Re: [Libreboot] Getting full disk encryption (FDE) to work with Libreboot and *BSD

[Piotr Kubaj]

I'm not sure what you mean by that this is proprietary software. Option
ROM is generated during SeaBIOS compilation.

Note that the Coreboot image I've extracted my option ROM was generated
with sources from https://www.coreboot.org/releases/coreboot-4.4.tar.xz
and WITHOUT proprietary files in
https://www.coreboot.org/releases/coreboot-blobs-4.4.tar.xz

SeaBIOS even has an option tree titled "VGA ROM"...

On 09/05/16 09:43, Leah Rowe wrote:
> I'm not sure what happened since you are a non-member. I have therefore
> subscribed you but set the moderation bit. I'm the only moderator so
> this should be fine.
> 
> On 05/09/16 08:38, Leah Rowe wrote:
>> Hi Piotr,
>>
>> I'm confused, what is the option ROM you mention and where does it come
>> from? Is it free or non-free? (if the latter, then you shouldn't be
>> posting such things on this list)
>>
>> address@hidden:~$ lspci -nnnn | grep 8086:2a42
>> 00:02.0 VGA compatible controller [0300]: Intel Corporation Mobile 4
>> Series Chipset Integrated Graphics Controller [8086:2a42] (rev 07)
>>
>> This is on my system, but I' m booting libreboot 2016092 with GNU/Linux.
>> You are telling people to "generate" it but what you really mean is to
>> tell people to extract the proprietary Video BIOS option ROM and use
>> that. You are advocating non-free software on a GNU mailing list. I am
>> therefore revoking your access to the GNU Libreboot mailing list.
>>
>> On 05/09/16 08:15, Piotr Kubaj wrote:
>>> 1. You need to use txt mode images. Maybe it's possible to use vesa
>>> mode, but I haven't had a success with it.
>>> 2. You need to modify Libreboot images. Luckily, you don't need to patch
>>> and recompile or modify options. You need to only remove GRUB-related
>>> files from the image itself and add option ROM (you need to generate it
>>> yourself, I just extract mine from my old Coreboot image).
>>>
>>> Exact steps:
>>> 1. wget
>>> https://libreboot.org/release/20160902/libreboot_r20160902_util.tar.xz
>>>
>>> Download Libreboot utilites.
>>>
>>> 2. tar xvvf libreboot_r20160902_util.tar.xz
>>>
>>> Extract Libreboot utilities.
>>>
>>> 3. wget
>>> https://libreboot.org/release/20160902/rom/grub/libreboot_r20160902_grub_x200_8mb.tar.xz
>>>
>>> Download latest Libreboot release. Change it appriopriately when there
>>> are newer releases.
>>> THIS IS FOR X200 WITH 8MB CHIP. PLEASE CHANGE IT APPRIOPRATELY OR YOU'LL
>>> BREAK YOUR COMPUTER!
>>>
>>> 4. tar xvvf libreboot_r20160902_grub_x200_8mb.tar.xz
>>>
>>> Extract lates Libreboot release.
>>>
>>> 5. mv libreboot_r20160902_grub_x200_8mb/x200_8mb_usqwerty_txtmode.rom
>>> libreboot_r20160902_util/cbfstool/x86_64
>>>
>>> I'm using US QWERTY keyboard. Please change it to the keyboard you have.
>>> Bad keyboard won't break your computer but will be inconvenient to use.
>>>
>>> 6. libreboot_r20160902_util/cbfstool/x86_64
>>>
>>> Again, I'm using x86_64. If you use i686 or armv7l, change it
>>> appriopriately, or the program you need to run now won't run.
>>>
>>> 7. mv old.rom libreboot_r20160902_util/cbfstool/x86_64
>>>
>>> This old.rom is my old Coreboot image which I need for options ROM. You
>>> can copy options ROM alone if you have it.
>>>
>>> 8. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n grub.cfg
>>>
>>> grub.cfg isn't harmful in any way but unnecessary.
>>>
>>> 9. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n grubtest.cfg
>>>
>>> grubtest.cfg isn't harmful in any way but unnecessary.
>>>
>>> 10. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n img/grub2
>>>
>>> img/grub2 is the payload which is loaded after SeaBIOS. This is necessary.
>>>
>>> 11 ./cbfstool old.rom extract -n pci8086,2a42.rom -f pci8086,2a42.rom
>>>
>>> Extract options ROM from Coreboot image. If you have pci8086,2a42.rom
>>> file, you don't need to do it.
>>>
>>> 12. ./cbfstool x200_8mb_usqwerty_txtmode.rom add -n pci8086,2a42.rom -f
>>> pci8086,2a42.rom -t optionrom
>>>
>>> Add options ROM to you Libreboot image.
>>>
>>> 13. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n etc/show-boot-menu
>>>
>>> Remove etc/show-boot-menu file which make SeaBIOS not show its menu.
>>>
>>>
>>>
>>>
>>>
>>> After that, reflash.
>>>
>>
>