Merge pull request #893 from Dasharo/v1210-relnotes

docs/variants/protectli_v1000-series/releases.md: add v1210 v0.9.3 re…

.codespellrc

@@ -1,3 +1,3 @@
 [codespell]
 exclude-file = .codespellx
-ignore-words-list = "FPT,FTP,fpt,ftp,Compex,compex,dout,doubt"
+ignore-words-list = "FPT,FTP,fpt,ftp,Compex,compex,dout,doubt,HDA,HAD,hda,had"

.codespellx

@@ -2,3 +2,7 @@
   linux /boot/vmlinuz-4.15.0-115-generic ro quiet iomem=relaxed
 dout
 doubt
+HDA
+HAD
+hda
+had

docs/variants/protectli_v1000-series/openness-score.md

@@ -0,0 +1,94 @@
+# Dasharo Openness Score
+
+This page contains the [Dasharo Openness
+Score](../../glossary.md#dasharo-openness-score) for Protectli V1000 series
+Dasharo releases. The content of the page is generated with [Dasharo Openness
+Score utility](https://github.com/Dasharo/Openness-Score).
+
+## v0.9.3
+
+> V1410 is very similar to V1210, thus the Openness Score for V1410 is not
+> generated, as is considered to be either identical or contain neglectable
+> differences compared to V1210.
+
+Openness Score for protectli_v1210_v0.9.3.rom
+
+Open-source code percentage: **20.2%**
+Closed-source code percentage: **79.8%**
+
+* Image size: 16777216 (0x1000000)
+* Number of regions: 10
+* Number of CBFSes: 2
+* Total open-source code size: 2321346 (0x236bc2)
+* Total closed-source code size: 9190838 (0x8c3db6)
+* Total data size: 475996 (0x7435c)
+* Total empty size: 4789036 (0x49132c)
+
+![](protectli_v1210_v0.9.3.rom_openness_chart.png)
+
+![](protectli_v1210_v0.9.3.rom_openness_chart_full_image.png)
+
+> Numbers given above already include the calculations from CBFS regions
+> presented below
+
+### FMAP regions
+
+| FMAP region | Offset | Size | Category |
+| ----------- | ------ | ---- | -------- |
+| SI_ME | 0x1000 | 0x7ff000 | closed-source |
+| SI_DESC | 0x0 | 0x1000 | data |
+| SMMSTORE | 0x800000 | 0x40000 | data |
+| RW_MRC_CACHE | 0x840000 | 0x10000 | data |
+| CONSOLE | 0x850000 | 0x20000 | data |
+| FMAP | 0x970000 | 0x1000 | data |
+
+### CBFS BOOTSPLASH
+
+* CBFS size: 1048576
+* Number of files: 1
+* Open-source files size: 0 (0x0)
+* Closed-source files size: 0 (0x0)
+* Data size: 28 (0x1c)
+* Empty size: 1048548 (0xfffe4)
+
+> Numbers given above are already normalized (i.e. they already include size
+> of metadata and possible closed-source LAN drivers included in the payload
+> which are not visible in the table below)
+
+| CBFS filename | CBFS filetype | Size | Compression | Category |
+| ------------- | ------------- | ---- | ----------- | -------- |
+| (empty) | null | 1048548 | none | empty |
+
+### CBFS COREBOOT
+
+* CBFS size: 6877184
+* Number of files: 18
+* Open-source files size: 2321346 (0x236bc2)
+* Closed-source files size: 806326 (0xc4db6)
+* Data size: 9024 (0x2340)
+* Empty size: 3740488 (0x391348)
+
+> Numbers given above are already normalized (i.e. they already include size
+> of metadata and possible closed-source LAN drivers included in the payload
+> which are not visible in the table below)
+
+| CBFS filename | CBFS filetype | Size | Compression | Category |
+| ------------- | ------------- | ---- | ----------- | -------- |
+| fallback/payload | simple elf | 2059016 | none | open-source |
+| fallback/romstage | stage | 68056 | none | open-source |
+| fallback/ramstage | stage | 124851 | LZMA | open-source |
+| fallback/dsdt.aml | raw | 8619 | none | open-source |
+| fallback/postcar | stage | 30852 | none | open-source |
+| bootblock | bootblock | 29952 | none | open-source |
+| cpu_microcode_blob.bin | microcode | 20480 | none | closed-source |
+| fspm.bin | fsp | 557056 | none | closed-source |
+| fsps.bin | fsp | 228790 | LZ4 | closed-source |
+| cbfs_master_header | cbfs header | 28 | none | data |
+| intel_fit | intel_fit | 80 | none | data |
+| config | raw | 4364 | LZMA | data |
+| revision | raw | 859 | none | data |
+| build_info | raw | 102 | none | data |
+| spd.bin | spd | 1024 | none | data |
+| vbt.bin | raw | 1209 | LZMA | data |
+| (empty) | null | 1188 | none | empty |
+| (empty) | null | 3739300 | none | empty |

