Skip to content

Commit

Permalink
protectli_v1000-series: Add V1410 and V1210 complete release v0.9.3 c…
Browse files Browse the repository at this point in the history
…ontent

Signed-off-by: Michał Żygowski <[email protected]>
  • Loading branch information
miczyg1 committed Sep 16, 2024
1 parent 1401897 commit 76d997f
Show file tree
Hide file tree
Showing 5 changed files with 138 additions and 42 deletions.
90 changes: 90 additions & 0 deletions docs/variants/protectli_v1000-series/openness-score.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,90 @@
# Dasharo Openness Score

This page contains the [Dasharo Openness
Score](../../glossary.md#dasharo-openness-score) for Protectli V1000 series
Dasharo releases. The content of the page is generated with [Dasharo Openness
Score utility](https://github.com/Dasharo/Openness-Score).

## v0.9.0

Openness Score for protectli_v1210_v0.9.3.rom

Open-source code percentage: **20.2%**
Closed-source code percentage: **79.8%**

* Image size: 16777216 (0x1000000)
* Number of regions: 10
* Number of CBFSes: 2
* Total open-source code size: 2321346 (0x236bc2)
* Total closed-source code size: 9190838 (0x8c3db6)
* Total data size: 475996 (0x7435c)
* Total empty size: 4789036 (0x49132c)

![](protectli_v1210_v0.9.3.rom_openness_chart.png)

![](protectli_v1210_v0.9.3.rom_openness_chart_full_image.png)

> Numbers given above already include the calculations from CBFS regions
> presented below
### FMAP regions

| FMAP region | Offset | Size | Category |
| ----------- | ------ | ---- | -------- |
| SI_ME | 0x1000 | 0x7ff000 | closed-source |
| SI_DESC | 0x0 | 0x1000 | data |
| SMMSTORE | 0x800000 | 0x40000 | data |
| RW_MRC_CACHE | 0x840000 | 0x10000 | data |
| CONSOLE | 0x850000 | 0x20000 | data |
| FMAP | 0x970000 | 0x1000 | data |

### CBFS BOOTSPLASH

* CBFS size: 1048576
* Number of files: 1
* Open-source files size: 0 (0x0)
* Closed-source files size: 0 (0x0)
* Data size: 28 (0x1c)
* Empty size: 1048548 (0xfffe4)

> Numbers given above are already normalized (i.e. they already include size
> of metadata and possible closed-source LAN drivers included in the payload
> which are not visible in the table below)
| CBFS filename | CBFS filetype | Size | Compression | Category |
| ------------- | ------------- | ---- | ----------- | -------- |
| (empty) | null | 1048548 | none | empty |

### CBFS COREBOOT

* CBFS size: 6877184
* Number of files: 18
* Open-source files size: 2321346 (0x236bc2)
* Closed-source files size: 806326 (0xc4db6)
* Data size: 9024 (0x2340)
* Empty size: 3740488 (0x391348)

> Numbers given above are already normalized (i.e. they already include size
> of metadata and possible closed-source LAN drivers included in the payload
> which are not visible in the table below)
| CBFS filename | CBFS filetype | Size | Compression | Category |
| ------------- | ------------- | ---- | ----------- | -------- |
| fallback/payload | simple elf | 2059016 | none | open-source |
| fallback/romstage | stage | 68056 | none | open-source |
| fallback/ramstage | stage | 124851 | LZMA | open-source |
| fallback/dsdt.aml | raw | 8619 | none | open-source |
| fallback/postcar | stage | 30852 | none | open-source |
| bootblock | bootblock | 29952 | none | open-source |
| cpu_microcode_blob.bin | microcode | 20480 | none | closed-source |
| fspm.bin | fsp | 557056 | none | closed-source |
| fsps.bin | fsp | 228790 | LZ4 | closed-source |
| cbfs_master_header | cbfs header | 28 | none | data |
| intel_fit | intel_fit | 80 | none | data |
| config | raw | 4364 | LZMA | data |
| revision | raw | 859 | none | data |
| build_info | raw | 102 | none | data |
| spd.bin | spd | 1024 | none | data |
| vbt.bin | raw | 1209 | LZMA | data |
| (empty) | null | 1188 | none | empty |
| (empty) | null | 3739300 | none | empty |
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
89 changes: 47 additions & 42 deletions docs/variants/protectli_v1000-series/releases.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,64 +11,66 @@ For details about our release process please read
[newsletter]{.md-button .md-button--primary .center}
</center>

Test results for this platform can be found
[here](https://docs.google.com/spreadsheets/d/1wI0qBSLdaluayYsm_lIa9iJ9LnPnCOZ9eNOyrKSc-j4/edit#gid=1316498194).
## v0.9.3 - 2024-09-16

[newsletter]: https://newsletter.3mdeb.com/subscription/n2EpSxtqL

<!--Empty pixel to avoid orphaned pages when overview is hidden-->
[![empty-pixel](../../images/empty_pixel.png)](overview.md)

## Protectli V1210 Dasharo Release Notes

Following Release Notes describe status of open-source firmware development for
Protectli V1210

For details about our release process please read
[Dasharo Standard Release Process](../../dev-proc/standard-release-process.md).

