-
-
Notifications
You must be signed in to change notification settings - Fork 187
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
4.22.01 fhd patch merged upstream (4.24) + bump all 4.19 boards to 4.22.01 #1604
Conversation
Testing https://output.circle-artifacts.com/output/job/921af8c2-40cd-4b91-886b-f48c99d8749e/artifacts/0/build/x86/x230-hotp-maximized/heads-x230-hotp-maximized-v0.2.0-2023-g1a6aacb.zip which passed to 4.22. cbmem states Unknown TPM log specification. Something changed there... |
(realize it's WIP but took a quick look 🙂 ) Do any boards remain on 4.19 after this change? If not, IMO we should remove it from modules/coreboot. |
Works perfectly on eDP 4.0-modded X230 with 1440p display. |
Cannot replicate with qemu-coreboot-whpitail-tpm1/tpm2 boards, this is weird. |
Passing to tpm 1.2 event log format makes cbmem crash... Something has not followed upstream changes inside of cbmem?!?! Another rabbit hole. |
@tlaurion I'm working on PureBoot 29 release candidates now (updating coreboot to 4.22.01 there as well) and I get something similar with cbmem -L, but I'm not sure it's exactly the same. It does appear to show the TPM log correctly, but then it shows a huge garbage entry and crashes. Sealing still works because the correct part of the log is interpreted correctly by tpmr. It looks like cbmem is wandering off into uninitialized space following the TPM log (but haven't confirmed that). Is that similar to what you see? Next steps IMO would be to build cbmem in the host OS see if it's the same (see if it's specific to the Heads build/environment or not, since it would surprise me if it was doing this across the board upstream), then probably bisect coreboot and/or cbmem based on that result. |
Checking at history of cbmem https://github.com/coreboot/coreboot/commits/7201602a18b63fc5236f025d22dc726637866cb6/util/cbmem/cbmem.c, it seems something went wrong either at coreboot/coreboot@6da6268 when supporting tpm1.2/tpm2.0 format or coreboot/coreboot@fc2f304 when attempting to standardize c99 arrays.
On x230 I only get "Unknown TPM log specification:" (note the ':' and nothing else) at
No. I get this when I switch the TPM log format to 1.2 though, not when using coreboot custom format that we currently use.
Well, TBH I'm not sure a lot of other use so much measured boot outside of Heads @JonathonHall-Purism ? |
@JonathonHall-Purism tested bumping musl-cross-make to latest avail commit but same error on x230-maximized and clean built: "Unknown TPM log specification:" |
I took the time to use rom produced here (4.22.01 tag release codebase built with measured boot and coreboot custom event log format) and test cbmem built on top of ubuntu 23.10/debian trixie OS (to remove musl-cross-make doubts). Interestingly enough:
So now, let's test cbmem behavior in between those release versions:
So Raised awareness under #coreboot channel at https://matrix.to/#/!EhaGFZyYcbyhdSgStq:matrix.org/$DJW_mF5d1PfhJIvoM-_HvX8s3BpzNvtNu77auhvKBo0?via=matrix.org&via=sibnsk.net&via=datanauten.de. @miczyg1 said he would take a look at https://matrix.to/#/!EhaGFZyYcbyhdSgStq:matrix.org/$34SHe96Ef5Qrv2pIXtmi2lqpSwnh1GsKXlZCR9I7PpY?via=matrix.org&via=sibnsk.net&via=datanauten.de |
Thanks to you all, edp/fhd was merged upstream (~4.24 to be) EDIT: coreboot switches to date based releases. So coreboot 24.02 it will be... |
Testing FHD+4.23 coreboot is under https://github.com/tlaurion/heads/tree/pre423-edp_fhd_in-tpm_tcg_event_log-CircleCi_coreboot_cache_fixed As of now, the branch is just to show that cbmem -L fails (just as here) but for fixes to be made upstream as reported at #1609 (comment) |
Updated to match coreboot merged https://review.coreboot.org/c/coreboot/+/28950. Might need manual fix (since other things changed for 4.23) EDIT: yep. Manual fixes needed for 4.22 |
Traces to debug coreboot custom TPM event log for 4bb8317 at #1608 (comment) Switching to TPM TCG event log format on next commit |
Logs for 6b61f61 segfaulting TCG event log cbmem -L output under #1608 (comment) Not a blocker: tpmr (pcr replay) works, but dmesg will show segfault until fixed. |
@pcm720 can you confirm upstream merged+modified(minimal: only filename changes) edp/fhd patchset works as expected here? Should. |
@lethedata: #1603 (comment) "reboot issue" might not be fixed by this and as of today, is outside of my comprehension. |
Tested:
Needs testing:
As of now, HOTP+TPM DUK+suspend+resume works as expected and no regression reported on tested boards above. |
Yes, everything works as expected, no issues with disk decryption or OS reboots. |
Testing needed, everyone! |
Untested boards will move to UNTESTED. |
t420-hotp-maximized tested and works!
