[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Libreboot] Getting full disk encryption (FDE) to work with Libreboot an
From: |
Piotr Kubaj |
Subject: |
[Libreboot] Getting full disk encryption (FDE) to work with Libreboot and *BSD |
Date: |
Mon, 5 Sep 2016 09:15:17 +0200 |
User-agent: |
Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 |
1. You need to use txt mode images. Maybe it's possible to use vesa
mode, but I haven't had a success with it.
2. You need to modify Libreboot images. Luckily, you don't need to patch
and recompile or modify options. You need to only remove GRUB-related
files from the image itself and add option ROM (you need to generate it
yourself, I just extract mine from my old Coreboot image).
Exact steps:
1. wget
https://libreboot.org/release/20160902/libreboot_r20160902_util.tar.xz
Download Libreboot utilites.
2. tar xvvf libreboot_r20160902_util.tar.xz
Extract Libreboot utilities.
3. wget
https://libreboot.org/release/20160902/rom/grub/libreboot_r20160902_grub_x200_8mb.tar.xz
Download latest Libreboot release. Change it appriopriately when there
are newer releases.
THIS IS FOR X200 WITH 8MB CHIP. PLEASE CHANGE IT APPRIOPRATELY OR YOU'LL
BREAK YOUR COMPUTER!
4. tar xvvf libreboot_r20160902_grub_x200_8mb.tar.xz
Extract lates Libreboot release.
5. mv libreboot_r20160902_grub_x200_8mb/x200_8mb_usqwerty_txtmode.rom
libreboot_r20160902_util/cbfstool/x86_64
I'm using US QWERTY keyboard. Please change it to the keyboard you have.
Bad keyboard won't break your computer but will be inconvenient to use.
6. libreboot_r20160902_util/cbfstool/x86_64
Again, I'm using x86_64. If you use i686 or armv7l, change it
appriopriately, or the program you need to run now won't run.
7. mv old.rom libreboot_r20160902_util/cbfstool/x86_64
This old.rom is my old Coreboot image which I need for options ROM. You
can copy options ROM alone if you have it.
8. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n grub.cfg
grub.cfg isn't harmful in any way but unnecessary.
9. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n grubtest.cfg
grubtest.cfg isn't harmful in any way but unnecessary.
10. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n img/grub2
img/grub2 is the payload which is loaded after SeaBIOS. This is necessary.
11 ./cbfstool old.rom extract -n pci8086,2a42.rom -f pci8086,2a42.rom
Extract options ROM from Coreboot image. If you have pci8086,2a42.rom
file, you don't need to do it.
12. ./cbfstool x200_8mb_usqwerty_txtmode.rom add -n pci8086,2a42.rom -f
pci8086,2a42.rom -t optionrom
Add options ROM to you Libreboot image.
13. ./cbfstool x200_8mb_usqwerty_txtmode.rom remove -n etc/show-boot-menu
Remove etc/show-boot-menu file which make SeaBIOS not show its menu.
After that, reflash.
signature.asc
Description: OpenPGP digital signature
- [Libreboot] Getting full disk encryption (FDE) to work with Libreboot and *BSD,
Piotr Kubaj <=