<center>

[Subscribe to Protectli V1210 Dasharo Release Newsletter]
[newsletter]{ .md-button .md-button--primary .center }

</center>
Test results for this release can be found here:

### v0.9.3 - 2024-09-09
- [V1210](https://github.com/Dasharo/osfv-results/blob/main/boards/Protectli/JSL_v1000/JSL_V1210/v0.9.3_results.csv)
- [V1410](https://github.com/Dasharo/osfv-results/blob/main/boards/Protectli/JSL_v1000/JSL_V1410/v0.9.3_results.csv)

Test results for this release can be found
[here](https://docs.google.com/spreadsheets/d/1wSE6xA3K3nXewwLn5lV39_2wZL1kg5AkGb4mvmG3bwE/edit?gid=1207991922#gid=1207991922).

#### Added
### Added

- PC speaker beep on successful boot
- [Serial Console Redirection option](https://docs.dasharo.com/dasharo-menu-docs/dasharo-system-features/#serial-port-configuration)
- Memory speed is displayed in the firmware setup main page
- [Added support for taking screenshots in the firmware](https://docs.dasharo.com/dev-proc/screenshots/#taking-screenshots)
- Microsoft and Windows 2023 UEFI Secure Boot certificates
- [Option to customize the SMBIOS Serial Number and UUID](https://docs.dasharo.com/unified-test-documentation/dasharo-compatibility/362-dcu/)
- UEFI 2.8 errata C compliance in EDKII fork
- Support for V1211 variant (same as V1210 but with 8GB RAM)
- SMBIOS fields and strings to reduce differences in SMBIOS between
proprietary FW and Dasharo
- Intel-specific HDA verbs, for proper audio functionality

#### Changed
### Changed

- Disabled DSP
- Disabled audio DSP
- Disabled SATA due to lack of HW support
- Disabled SSID programming to prevent Windows default drives from not probing
successfully
- Removed differences in SMBIOS fields compared to proprietary FW
- Disabled WiFi L0 to prevent errors from showing up in dmesg

#### Known Issues

- There is no PC speaker populated on the platform, so it does not give sound
signals on errors and boot
- The chassis is getting very hot
- Rebased on official coreboot 4.21
- Updated coreboot-sdk version to 2024-02-18_732134932b
- Removed the i225/i226 EFI driver from the builds in favor of native iPXE
driver
- Switched iPXE repository to Dasharo fork for the native iPXE driver for
i225/i226
- [Updated ME to v13.50.27.1987; refer to SBOM section below](https://github.com/Dasharo/dasharo-blobs/tree/main/protectli/vault_jsl)
- Enroll default UEFI Secure Boot keys on the first boot
- [Improved UEFI Secure Boot menu user experience](https://docs.dasharo.com/dasharo-menu-docs/device-manager/#secure-boot-configuration)
- Scope of reset to default hotkey to global in firmware setup
- Disabled Intel HWP feature causing a decreased network bandwidth due to too
aggressive CPU power savings, thus not reaching the required performance.

### Fixed

- Auto-boot timeout default value in setup not restored to proper value by F9 key
- Not all Secure Boot settings required a reset
- Errors related to WiFi L0 showing up in dmesg
- Not all Dasharo variables were measured at boot
- Windows default drivers not probing successfully due to SSID programming

#### Binaries

[protectli_v1210_v0.9.3.rom][protectli_v1210_v0.9.3.rom_file]{.md-button}
[sha256][protectli_v1210_v0.9.3.rom_hash]{.md-button}
[sha256.sig][protectli_v1210_v0.9.3.rom_sig]{.md-button}
[protectli_v1410_v0.9.3.rom][protectli_v1410_v0.9.3.rom_file]{.md-button}
[sha256][protectli_v1410_v0.9.3.rom_hash]{.md-button}
[sha256.sig][protectli_v1410_v0.9.3.rom_sig]{.md-button}

