bios-bottom3.bin

  3. verify that all files are identical for the top 4MB bios chip:

    pi@raspberrypi:~ $ md5sum x230-bios-top?.bin
54bfde566dffa17760a6115f27309681  x230-bios-top1.bin
54bfde566dffa17760a6115f27309681  x230-bios-top2.bin
54bfde566dffa17760a6115f27309681  x230-bios-top3.bin

    for the lower 8MB bios chip:

    pi@raspberrypi:~ $ md5sum x230-bios-bottom?.bin
ac7dffb64f7d11ec9b13cc9449e48a64  x230-bios-bottom1.bin
ac7dffb64f7d11ec9b13cc9449e48a64  x230-bios-bottom2.bin
ac7dffb64f7d11ec9b13cc9449e48a64  x230-bios-bottom3.bin

on build machine: copy ROM files from raspberry pi

  1. Copy the ROMs from raspberry pi to the "build machine"

    user@my-coreboot:~/coreboot/ROM$ scp pi@192.168.200.107:~/x230-bios-* .
pi@192.168.200.107's password: 
x230-bios-bottom1.bin                                                                        100% 8192KB  10.8MB/s   00:00    
x230-bios-top1.bin                                                                           100% 4096KB  11.1MB/s   00:00

  2. Merge two files into one ROM file

    cat x230-bios-bottom1.bin x230-bios-top1.bin > x230-bios.rom

  3. move all rom files to ~/coreboot/ROM

    mkdir ~/coreboot/ROM
mv x230-* ~/coreboot/ROM

Extract Blobs from exracted ROM

user@my-coreboot:~/coreboot/ROM$ cd ~/coreboot/ROM
user@my-coreboot:~/coreboot/ROM$ ifdtool -x x230-bios.rom
File x230-bios-bottom1.bin is 8388608 bytes
  Flash Region 0 (Flash Descriptor): 00000000 - 00000fff 
  Flash Region 1 (BIOS): 00500000 - 00bfffff 
Error while writing: Success
  Flash Region 2 (Intel ME): 00003000 - 004fffff 
  Flash Region 3 (GbE): 00001000 - 00002fff 
  Flash Region 4 (Platform Data): 00fff000 - 00000fff (unused)

you will now find the following files:

user@my-coreboot:~/coreboot/ROM$ ls -la
total 36872
drwxr-xr-x  2 user user     4096 Apr  6 00:48 .
drwxr-xr-x 10 user user     4096 Apr  6 00:43 ..
-rw-r--r--  1 user user     4096 Apr  6 00:48 flashregion_0_flashdescriptor.bin
-rw-r--r--  1 user user  7340032 Apr  6 00:48 flashregion_1_bios.bin
-rw-r--r--  1 user user  5230592 Apr  6 00:48 flashregion_2_intel_me.bin
-rw-r--r--  1 user user     8192 Apr  6 00:48 flashregion_3_gbe.bin
-rw-r--r--  1 user user 12582912 Apr  6 00:30 x230-bios.bin
-rw-r--r--  1 user user  8388608 Apr  5 23:38 x230-bios-bottom1.bin
-rw-r--r--  1 user user  4194304 Apr  5 23:38 x230-bios-top1.bin

Extract VGA Blob

https://www.coreboot.org/VGA_support#UEFI_Method

cd ~/coreboot
sudo apt-get install qt5-default
git clone http://github.com/LongSoft/UEFITool.git
cd UEFITool
qmake
make

Start UEFITool

./UEFITool

File > Open BIOS Image File Open the ROM-file from the 4MB BIOS-Chip (x230-bios-top1.bin) or the merged ROM (x230-bios.bin)

will generate the following messages: "parseVolume: unknown file system FFF12B8D-7696-4C8B-A985-2747075B4F50 parseBios: volume size stored in header 61000h (397312) differs from calculated using block map 40000h (262144) parseVolume: unknown file system 00504624-8A59-4EEB-BD0F-6B36E96128E0 parseBios: volume size stored in header 2F000h (192512) differs from calculated using block map 30000h (196608) parseFile: invalid data checksum"

  • Hit CTRL+F (Search...), 3rd Tab (Text)
  • Search for: VGA Compatible BIOS (Uncheck Unicode)
  • Will show the following message in the lower part of the window: ASCII text "VGA Compatible BIOS" found in Raw section at offset 22h
  • Double click on the line in the message windows which bring you to the raw section
  • Right Click on "Raw section" and choose "Extract Body"
  • Save file as ~/coreboot/ROM/vga.rom

Configure and build Coreboot

  1. Launch Configuration menu

    cd ~/coreboot/
make nconfig

    Enter to open Submenu, Escape to switch back. F6 saves config to /home/user/coreboot/.config F9 quits config menu

    FIXME: needs more information about which options to choose and how to import the Blobs

  2. build coreboot using 7 from total 8 cores on my W540 (adapt this to your possibilities)

    make crossgcc-i386 CPUS=7
make iasl
make

Split coreboot ROM

after building coreboot you need to the 12mb file into a 4mb and 8mb file.

