Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

WIP xx30/Haswell+ TXT support, IBB CPU anchored RoT through ACM blobs? #1172

Draft
wants to merge 1 commit into
base: master
Choose a base branch
from
Draft

WIP xx30/Haswell+ TXT support, IBB CPU anchored RoT through ACM blobs? #1172

wants to merge 1 commit into from

Commits on Aug 23, 2022

  1. WIP ACM BIOS and ACM init recognized. TXT-STS: IBB not measured (Ivy … 

    …can't. Broadwell+ can)

- Update coreboot target to that it includes coreboot 4.17
- Addition of blobs/xx30/download_extract_acm.sh
  - Downloads SINIT ACM blob from an archive.org copy of the archive
  - Downloads Latest BIOS from Lenovo and extracts the ACM BIOS from there
- Add a x230-hotp-maximized-acm board config based on coreboot 4.17
  - coreboot config includes SINIT and ACM blobs
- CircleCI modifications
  - Add unzip in apt packages requirements
  - Added a step into CircleCI which calls blobs/xx30/download_extract_acm.sh to have blobs
  - Add x230-hotp-maximized-ac builds

Todos:
- txt_bios_policy.bin not present under CBFS (Not required up until Intel gen 10 for Bootguard)
- IBB not existing concept, so cannot include bootblock (goal of this inclusion if ACM blobs were desired/tolerated)

This is building block for TXT (DRTM) under Heads.
    @tlaurion
    tlaurion committed Aug 23, 2022
    Configuration menu
    Copy the full SHA
    df4bcbc View commit details
    Browse the repository at this point in the history