To verify binary integrity with hash and signature please follow the
instructions in [Dasharo release signature verification](/guides/signature-verification)
using [this key](https://raw.githubusercontent.com/3mdeb/3mdeb-secpack/master/dasharo/dasharo-open-source-firmware-engineering-release-signing-key.asc)
using [this key](https://github.com/3mdeb/3mdeb-secpack/raw/master/customer-keys/protectli/release-keys/dasharo-release-0.9.x-for-protectli-signing-key.asc)

#### SBOM (Software Bill of Materials)
### SBOM (Software Bill of Materials)

- [coreboot based on 4.21 revision ee437086](https://github.com/Dasharo/coreboot/tree/ee437086)
+ [License](https://github.com/Dasharo/coreboot/blob/ee437086/COPYING)
Expand All @@ -78,14 +80,17 @@ using [this key](https://raw.githubusercontent.com/3mdeb/3mdeb-secpack/master/da
+ [License](https://github.com/Dasharo/ipxe/blob/838611b3/COPYING.GPLv2)
- [Intel Management Engine based on v13.50.27.1987 revision 9712e97a](https://github.com/Dasharo/dasharo-blobs/blob/9712e97a/protectli/vault_jsl/)
+ [License](https://github.com/Dasharo/dasharo-blobs/blob/main/licenses/pv%20intel%20obl%20software%20license%20agreement%2011.2.2017.pdf)
- [Intel Flash Descriptor based on v1.0 revision 9712e97a](https://github.com/Dasharo/dasharo-blobs/blob/9712e97a/protectli/vault_jsl/)
- [Intel Flash Descriptor based on v1.0 revision 9712e97a](https://github.com/Dasharo/dasharo-blobs/blob/9712e97a/protectli/vault_jsl)
+ [License](https://github.com/Dasharo/dasharo-blobs/blob/main/licenses/pv%20intel%20obl%20software%20license%20agreement%2011.2.2017.pdf)
- [Intel Firmware Support Package based on JSL 2021/08/23 v2115 revision 9712e97a](https://github.com/Dasharo/dasharo-blobs/blob/9712e97a/protectli/vault_jsl/JasperLakeFspBinPkg)
+ [License](https://github.com/intel/FSP/blob/9712e97a/FSP_License.pdf)
+ [License](https://github.com/Dasharo/dasharo-blobs/blob/main/licenses/pv%20intel%20obl%20software%20license%20agreement%2011.2.2017.pdf)
- [Intel microcode based on JSL A0 0x24000026 revision microcode-20240312](https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/tree/microcode-20240312/intel-ucode/06-9c-00)
+ [License](https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/microcode-20240312/license)

[newsletter]: https://newsletter.3mdeb.com/subscription/n2EpSxtqL
[protectli_v1210_v0.9.3.rom_file]: https://dl.3mdeb.com/open-source-firmware/Dasharo/protectli_vault_jsl/v0.9.3/protectli_v1210_v0.9.3.rom
[protectli_v1210_v0.9.3.rom_hash]: https://dl.3mdeb.com/open-source-firmware/Dasharo/protectli_vault_jsl/v0.9.3/protectli_v1210_v0.9.3.rom.sha256
[protectli_v1210_v0.9.3.rom_sig]: https://dl.3mdeb.com/open-source-firmware/Dasharo/protectli_vault_jsl/v0.9.3/protectli_v1210_v0.9.3.rom.sha256.sig
[protectli_v1410_v0.9.3.rom_file]: https://dl.3mdeb.com/open-source-firmware/Dasharo/protectli_vault_jsl/v0.9.3/protectli_v1410_v0.9.3.rom
[protectli_v1410_v0.9.3.rom_hash]: https://dl.3mdeb.com/open-source-firmware/Dasharo/protectli_vault_jsl/v0.9.3/protectli_v1410_v0.9.3.rom.sha256
[protectli_v1410_v0.9.3.rom_sig]: https://dl.3mdeb.com/open-source-firmware/Dasharo/protectli_vault_jsl/v0.9.3/protectli_v1410_v0.9.3.rom.sha256.sig
1 change: 1 addition & 0 deletions mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -290,6 +290,7 @@ nav:
- 'Protectli V1000 series':
- 'Releases': variants/protectli_v1000-series/releases.md
- 'Hardware Configuration Matrix': variants/protectli_v1000-series/hardware-matrix.md
- 'Openness score': variants/protectli_v1000-series/openness-score.md
- 'Protectli VP2410':
- 'Releases': variants/protectli_vp2410/releases.md
- 'Hardware Configuration Matrix': variants/protectli_vp2410/hardware-matrix.md
Expand Down

0 comments on commit 76d997f

Please sign in to comment.