docs/variants/protectli_v1000-series/releases.md

@@ -11,10 +11,86 @@ For details about our release process please read
 [newsletter]{.md-button .md-button--primary .center}
 </center>
 
-Test results for this platform can be found
-[here](https://docs.google.com/spreadsheets/d/1wI0qBSLdaluayYsm_lIa9iJ9LnPnCOZ9eNOyrKSc-j4/edit#gid=1316498194).
+## v0.9.3 - 2024-09-16
 
-[newsletter]: https://newsletter.3mdeb.com/subscription/n2EpSxtqL
+Test results for this release can be found here:
+
+- [V1210](https://github.com/Dasharo/osfv-results/blob/main/boards/Protectli/JSL_v1000/JSL_V1210/v0.9.3_results.csv)
+- [V1410](https://github.com/Dasharo/osfv-results/blob/main/boards/Protectli/JSL_v1000/JSL_V1410/v0.9.3_results.csv)
+
+### Added
+
+- PC speaker beep on successful boot
+- [Serial Console Redirection option](https://docs.dasharo.com/dasharo-menu-docs/dasharo-system-features/#serial-port-configuration)
+- Memory speed is displayed in the firmware setup main page
+- [Added support for taking screenshots in the firmware](https://docs.dasharo.com/dev-proc/screenshots/#taking-screenshots)
+- Microsoft and Windows 2023 UEFI Secure Boot certificates
+- [Option to customize the SMBIOS Serial Number and UUID](https://docs.dasharo.com/unified-test-documentation/dasharo-compatibility/362-dcu/)
+- UEFI 2.8 errata C compliance in EDKII fork
+- Support for V1211 variant (same as V1210 but with 8GB RAM)
+- SMBIOS fields and strings to reduce differences in SMBIOS between
+  proprietary FW and Dasharo
+- Intel-specific HDA verbs, for proper audio functionality
+
+### Changed
+
+- Disabled audio DSP
+- Disabled SATA due to lack of HW support
+- Rebased on official coreboot 4.21
+- Updated coreboot-sdk version to 2024-02-18_732134932b
+- Removed the i225/i226 EFI driver from the builds in favor of native iPXE
+  driver
+- Switched iPXE repository to Dasharo fork for the native iPXE driver for
+  i225/i226
+- [Updated ME to v13.50.27.1987; refer to SBOM section below](https://github.com/Dasharo/dasharo-blobs/tree/main/protectli/vault_jsl)
+- Enroll default UEFI Secure Boot keys on the first boot
+- [Improved UEFI Secure Boot menu user experience](https://docs.dasharo.com/dasharo-menu-docs/device-manager/#secure-boot-configuration)
+- Scope of reset to default hotkey to global in firmware setup
+- Disabled Intel HWP feature causing a decreased network bandwidth due to too
+  aggressive CPU power savings, thus not reaching the required performance.
+
+### Fixed
 