mkdir ~/coreboot/ROM-ready
# Split first 8MB of coreboot.rom (bottom-chip)
dd if=~/coreboot/build/coreboot.rom of=~/coreboot/ROM-ready/x230-coreboot-8mb.rom bs=1024 count=$[1024*8] skip=0

# Split last 4MB of coreboot.rom (top-chip)
dd if=~/coreboot/build/coreboot.rom of=~/coreboot/ROM-ready/x230-coreboot-4mb.rom bs=1024 count=$[1024*4] skip=$[1024*8]

Copy ROM to raspberry pi and flash

Transfer the two new ROM files over to the raspberry pi

scp x230-coreboot-* pi@192.168.200.107:~/

I have moved the coreboot-ROM files to a new directory ~/ROM-ready on the raspberry pi

Logon to the pi and flash both chips:

# write top chip (4MB)
pi@raspberrypi:~/ROM-ready $ sudo flashrom -p linux_spi:dev=/dev/spidev0.0,spispeed=1000 -c "MX25L3205D/MX25L3208D" -w x230-coreboot-4mb.rom 
flashrom p1.0-69-g3f7e341 on Linux 4.14.30-v7+ (armv7l)
flashrom is free software, get the source code at https://flashrom.org

Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
Found Macronix flash chip "MX25L3205D/MX25L3208D" (4096 kB, SPI) on linux_spi.
Reading old flash chip contents... done.
Erasing and writing flash chip... Erase/write done.
Verifying flash... VERIFIED.

# write bottom chip (8MB)
pi@raspberrypi:~/ROM-ready $ sudo flashrom -p linux_spi:dev=/dev/spidev0.0,spispeed=1000 -w x230-coreboot-8mb.rom 
flashrom p1.0-69-g3f7e341 on Linux 4.14.30-v7+ (armv7l)
flashrom is free software, get the source code at https://flashrom.org

Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
Found Eon flash chip "EN25QH64" (8192 kB, SPI) on linux_spi.
Reading old flash chip contents... done.
Erasing and writing flash chip... Erase/write done.
Verifying flash... VERIFIED.

Test drive

now it is time to cross fingers and try if you was able to flash coreboot. Remove the Pomodo-Clip, put your keyboard back, put your battery in and power on. In case you run into any problems, you can always reflash your stock rom.

From my older notes (FIXME!)

(this needs to be rewritten/updated to the above procedure)

--- on your raspberry pi ---

  1. Put External Flash Clip, female jumper cables and Raspberry pi together (kind of a lego thing)

  2. Install Raspberian on Pi using Noobs

  3. Update Pi and install additional packages including 'flashrom'

  4. take keyboard and palmrest of your "coreboot target laptop" (target) off to access the BIOS Chip(s)

  5. Connect the BIOS-Clip to BIOS-chips and read the content from your pi (x230-default-part2-4mb.rom / x230-default-part2-8mb.rom)

  6. merge the two files into one 12 MB ROM file (x230-default-12mb.rom)

--- on your build laptop ---

  1. Copy all three files to your "build laptop" (laptop) Build Laptop must run Linux, this howto assumes you are using Ubuntu 16.04.3 LTS (could also be installed on an USB thumbdrive or external harddrive)

  2. Download Coreboot from GIT

  3. Install UEFITool on laptop

  4. Extract VGA BLOB from the x230-default-12mb.rom file save the file in the coreboot/blobs directory (./coreboot/3rdparty/blobs/mainboard/lenovo/x230/pci8086,0166.rom)

  5. Build Coreboot Toolchain

  6. Compile ifdtool located in the coreboot/utils directory

  7. Extract BLOBS from x230-default-12mb.rom using ifdtool save the files in the coreboot/blobs directory (./coreboot/3rdparty/blobs/mainboard/lenovo/x230/descriptor.bin) (./coreboot/3rdparty/blobs/mainboard/lenovo/x230/me.bin) (./coreboot/3rdparty/blobs/mainboard/lenovo/x230/gbe.bin)

11b) [Optionally] Use ME_Cleaner on me.bin file ) (also it seems that ME_Cleaner is included in Coreboot: Coreboot nconfig: Chipset > Add Intel descriptor.bin file > Add Intel ME/TXE firmware --> Strip down the Intel ME/TXE firmware ) I've choosen to leave the me.bin as is until everything is working.

  1. Configure Coreboot (make nconfig) choose parameters/features and add the 4 binary blobs (step 8 and 11)

  2. build coreboot image (./coreboot/build/coreboot.rom)

  3. Split coreboot.rom into two separate files to flash them to your 2 chips (x230-coreboot-8mb.rom and x230-coreboot-4mb.rom)

  4. copy both files to your Raspberry Pi

--- on your Raspberry pi ---

  1. flash both files using flashrom again

  2. Reboot target laptop

  3. should boot up with coreboot.