Commit Graph

59588 Commits

Author SHA1 Message Date
Filip Lewiński 5af71c8b8a mb/nuc_box/: shrink ME region for consumer bin. in FMAP
After switching from Corporate to Consumer CSME, the ME binary shrunk.
This allows to reclaim some free space in the FMAP by shrinking the
region.

Upstream-Status: Pending
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
novacustom_nuc_box_v0.9.2-rc1
2026-05-25 15:06:21 +02:00
Filip Lewiński 86bf5adde7 3rdparty/dasharo-blobs: update NUC BOX ME
Update to latest CSME 18.1.18.2724_v5 for Meteor Lake H/U

Upstream-Status: Inappropriate [Dasharo downstream]
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-25 15:06:15 +02:00
Filip Lewiński 5d637435dd mb/novacustom/nuc_box: use if (CONFIG()) for SMBIOS guard
get_smbios_data is unconditionally present in struct device_operations,
so a preprocessor guard is not needed. Replace #if CONFIG() / #endif
with if (CONFIG()) so the compiler checks both branches.

Upstream-Status: Pending
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:55 +02:00
Filip Lewiński 4755d1cdea sbom: simplify wildcard dependency assignments
$(wildcard ...) already returns an empty string when the path does not
exist, so the $(if $(wildcard ...),x,) wrapper is redundant. Replace
both payload-swid-ready-dep and ipxe-swid-ready-dep assignments with
a plain $(wildcard ...) call.

Upstream-Status: Pending
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:55 +02:00
Filip Lewiński 467162060e security/intel/cbnt/measurement: fix GCC 13 flex-array build failure
GCC 13 promotes -Wflex-array-member-not-at-end to an error. The
bpm_ibbs and bpm_ibbs_bottom structs contain hash_struct members with
flexible arrays that are not at the end of their containing struct.
Their layout is fixed by the CBnT hardware specification and cannot
be reordered.

Suppress the diagnostic with a pragma guard around the affected struct
definitions. These hash_struct fields are deprecated since CBnT BWG
v1.2.0 and are always written with size=0 (no payload bytes).

Upstream-Status: Pending
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:55 +02:00
Filip Lewiński bf1e9bb4b5 build.sh: fix GOCACHE permissions when building with GH actions
Move the mountpoint to /tmp, where permissions should not be a an issue.

Upstream-Status: Inappropriate [Dasharo CI]
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:55 +02:00
Michał Żygowski ef922fa08d build.sh: Fix permissions when building with GH actions
The GH runners have UID 1001, while user coreboot in SDK has id 1000.
This creates a mismatch of IDs and causes permission problems when
mounting coreboot git repository under /home/coreboot/coreboot in the
container, because the /home/coreboot is a HOME directory of different
user.

To fix the problem, move the mountpoint to a "neutral" place, where
permissions should not be a an issue. The /build directory is chosen
so that it does not collide with any HOME directory or system directory.

Upstream-Status: Inappropriate [Dasharo CI]
Signed-off-by: Michał Żygowski <michal.zygowski@3mdeb.com>
2026-05-21 13:01:55 +02:00
Filip Lewiński 63ade56688 build.sh: bump DASHARO_SDK up to v1.9.0
Required to build with SBOM support, otherwise go is missing

Upstream-Status: Inappropriate [Dasharo downstream]
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:55 +02:00
Filip Lewiński 548c735feb mb/novacustom/nuc_box: move GPIO init to ramstage, fix s0ix compat
Move mainboard_configure_gpios() from bootblock_mainboard_early_init()
to mainboard_init() in ramstage. GPIO configuration does not need to
run before DRAM is available and the full device tree context is
present.

Disable USE_LEGACY_8254_TIMER (required for s0ix/modern standby
compatibility) and normalize SIO printk messages to a consistent
"SIO: <action> (LDNx)" format. Inline the half_populated constant
in the memcfg_init() call.

Upstream-Status: Pending
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:55 +02:00
Filip Lewiński 6d55de34cb configs/config.novacustom_nuc_box: bump to v0.9.2-rc1
Upstream-Status: Inappropriate [Dasharo downstream]
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:54 +02:00
Filip Lewiński 38a411aafb mb/novacustom/nuc_box: Bump Energy Performance Preference to 45%
Improve performance by lowering the EPP value from the power-on default
of 0xb3 (70%) to 0x73 (45%). Lower value = higher performance.

