[Libreboot] Getting full disk encryption (FDE) to work with Libreboot and *BSD

[Piotr Kubaj]

1. You need to use txt mode images. Maybe it's possible to use vesa
mode, but I haven't had a success with it.
2. You need to modify Libreboot images. Luckily, you don't need to patch
and recompile or modify options. You need to only remove GRUB-related
files from the image itself and add option ROM (you need to generate it
yourself, I just extract mine from my old Coreboot image).

Exact steps:
1. wget
https://libreboot.org/release/20160902/libreboot_r20160902_util.tar.xz

Download Libreboot utilites.

2. tar xvvf libreboot_r20160902_util.tar.xz

Extract Libreboot utilities.

3. wget
https://libreboot.org/release/20160902/rom/grub/libreboot_r20160902_grub_x200_8mb.tar.xz

Download latest Libreboot release. Change it appriopriately when there
are newer releases.
THIS IS FOR X200 WITH 8MB CHIP. PLEASE CHANGE IT APPRIOPRATELY OR YOU'LL
BREAK YOUR COMPUTER!

4. tar xvvf libreboot_r20160902_grub_x200_8mb.tar.xz

Extract lates Libreboot release.

5. mv libreboot_r20160902_grub_x200_8mb/x200_8mb_usqwerty_txtmode.rom
libreboot_r20160902_util/cbfstool/x86_64

I'm using US QWERTY keyboard. Please change it to the keyboard you have.
Bad keyboard won't break your computer but will be inconvenient to use.

6. libreboot_r20160902_util/cbfstool/x86_64

Again, I'm using x86_64. If you use i686 or armv7l, change it
appriopriately, or the program you need to run now won't run.

7. mv old.rom libreboot_r20160902_util/cbfstool/x86_64

This old.rom is my old Coreboot image which I need for options ROM. You
can copy options ROM alone if you have it.

8. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n grub.cfg

grub.cfg isn't harmful in any way but unnecessary.

9. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n grubtest.cfg

grubtest.cfg isn't harmful in any way but unnecessary.

10. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n img/grub2

img/grub2 is the payload which is loaded after SeaBIOS. This is necessary.

11 ./cbfstool old.rom extract -n pci8086,2a42.rom -f pci8086,2a42.rom

Extract options ROM from Coreboot image. If you have pci8086,2a42.rom
file, you don't need to do it.

12. ./cbfstool x200_8mb_usqwerty_txtmode.rom add -n pci8086,2a42.rom -f
pci8086,2a42.rom -t optionrom

Add options ROM to you Libreboot image.

13. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n etc/show-boot-menu

Remove etc/show-boot-menu file which make SeaBIOS not show its menu.





After that, reflash.

signature.asc
Description: OpenPGP digital signature