coreboot-kgpe-d16/src/security/vboot
Julius Werner 40acfe7f77 cbfs: Increase mcache size defaults
The CBFS mcache size default was eyeballed to what should be "hopefully
enough" for most users, but some recent Chrome OS devices have already
hit the limit. Since most current (and probably all future) x86 chipsets
likely have the CAR space to spare, let's just double the size default
for all supporting chipsets right now so that we hopefully won't run
into these issues again any time soon.

The CBFS_MCACHE_RW_PERCENTAGE default for CHROMEOS was set to 25 under
the assumption that Chrome OS images have historically always had a lot
more files in their RO CBFS than the RW (because l10n assets were only
in RO). Unfortunately, this has recently changed with the introduction
of updateable assets. While hopefully not that many boards will need
these, the whole idea is that you won't know whether you need them yet
at the time the RO image is frozen, and mcache layout parameters cannot
be changed in an RW update. So better to use the normal 50/50 split on
Chrome OS devices going forward so we are prepared for the eventuality
of needing RW assets again.

The RW percentage should really also be menuconfig-controllable, because
this is something the user may want to change on the fly depending on
their payload requirements. Move the option to the vboot Kconfigs
because it also kinda belongs there anyway and this makes it fit in
better in menuconfig. (I haven't made the mcache size
menuconfig-controllable because if anyone needs to increase this, they
can just override the default in the chipset Kconfig for everyone using
that chipset, under the assumption that all boards of that chipset have
the same amount of available CAR space and there's no reason not to use
up the available space. This seems more in line with how this would work
on non-x86 platforms that define this directly in their memlayout.ld.)

Also add explicit warnings to both options that they mustn't be changed
in an RW update to an older RO image.

BUG=b:187561710

Signed-off-by: Julius Werner <jwerner@chromium.org>
Change-Id: I046ae18c9db9a5d682384edde303c07e0be9d790
Reviewed-on: https://review.coreboot.org/c/coreboot/+/54146
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Angel Pons <th3fanbus@gmail.com>
Reviewed-by: Tim Wawrzynczak <twawrzynczak@chromium.org>
Reviewed-by: Aaron Durbin <adurbin@chromium.org>
2021-05-14 00:35:46 +00:00
..
antirollback.h security/vboot: Add new TPM NVRAM index MRC_RW_HASH_NV_INDEX 2020-10-20 23:25:50 +00:00
bootmode.c security/vboot/bootmode: Add weak fill_lb_gpios 2021-02-09 20:43:12 +00:00
common.c src/security: Remove unused <console/console.h> 2021-02-15 10:49:53 +00:00
ec_sync.c vboot: ec_sync: Switch to new CBFS API 2021-04-14 01:03:22 +00:00
Kconfig cbfs: Increase mcache size defaults 2021-05-14 00:35:46 +00:00
Makefile.inc security/vboot: Include fspt.bin in the RO region only 2021-05-04 21:31:47 +00:00
misc.h src/security: Drop unneeded empty lines 2020-09-21 16:26:17 +00:00
mrc_cache_hash_tpm.c mrc_cache: Add tpm_hash_index field to cache_region struct 2020-10-20 23:26:01 +00:00
mrc_cache_hash_tpm.h security/vboot: Make mrc_cache hash functions generic 2020-10-20 23:25:39 +00:00
secdata_mock.c security/vboot: Make mrc_cache hash functions generic 2020-10-20 23:25:39 +00:00
secdata_tpm.c security/vboot/secdata_tpm.c: Remove repeated word 2021-01-18 07:36:49 +00:00
symbols.h treewide: Remove "this file is part of" lines 2020-05-11 17:11:40 +00:00
tpm_common.c security: vboot: Clarify PCR extension algorithms/sizes 2021-03-30 21:07:56 +00:00
tpm_common.h treewide: Remove "this file is part of" lines 2020-05-11 17:11:40 +00:00
vbnv.c treewide: Remove "this file is part of" lines 2020-05-11 17:11:40 +00:00
vbnv.h treewide: Remove "this file is part of" lines 2020-05-11 17:11:40 +00:00
vbnv_cmos.c coreboot_table: Move VBOOT_VBNV support 2021-02-04 08:43:39 +00:00
vbnv_ec.c treewide: Remove "this file is part of" lines 2020-05-11 17:11:40 +00:00
vbnv_flash.c treewide: Remove "this file is part of" lines 2020-05-11 17:11:40 +00:00
vbnv_layout.h treewide: Remove "this file is part of" lines 2020-05-11 17:11:40 +00:00
vboot_common.c src: Remove unused 'include <boot_device.h>' 2020-08-18 12:15:10 +00:00
vboot_common.h cbfs: Add metadata cache 2020-11-21 10:43:53 +00:00
vboot_lib.c src: Change BOOL CONFIG_ to CONFIG() in comments & strings 2020-07-26 21:20:30 +00:00
vboot_loader.c cbfs: Remove prog_locate() for stages and rmodules 2021-03-16 21:45:34 +00:00
vboot_logic.c src: Add missing 'include <console/console.h>' 2020-11-17 09:01:14 +00:00
verstage.c verstage: Add debug print when returning from verstage 2021-04-06 07:49:43 +00:00