-<!--Empty pixel to avoid orphaned pages when overview is hidden-->
-[![empty-pixel](../../images/empty_pixel.png)](../../unified/protectli/overview.md)
+- Auto-boot timeout default value in setup not restored to proper value by F9 key
+- Not all Secure Boot settings required a reset
+- Errors related to WiFi L0 showing up in dmesg
+- Not all Dasharo variables were measured at boot
+- Windows default drivers not probing successfully due to SSID programming
+
+#### Binaries
+
+[protectli_v1210_v0.9.3.rom][protectli_v1210_v0.9.3.rom_file]{.md-button}
+[sha256][protectli_v1210_v0.9.3.rom_hash]{.md-button}
+[sha256.sig][protectli_v1210_v0.9.3.rom_sig]{.md-button}
+[protectli_v1410_v0.9.3.rom][protectli_v1410_v0.9.3.rom_file]{.md-button}
+[sha256][protectli_v1410_v0.9.3.rom_hash]{.md-button}
+[sha256.sig][protectli_v1410_v0.9.3.rom_sig]{.md-button}
+
+To verify binary integrity with hash and signature please follow the
+instructions in [Dasharo release signature verification](/guides/signature-verification)
+using [this key](https://github.com/3mdeb/3mdeb-secpack/raw/master/customer-keys/protectli/release-keys/dasharo-release-0.9.x-for-protectli-signing-key.asc)
+
+### SBOM (Software Bill of Materials)
+
+- [coreboot based on 4.21 revision ee437086](https://github.com/Dasharo/coreboot/tree/ee437086)
+    + [License](https://github.com/Dasharo/coreboot/blob/ee437086/COPYING)
+- [Dasharo EDKII fork based on f06673308f revision f0667330](https://github.com/Dasharo/edk2/tree/f0667330)
+    + [License](https://github.com/Dasharo/edk2/blob/f0667330/License.txt)
+- [Dasharo iPXE fork based on 838611b34e revision 838611b3](https://github.com/Dasharo/ipxe/tree/838611b3)
+    + [License](https://github.com/Dasharo/ipxe/blob/838611b3/COPYING.GPLv2)
+- [Intel Management Engine based on v13.50.27.1987 revision 9712e97a](https://github.com/Dasharo/dasharo-blobs/blob/9712e97a/protectli/vault_jsl/)
+    + [License](https://github.com/Dasharo/dasharo-blobs/blob/main/licenses/pv%20intel%20obl%20software%20license%20agreement%2011.2.2017.pdf)
+- [Intel Flash Descriptor based on v1.0 revision 9712e97a](https://github.com/Dasharo/dasharo-blobs/blob/9712e97a/protectli/vault_jsl)
+    + [License](https://github.com/Dasharo/dasharo-blobs/blob/main/licenses/pv%20intel%20obl%20software%20license%20agreement%2011.2.2017.pdf)
+- [Intel Firmware Support Package based on JSL 2021/08/23 v2115 revision 9712e97a](https://github.com/Dasharo/dasharo-blobs/blob/9712e97a/protectli/vault_jsl/JasperLakeFspBinPkg)
+    + [License](https://github.com/Dasharo/dasharo-blobs/blob/main/licenses/pv%20intel%20obl%20software%20license%20agreement%2011.2.2017.pdf)
+- [Intel microcode based on JSL A0 0x24000026 revision microcode-20240312](https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/tree/microcode-20240312/intel-ucode/06-9c-00)
+    + [License](https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/microcode-20240312/license)
+
+[newsletter]: https://newsletter.3mdeb.com/subscription/n2EpSxtqL
+[protectli_v1210_v0.9.3.rom_file]: https://dl.3mdeb.com/open-source-firmware/Dasharo/protectli_vault_jsl/v0.9.3/protectli_v1210_v0.9.3.rom
+[protectli_v1210_v0.9.3.rom_hash]: https://dl.3mdeb.com/open-source-firmware/Dasharo/protectli_vault_jsl/v0.9.3/protectli_v1210_v0.9.3.rom.sha256
+[protectli_v1210_v0.9.3.rom_sig]: https://dl.3mdeb.com/open-source-firmware/Dasharo/protectli_vault_jsl/v0.9.3/protectli_v1210_v0.9.3.rom.sha256.sig
+[protectli_v1410_v0.9.3.rom_file]: https://dl.3mdeb.com/open-source-firmware/Dasharo/protectli_vault_jsl/v0.9.3/protectli_v1410_v0.9.3.rom
+[protectli_v1410_v0.9.3.rom_hash]: https://dl.3mdeb.com/open-source-firmware/Dasharo/protectli_vault_jsl/v0.9.3/protectli_v1410_v0.9.3.rom.sha256
+[protectli_v1410_v0.9.3.rom_sig]: https://dl.3mdeb.com/open-source-firmware/Dasharo/protectli_vault_jsl/v0.9.3/protectli_v1410_v0.9.3.rom.sha256.sig

mkdocs.yml

@@ -279,7 +279,7 @@ nav:
           - 'Protectli V1000 series':
               - 'Releases': variants/protectli_v1000-series/releases.md
               - 'Hardware Configuration Matrix': variants/protectli_v1000-series/hardware-matrix.md
-            #   - 'Openness score': variants/protectli_v1000-series/openness_score.md
+              - 'Openness score': variants/protectli_v1000-series/openness-score.md
           - 'Protectli VP2410':
               - 'Releases': variants/protectli_vp2410/releases.md
               - 'Hardware Configuration Matrix': variants/protectli_vp2410/hardware-matrix.md