Re: [Libreboot] Getting full disk encryption (FDE) to work with Libreboot and *BSD

[Leah Rowe]

I'm not sure what happened since you are a non-member. I have therefore
subscribed you but set the moderation bit. I'm the only moderator so
this should be fine.

On 05/09/16 08:38, Leah Rowe wrote:
> Hi Piotr,
> 
> I'm confused, what is the option ROM you mention and where does it come
> from? Is it free or non-free? (if the latter, then you shouldn't be
> posting such things on this list)
> 
> address@hidden:~$ lspci -nnnn | grep 8086:2a42
> 00:02.0 VGA compatible controller [0300]: Intel Corporation Mobile 4
> Series Chipset Integrated Graphics Controller [8086:2a42] (rev 07)
> 
> This is on my system, but I' m booting libreboot 2016092 with GNU/Linux.
> You are telling people to "generate" it but what you really mean is to
> tell people to extract the proprietary Video BIOS option ROM and use
> that. You are advocating non-free software on a GNU mailing list. I am
> therefore revoking your access to the GNU Libreboot mailing list.
> 
> On 05/09/16 08:15, Piotr Kubaj wrote:
>> 1. You need to use txt mode images. Maybe it's possible to use vesa
>> mode, but I haven't had a success with it.
>> 2. You need to modify Libreboot images. Luckily, you don't need to patch
>> and recompile or modify options. You need to only remove GRUB-related
>> files from the image itself and add option ROM (you need to generate it
>> yourself, I just extract mine from my old Coreboot image).
>>
>> Exact steps:
>> 1. wget
>> https://libreboot.org/release/20160902/libreboot_r20160902_util.tar.xz
>>
>> Download Libreboot utilites.
>>
>> 2. tar xvvf libreboot_r20160902_util.tar.xz
>>
>> Extract Libreboot utilities.
>>
>> 3. wget
>> https://libreboot.org/release/20160902/rom/grub/libreboot_r20160902_grub_x200_8mb.tar.xz
>>
>> Download latest Libreboot release. Change it appriopriately when there
>> are newer releases.
>> THIS IS FOR X200 WITH 8MB CHIP. PLEASE CHANGE IT APPRIOPRATELY OR YOU'LL
>> BREAK YOUR COMPUTER!
>>
>> 4. tar xvvf libreboot_r20160902_grub_x200_8mb.tar.xz
>>
>> Extract lates Libreboot release.
>>
>> 5. mv libreboot_r20160902_grub_x200_8mb/x200_8mb_usqwerty_txtmode.rom
>> libreboot_r20160902_util/cbfstool/x86_64
>>
>> I'm using US QWERTY keyboard. Please change it to the keyboard you have.
>> Bad keyboard won't break your computer but will be inconvenient to use.
>>
>> 6. libreboot_r20160902_util/cbfstool/x86_64
>>
>> Again, I'm using x86_64. If you use i686 or armv7l, change it
>> appriopriately, or the program you need to run now won't run.
>>
>> 7. mv old.rom libreboot_r20160902_util/cbfstool/x86_64
>>
>> This old.rom is my old Coreboot image which I need for options ROM. You
>> can copy options ROM alone if you have it.
>>
>> 8. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n grub.cfg
>>
>> grub.cfg isn't harmful in any way but unnecessary.
>>
>> 9. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n grubtest.cfg
>>
>> grubtest.cfg isn't harmful in any way but unnecessary.
>>
>> 10. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n img/grub2
>>
>> img/grub2 is the payload which is loaded after SeaBIOS. This is necessary.
>>
>> 11 ./cbfstool old.rom extract -n pci8086,2a42.rom -f pci8086,2a42.rom
>>
>> Extract options ROM from Coreboot image. If you have pci8086,2a42.rom
>> file, you don't need to do it.
>>
>> 12. ./cbfstool x200_8mb_usqwerty_txtmode.rom add -n pci8086,2a42.rom -f
>> pci8086,2a42.rom -t optionrom
>>
>> Add options ROM to you Libreboot image.
>>
>> 13. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n etc/show-boot-menu
>>
>> Remove etc/show-boot-menu file which make SeaBIOS not show its menu.
>>
>>
>>
>>
>>
>> After that, reflash.
>>
> 

-- 
Leah Rowe

Libreboot developer

Use free software. Free as in freedom.
https://www.gnu.org/philosophy/free-sw.html

Use a free operating system, GNU/Linux.
https://www.gnu.org/

Use a free BIOS.
https://libreboot.org/

Support freedom. Join the Free Software Foundation.
https://fsf.org/

Minifree Ltd, trading as Ministry of Freedom | Registered in England,
No. 9361826 | VAT No. GB202190462
Registered Office: 19 Hilton Road, Canvey Island, Essex SS8 9QA, UK |
Web: http://minifree.org/

signature.asc
Description: OpenPGP digital signature