Upstream-Status: Pending
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:54 +02:00
Filip Lewiński 718453e341 mb/novacustom/nuc_box: enable debug SMI
Enable debug SMI, which works around issue Dasharo/dasharo-issues#1664.

This is a workaround and should be removed once a proper solution to the
issue is found.

Upstream-Status: Inappropriate [Dasharo downstream]

Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:54 +02:00
Filip Lewiński 3013a9787c mb/novacustom/nuc_box/ramstage.c: Generate SMBIOS table with ME FWSTS
Upstream-Status: Pending
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:54 +02:00
Filip Lewiński 969b19c049 mb/novacustom/nuc_box/: increase SMMSTORE size to 512K
Because UEFI DBX keeps growing in size, and we have a lot of UEFI
variables, we've run into an issue where there's not enough free space
to update the DBX. Increase the SMMSTORE region to 512K to mitigate this
issue.

Upstream-Status: Pending
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:54 +02:00
Filip Lewiński 2b1c46a77e mb/novacustom/nuc_box/acpi/sleep.asl: fix USB S3 wake
Fixes ACPI code for proper S3 handling and USB wake enablement

Upstream-Status: Pending
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:54 +02:00
Filip Lewiński 761014e0de mb/novacustom/nuc_box/dsdt.asl: fixes for ghost PS/2 and USB wake
Upstream-Status: Pending
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:54 +02:00
Filip Lewiński 4976b49356 mb/novacustom/nuc_box/devicetree.cb: move TPM inside domain 0
Fixes the TPM2 recognition in Windows by ensuring consistent
ACPI device path reconstruction

Upstream-Status: Pending
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:54 +02:00
Filip Lewiński ef2f3db455 src/sbom/Makefile.mk: fix parallel build races
Fixes the build-time dependencies to elliminate race conditions
preparing SBOM in a parallel build. SBOM is generated only when all
components are in place, and doesn't trigger any cloning/rebuilds.

Upstream-Status: Pending
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:54 +02:00
Filip Lewiński df5c1d4774 configs/config.novacustom_nuc_box: enable SBOM, v0.9.1-rc1
Upstream-Status: Inappropriate [Dasharo downstream]
Signed-off-by: Filip Lewiński <filip.lewinski@3mdeb.com>
2026-05-21 13:01:54 +02:00
Michał Kopeć 5e4b1fc188 3rdparty/dasharo-blobs: Bump for vault_jsl x2 NVMe fix
Upstream-Status: Inappropriate [Dasharo downstream]
Change-Id: Id4859240606845a414524715ee31628df20820a5
Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
2026-05-12 15:56:06 +02:00
Michał Kopeć 3ba5f2a65a src/mainboard/protectli/vault_jsl/override_v1*: adjust for x2 SSD bifurcation and lane reversal
New FD blobs have changed SPA setting such that:
- SATA is disabled
- Lane reversal is enabled
- 2x2 or 1x2 + 2x1 bifurcation is configured

This way, the SSD always lands on root port 1 and gets 2 lanes, and
subsequent devices on lanes 2,3 of SPA get allocated either an x1 or x2
link depending on board.

Upstream-Status: Pending
Change-Id: Ibd007334d09872baf7781ad2887212f4f847fc9b
Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
2026-05-12 14:55:05 +02:00
Michał Kopeć ec9ad862aa Revert "mb/protectli/vault_jsl/override_v12xx.cb: Move NVMe disk to RP 1c.3"
Upstream-Status: Pending
This reverts commit d6ea878717.

Change-Id: Ib03236a19b3be63e8ffe8fd60c6da75eb4dcebe9
2026-05-12 14:53:15 +02:00
Michał Kopeć 9989ff4959 Revert "mb/protectli/vault_jsl/override_v14xx.cb: Move NVMe disk to RP 1c.3"
Upstream-Status: Pending
This reverts commit 4a4006b1df.

Change-Id: Id6c783ab69732c39fc7827ce4fd1884ba1aa5367
2026-05-12 14:53:06 +02:00
Michał Kopeć 1371f058a6 Revert "mb/protectli/vault_jsl/override_v1610.cb: Move NVMe disk to RP 1c.3"
Upstream-Status: Pending
This reverts commit 0aa1b5885e.

Change-Id: I1dc7d9017d3a6790f6878643816f033552551cc3
2026-05-12 14:52:52 +02:00
Filip Gołaś bffd7d5181 vault_cml/mainboard.c: printk WARNING instead of die on invalid VP4651 emmc config
Signed-off-by: Filip Gołaś <filip.golas@3mdeb.com>
2026-04-28 12:59:26 +02:00