38c99b5659
coreboot uses TianoCore interchangeably with EDK II, and whilst the meaning is generally clear, it's not the payload it uses. EDK II is commonly written as edk2. coreboot builds edk2 directly from the edk2 repository. Whilst it can build some components from edk2-platforms, the target is still edk2. [1] tianocore.org - "Welcome to TianoCore, the community supporting" [2] tianocore.org - "EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and UEFI Platform Initialization (PI) specifications." Signed-off-by: Sean Rhodes <sean@starlabs.systems> Change-Id: I4de125d92ae38ff8dfd0c4c06806c2d2921945ab Reviewed-on: https://review.coreboot.org/c/coreboot/+/65820 Reviewed-by: Lean Sheng Tan <sheng.tan@9elements.com> Tested-by: build bot (Jenkins) <no-reply@coreboot.org> Reviewed-by: Angel Pons <th3fanbus@gmail.com>
4.6 KiB
Purism Librem 14
This page describes how to run coreboot on the Purism Librem 14.
+------------------+------------------------------------------------------+
| CPU | Intel Core i7-10710U |
+------------------+------------------------------------------------------+
| PCH | Comet Lake LP Premium (Comet Lake-U) |
+------------------+------------------------------------------------------+
| EC | ITE IT8528E |
+------------------+------------------------------------------------------+
| Coprocessor | Intel Management Engine (CSME 14.x) |
+------------------+------------------------------------------------------+
Required proprietary blobs
To build a minimal working coreboot image some blobs are required (assuming only the BIOS region is being modified).
+-----------------+---------------------------------+---------------------+
| Binary file | Apply | Required / Optional |
+=================+=================================+=====================+
| FSP-M, FSP-S | Intel Firmware Support Package | Required |
+-----------------+---------------------------------+---------------------+
| microcode | CPU microcode | Required |
+-----------------+---------------------------------+---------------------+
FSP-M and FSP-S are obtained after splitting the CometLake1 FSP binary
(done automatically by the coreboot build system and included into the
image) from the 3rdparty/fsp submodule.
Microcode updates are automatically included into the coreboot image by the
build system from the 3rdparty/intel-microcode submodule. Official Purism
release images may include newer microcode, which is instead pulled from
Purism's purism-blobs repository.
A VGA Option ROM is not required to boot, as the Librem 14 uses libgfxinit.
Intel Management Engine
The Librem 14 uses version 14.x of the Intel Management Engine (ME) / Converged Security Engine (CSE). The ME/CSE is disabled using the High Assurance Platform (HAP) bit, which puts the ME into a disabled state after platform bring-up (BUP) and disables all PCI/HECI interfaces. This can be verified checking the coreboot console log, using coreboot’s cbmem utility:
`sudo ./cbmem -1 | grep 'ME:'`
provided coreboot has been patched to output the ME status even when the PCI device is not visible/active (as it is in Purism's release builds).
Flashing coreboot
Internal programming
The main SPI flash can be accessed using flashrom. No official flashrom release supports the CometLake-U SoC yet, so it must be built from source. Version v1.2-107-gb1f858f or later is needed. Firmware an be easily flashed with internal programmer (either BIOS region or full image).
External programming
The system has an internal flash chip which is a 16 MiB soldered SOIC-8 chip, and has a diode attached to the VCC line for in-system programming. This chip is located on the bottom side of the board, in between the CPU heatsink and the left cooling fan, just above the left SO-DIMM slot.
One has to remove all 9 screws from the bottom cover, then disconnect the battery from the mainboard (bottom left of mainboard). Use a SOIC-8 chip clip to program the chip (a Gigadevice GD25Q127C (3.3V) - datasheet).
The EC firmware is stored on a separate SOIC-8 chip (a Gigadevices GD25Q80C), located underneath the Wi-Fi module, below the left cooling fan.
Known issues
- Automatic detection of external audio input/output via the 3.5mm jack does not currently work.
- PL1/PL2 limited to 15W/20W by charger and battery discharge capability, not SoC or thermal design.
Working
- Internal display with libgfxinit, VGA option ROM, or FSP/GOP init
- External displays via HDMI, USB-C Alt-Mode
- SeaBIOS (1.14), edk2 (CorebootPayloadPkg), and Heads payloads
- Ethernet, m.2 2230 Wi-Fi
- System firmware updates via flashrom
- M.2 storage (NVMe, SATA III)
- Built-in audio (speakers, microphone)
- SMBus (reading SPD from DIMMs)
- Initialization with FSP 2.0 (CometLake1)
- S3 Suspend/Resume
- Booting PureOS 10.x, Debian 11.x, Qubes 4.0.4, Windows 10 20H2
Not working / untested
- N/A