|
I'll get to it next Wednesday or, if you don't mind
…On 21 February 2024 21:18:25 UTC, Thierry Laurion ***@***.***> wrote:
Tested:
- [x] w530-hotp-maximized ***@***.*** main station: iGPU only)
- [x] x230-maximized ***@***.*** testing station)
- [x] x230-maximized-fhd_edp (thanks @pcm720)
Needs testing:
- [ ] x220 (xx20): @Thrilleratplay @BlackMaria @srgrint
- [ ] [t420](https://doc.coreboot.org/mainboard/lenovo/t420.html) (xx20): @alexmaloteaux @natterangell (iGPU) @akfhasodh @doob85
- [ ] [t430](https://doc.coreboot.org/mainboard/lenovo/t430.html) (xx30): @nestire(t430-legacy, t430-maximized) @Thrilleratplay @alexmaloteaux @lsafd @bwachter(iGPU maximized) @shamen123 @eganonoa(iGPU) @nitrosimon @jans23 @icequbes1 (iGPU) @weyounsix ([t430-dgpu](https://doc.coreboot.org/mainboard/lenovo/t430.html))
- [ ] t430-dgpu (xx30): @weyounsix (t430-dgpu)
- [ ] [t520](https://doc.coreboot.org/mainboard/lenovo/t520.html) (xx30): NOBODY
- [ ] [t530](https://doc.coreboot.org/mainboard/lenovo/t530.html) (xx30): @3hhh
- [ ] [w530-dgpu](https://doc.coreboot.org/mainboard/lenovo/w530.html) (xx30): @weyounsix (dGPU: w530-k2000m) @jnscmns (dGPU K1000M) @computer-user123 (w530 / & w530 k2000 : prefers iGPU)
- [ ] x230 (xx30): @nestire(x230-legacy, x230-maximized) @tlaurion(maximized) @osresearch @merge @jan23 @MrChromebox @shamen123 @eganonoa @bwachter @Thrilleratplay @jnscmns @doob85
- [ ] X230i (x230): @natterangell
- [ ] x230-fhd/edp variant: @n4ru @computer-user123 (nitro caster board) @Tonux599 @househead @pcm720 (eDP 4.0 board and 1440p display)
- [ ] [t440p](https://doc.coreboot.org/mainboard/lenovo/t440p.html): @ThePlexus @srgrint @akunterkontrolle @rbreslow
- [ ] w541 (similar to [t440p](https://doc.coreboot.org/mainboard/lenovo/t440p.html)): @resende-gustavo @gaspar-ilom
- [ ] [ASUS P8Z77 M PRO (Ivy bridge)](https://doc.coreboot.org/mainboard/asus/p8z77-m_pro.html): @ThePlexus
- [ ] [HP Z220 CMT (Ivy bridge)](#1399): @d-wid
As of now, HOTP+TPM DUK+suspend+resume works as expected and no regression reported on tested boards above.
--
Reply to this email directly or view it on GitHub:
#1604 (comment)
You are receiving this because you were mentioned.
Message ID: ***@***.***>
|
tlaurion is away until March 20th, so no rush 👍 |
@d-wid @JonathonHall-Purism it was intentional to push for testing before leaving on my side. Last time I asked for testing, it took more then 3weeks to get the results. So @d-wid and others: please have your testing reports before march 20th. Happy testing! |
Have tested heads-x220-maximized-v0.2.0-2027-g6b61f61.rom Seems to work fine. |
I have regression tested W541 (heads-w541-hotp-maximized-v0.2.0-2027-g6b61f61.rom). No findings. You may mark it as tested. |
Have also tested t440p - also seems to work fine. |
Tested on my intel graphics T430. Seems to work fine. |
Seems to work fine on the HP Z220 too.
|
Thanks to all testing reports per #1604 (comment), last call for testing for :
Some boards will go to UNTESTED, and current UNTESTED boards will go UNMAINTAINTED. |
X230i tested and works 👍🏻
|
- patches/coreboot-4.22.01/0001-x230-fhd-variant.patch created per - git fetch https://review.coreboot.org/coreboot refs/changes/50/28950/23 && git format-patch -1 --stdout FETCH_HEAD > ~/heads/patches/coreboot-4.22.01/0001-x230-fhd-variant.patch - all boards configs bumped with: - grep -Rn 4.22 boards/ | awk -F "/" {'print $2'}| while read line; do make BOARD=$line coreboot.save_in_oldconfig_format_in_place ; done Signed-off-by: Thierry Laurion <[email protected]>
…eam merged state git fetch https://review.coreboot.org/coreboot refs/changes/50/28950/27 && git format-patch -1 --stdout FETCH_HEAD > ~/heads/patches/coreboot-4.22.01/0001-x230-fhd-variant.patch Signed-off-by: Thierry Laurion <[email protected]>
Signed-off-by: Thierry Laurion <[email protected]>
… Makefile.inc (Makefile.mk doesn't exist under 4.22) Signed-off-by: Thierry Laurion <[email protected]>
… to TCG Signed-off-by: Thierry Laurion <[email protected]>
…ve them from CircleCI, add Makefile helper and document untested_boards/README.md Signed-off-by: Thierry Laurion <[email protected]>
Rebased on master and moved boards from boards/UNTESTED_* to unmaintained_boards/UNMAINTAINED_* per added Makefile helper, removed them from CircleCI. If there is interest for those boards, they will need to be brought back with proper testing and board owner willingness to maintain/at least test when needed. See 9fcd5f8 related changes. @JonathonHall-Purism : merge? |
Thanks @tlaurion , yes looks good to me for merge 👍 |
…o more boards can be built reusing cache and where nv41 will be rebuilt if coreboot level cache was not saved) Signed-off-by: Thierry Laurion <[email protected]>
Revisiting 4.22 coreboot bump with fhd patch (superseeds and replaces #1524), Might fix #1603)
Testing report at #1604 (comment)
4.22 didn't include the patchset in time as #1523 related.
Hopefully this is the last time we pick a patchset. Please board owners, report your edp/fhd kit (PRECISELY) and passing/failing results under https://review.coreboot.org/c/coreboot/+/28950EDIT: https://review.coreboot.org/coreboot refs/changes/50/28950/27 was merged.