[coreboot] Can't sleep/power down after flashing coreboor
Hello, I am running Coreboor on my X230 which has Windows 10 and Qubes OS installed. After some issues I was able to run both OSes encrypted and all devices (WiFi/WWAN/...) are working under coreboot. (in Qubes and Windows). Today I found out that I am unable to shutdown or put my laptop to sleep in under Qubes/Linux. It was working before and it is also working under windows (currently). Do you have any idea where to look for a root cause why Linux can't be shutdown. If I try it, the screen will go blank but the system stays up and running. I tried closing the lid and also a shutdown -h now. Regards [799] -- coreboot mailing list: coreboot@coreboot.org https://mail.coreboot.org/mailman/listinfo/coreboot
[coreboot] Coreboot X230 Howto and Questions regarding GRUB and Qubes
Hello, I finally found the time to complete the first draft of my Coreboot x230 How-to. While I need to fill in some small gaps how to put the hardware parts together, all the other stuff is covered including extracting Blobs and vga.rom. The how-to is located here: https://github.com/Qubes-Community/Contents/blob/master/docs/coreboot/x230.md The coreboot config I have used is here: https://github.com/Qubes-Community/Contents/blob/master/docs/coreboot/x230-configfile I wrote the how-to as I need to look at several places to get everything together for example how to extract Blobs, how to merge two bios files into one etc. Having everything in one place is nice for a newbie if he owns exactly the same modell/x230. Questions: 1) Lots of info is spread in the Coreboot und Qubes Mailinglists, is there anything in Coreboot which is Qubes specific and which should be mentioned in the how-to? Someone one mentioned Anti-Evil-Maid-Protection might be an issue. 2) Also I'd like to include some information about SeaBIOS vs. GRUB. As far as I know the benefit of SeaBIOs is that it is possible to boot Windows (needing vga.rom etc.) and the benefit of grub is to be able to encrypt /boot. What would be the best practise configuration if a user is running Qubes OS as only Operating system? Are there any downsizes running an encrypted boot partition? 3) I have attached the config which was generated after running make nconfig. I'd like to see someone with more skills giving some hints about which are not really necessary when running a Qubes as the only Operating system. How-to was placed on GitHub so that it can be used/edited by everyone, if useful feel free to grab content for the Coreboot wiki. I just like to use GitHub as collaborative documentation hub ;-) [799] -- coreboot mailing list: coreboot@coreboot.org https://mail.coreboot.org/mailman/listinfo/coreboot
[coreboot] X230 Corebooted -> resume broken
Hello, I have coreboot'ed my Lenovo X230 a while ago and run it with SeaBIOS as I needed a DualBoot Setup (Qubes OS + Win 10). After I had issues with standby/resume I decided to delete windows and run a Qubes OS only setup. in order to troublesshoot the problems with standby/resume, I decided to reflash the stock rom and reinstalled Qubes from scratch. Unfortunately it seems that the problem with standby is still there: If I close the lid, the laptop shuts off. It seems that it doesn't run a real clean shutdown as the shutdown is way to fast. Question: Could it be that something "broke" internally while flashing/reflashing Coreboot? Where can I start troubleshooting? I have already reset my BIOS to factory defaults - problem is still there: Close the laptop lid -> laptop goes off within.3sec. [799] -- Qubes 4rc3 + Coreboot > Lenovo X230 Qubes 4rc4 > Lenovo W540-- coreboot mailing list: coreboot@coreboot.org https://mail.coreboot.org/mailman/listinfo/coreboot
Re: [coreboot] Microcode updates for slightly older intel CPU's re: meltdown/spectre
Hello, Off-topic: Top-posted as Protonmail Android App is still unable to correctly use inline answers without correct quote layout/line breaks. Bug has been reported months ago :-/ Taiidan wrote: "(...) CPU'swithout a fix there will be only one coreboot compatible laptop with open source hardware initiation that is remotely secure (...)" Currently I am using two laptops for my work setup: A 12.5" Lenovo X230 and a 15.x" Lenovo W540 both machines are running with Qubes OS 4rc3 and 16GB RAM. The W540 is a Dual-Boot system with Win10, the x230 is running Coreboot. Honestly I am shocked and angry if there will be no Intel Updates for the X230 and W540. On the other hand, if I am running Qubes and Coreboot, wouldn't this reduce the risk of Meltdown/Spectre attacks as Coreboot will protect me against remote attacks (stripped down AMT/Intel ME) and Qubes might reduce the attack surface as I am using several VMs and DVMs for browsing? If I compare the Lenovo X230 to Lenovo G505s this looks like a step back: the G505s is targeted at another audience that Lenovo ThinkPad Users. It looks to me like an entry level desktop, which is also very bulky (without the additional performance of a W540). CPU comparison X230 CPU vs G505s http://www.cpu-world.com/Compare/725/AMD_A6-Series_for_Notebooks_A6-5350M_vs_Intel_Core_i5_Mobile_i5-3360M_(BGA).html Also the G505s has less cores/no HT Frustration. Can't "we" build one or maybe two crowd founded secure Laptops (12", 15.x") with reasonable specs, good keyboard, hardware kill switches, internal wan (kill-switchable)? I can't think that choice is limited in 2018 to only 1 (in words "one") laptop modell, which is no nearly 5 years old (08/2013). Brave new world. [799] Gesendet von ProtonMail mobile Original-Nachricht An 11. Jan. 2018, 03:55, taii...@gmx.com schrieb: > I am curious of any intel insiders know if there will be microcode > updates released for older intel CPU's (ex: sandy/ivybridge) and failing > that, what can be done in regards to securing them from meltdown/spectre. > > I believe this is a relevant coreboot topic considering how many > coreboot boards have these and older CPU'swithout a fix there will > be only one coreboot compatible laptop with open source hardware > initiation that is remotely secure (lenovo g505s as has a pre-PSP AMD > CPU) and theoretically owner controllable (as the previous C2D/C2Q's > such as the X200 are now permanently insecure without intervention from > intel apparently) > > At this point even a massive performance loss is better than having to > throw out so much now-useless hardware. > > -- > coreboot mailing list: coreboot@coreboot.org > https://mail.coreboot.org/mailman/listinfo/coreboot-- coreboot mailing list: coreboot@coreboot.org https://mail.coreboot.org/mailman/listinfo/coreboot
Re: [coreboot] T430 fan control
Hello David, >> however it seems the fan control does not >> work for me. The fan spins but at a low >> speed, and does not increase even if I run a >> stresstest like 'stress --cpu 4'. Maybe you try to install tlp in dom0: http://linrunner.de/en/tlp/docs/tlp-linux-advanced-power-management.html I am installing powertop and tlp on all my Linux Laptops. In dom0: sudo qubes-dom0-update tlp powertop [799]-- coreboot mailing list: coreboot@coreboot.org https://mail.coreboot.org/mailman/listinfo/coreboot
[coreboot] 2nd attempt: Coreboot + Windows (with Resume working)
Hello, I had to reflash my stock original BIOS after I couldn't get Sleep&Resume working on my Lenovo X230. I am in a situation where I was able to get 2 situations: 1) Situation 1: working sleep+resume in Linux. Additional Payloads works. Booting into windows (I have a dual boot setup) results in a black screen (no video output) 2) Situation 2: Extracting the BLOBs from the original ROM and adding them to my Coreboot Bios and using SeaBIOS I was able to boot into windows with graphics. Unfortunately this breaks: - Sleep & Resume - additional Payloads won't work As I really need to get sleep & resume working an I also want to be able to boot into windows for special use cases (business) I want to rebuild Coreboot from scratch. Unfortunately I did so several times, no results. I don't think that the Use Case "Coreboot + Windows + Sleep Resume" is so uncommon and would like to hear if someone has a running setup and what you did to make it work. Giving up sleep/resume to get the additional freedom of Coreboot is a big trade-off. Regards [799]-- coreboot mailing list: coreboot@coreboot.org https://mail.coreboot.org/mailman/listinfo/coreboot
Re: [coreboot] X230 coreboot potential issues?
Hello Hans, On 27.10.2017 22:10, Hans Fritz wrote: > Hi, I installed coreboot on my X230, > it works very well Would you mind sharing the configuration setting you have chosen? I am still struggling getting a good Coreboot Config for my X230 which will support Linux and Windows (SeaBIOS). Currently Resume is not working and I can't switch of my laptop by software. Regards [799]-- coreboot mailing list: coreboot@coreboot.org https://mail.coreboot.org/mailman/listinfo/coreboot
Re: [coreboot] Recommendation for Flashing Clips / mass order
Hello Trammel, >> (I was considering setting up a monthly subscription of SOIC-8 clips, >> although now I need to add the SOIC-16 to my list) I like that idea, I think I'll just choose a cheap one and in case it breaks I just use another one. Still a shame, that no one is building a "premium" clip. The cheapiest one I found: [http://www.ebay.de/itm/SOIC-8-SOP8-8-Pin-Test-Clip-Test-Clamp-Testing-Programmer-IC-For-BIOS-24-25-93/272632155108](http://www.ebay.de/itm/SOIC-8-SOP8-8-Pin-Test-Clip-Test-Clamp-Testing-Programmer-IC-For-BIOS-24-25-93/272632155108?_trkparms=aid%3D222007%26algo%3DSIM.MBE%26ao%3D1%26asc%3D20160908110712%26meid%3D01712e170bc841eca7496cbaf7293721%26pid%3D100677%26rk%3D1%26rkt%3D22%26sd%3D332144761986&_trksid=p2385738.c100677.m4598) => 1,99 Euro no shipping costs, WTF? [799]-- coreboot mailing list: coreboot@coreboot.org https://mail.coreboot.org/mailman/listinfo/coreboot
[coreboot] Recommendation for Flashing Clips / mass order
Hello, after learning about Coreboot and how to flash, my cheap flashing clip stopped working. Do you have any recommendations if it makes sense to invest a bit more budget and buy a more expensive clip or will the quality be the same? The Pomona 5250 Clip: https://www.tme.eu/gb/details/pom-5250/test-clips/pomona/5250/ As getting the Clip and attaching the wires to it and then attach those to the Raspberry Pi, has someone thought about ordering some more and offer preconfigured Coreboot Kits maybe also through the Coreboot website with additional costs to support the Coreboot project. Unique selling point: add some stickers :-) Seriously I would be happy if I could save my time to get all the parts together and if I could get a prebuild "flashing kit" I would have bought it. [799]-- coreboot mailing list: coreboot@coreboot.org https://mail.coreboot.org/mailman/listinfo/coreboot
