config.yml

version: 2.1

executors:
  heads-docker:
    docker:
      # Docker image: tlaurion/heads-dev-env:v0.2.9
      - image: tlaurion/heads-dev-env@sha256:96f8f91c6464305c4a990d59f9ef93910c16c7fd0501a46b43b34a4600a368de
    resource_class: large
    working_directory: ~/heads

commands:
  build_board:
    parameters:
      arch:
        type: string
      target:
        type: string
      subcommand:
        type: string
    steps:
      - run:
          name: Make Board (console logs not contiguous because multiple CPUs used to build under CircleCI, see logs in artifacts or Output build failing logs below in case of failed step)
          command: |
            echo "Sourcing /devenv.sh since docker entrypoint doesn't do it as expected"
            source /devenv.sh
            rm -rf build/<< parameters.arch >>/log/*
            # Fresh checkout timestamps can make restored module stamp files look stale.
            # Refresh them first so restored musl-cross-make and dependency trees are reused.
            if [ -d "build/<< parameters.arch >>" ]; then
              find "build/<< parameters.arch >>" -type f \( -name ".configured" -o -name ".build" \) -exec touch {} +
            fi
            #Pass AVAILABLE_MEM_GB=8 to respect CircleCI free tier RAM assignation, which otherwise randomly fails. See Makefile calculations.
            # Without AVAILABLE_MEM_GB=8: CircleCI passes '-j36 --load-average=54'
            # With AVAILABLE_MEM_GB=8: CircleCI passes '-j8 --load-average=12'
            make V=1 BOARD=<< parameters.target >> << parameters.subcommand >> AVAILABLE_MEM_GB=8  | ts || touch ./tmpDir/failed_build
          no_output_timeout: 3h
      - run:
          name: Output hashes
          command: |
            cat build/<< parameters.arch >>/<< parameters.target >>/hashes.txt || echo "No hashes.txt for this build step..."
      - run:
          name: Output sizes
          command: |
            cat build/<< parameters.arch >>/<< parameters.target >>/sizes.txt || echo "No sizes.txt for this build step..."
      - run:
          name: Archiving build logs.
          command: |
            tar zcvf build/<< parameters.arch >>/<< parameters.target >>/logs.tar.gz $(find build/ -name "*.log")
      - run:
          name: Output build failing logs
          command: |
            if [[ -f ./tmpDir/failed_build ]]; then
              find "./build/<< parameters.arch >>/" -name "*.log" -type f -mmin -1 -exec tail -n +1 '{}' +
              exit 1
            else
              echo "Step hasn't failed. Continuing with next step..."
            fi
      - store_artifacts:
          path: build/<< parameters.arch >>/<< parameters.target >>

jobs:

  # ═══════════════════════════════════════════════════════════════════════════
  # Glossary
  # ═══════════════════════════════════════════════════════════════════════════
  # fan-in: When multiple upstream jobs try to persist the same paths to the
  #         same workspace. CircleCI throws an error if this happens.
  #         Solution: Each job saves its own cache immediately, before persisting.
  #
  # workspace chain: Linear dependency chain where only one job persists at a time.
  #                  No fan-in possible since each job in the chain is unique.
  #
  # cache layer: CircleCI caches are hierarchical for each architecture:
  #              Cache key naming: {arch}-{layer}-nix-docker-heads-{hash}[-{fork}]
  #              - {arch}-blobs-nix-docker-heads-{hash}                 (x86 only, ppc64 has no blobs)
  #              - {arch}-musl-cross-make-nix-docker-heads-{hash}
  #                └── Base toolchain (GCC + musl = musl-cross-make)
  #              - {arch}-coreboot-musl-cross-make-nix-docker-heads-{hash}-{coreboot_dir}
  #                └── Includes musl + coreboot toolstack
  #              - {arch}-modules-coreboot-musl-cross-make-nix-docker-heads-{hash}-{coreboot_dir}
  #                └── Includes coreboot + musl + all modules
  #              Caches are reused across pipelines for the same repository.
  #              They do NOT speed up sibling jobs in the same workflow run.
  #              Each x86_coreboot job saves both coreboot and modules caches.
  #
  # CACHE_VERSION: Environment variable used to invalidate all caches at once.
  #                Set as CircleCI project variable in project settings.
  #                Suggested format: YYYYMMDD (e.g., 20260420) for easy manual invalidation.
  #                To force fresh builds: update CACHE_VERSION value in CircleCI project settings.
  #                See: https://circleci.com/docs/env-vars/#project-level-and-organization-level-environment-variables
  #              Blobs are checked and restored first for x86, then musl -> coreboot -> modules.
  # ═══════════════════════════════════════════════════════════════════════════

  # create_hashes: creates all cache hash files for the pipeline
  # - Checks out code, resets to CIRCLE_SHA1
  # - Creates hashes for: modules, coreboot, musl-cross-make, blobs listing
  # - Persists tmpDir to workspace for downstream jobs
  # This job is fast and shared by all architectures.
  create_hashes:
    executor: heads-docker
    steps:
      - checkout
      - run:
          name: git reset
          command: |
            git reset --hard "$CIRCLE_SHA1"
      - run:
          name: Make tmp dir
          command: |
            mkdir ./tmpDir
      - run:
          name: Creating all modules and patches digest (All modules cache digest)
          command: |
            # TODO: Add .circleci/config.yml back once cache model is stable
            find ./Makefile ./flake.lock ./patches/ ./modules/ -type f | sort -h |xargs sha256sum > ./tmpDir/all_modules_and_patches.sha256sums
      - run:
          name: Creating coreboot (and associated patches) and musl-cross-make modules digest (musl-cross-make and coreboot cache digest)
          command: |
            # TODO: Add .circleci/config.yml back once cache model is stable
            find ./flake.lock ./modules/coreboot ./modules/musl-cross-make* ./patches/coreboot* -type f | sort -h | xargs sha256sum > ./tmpDir/coreboot_musl-cross-make.sha256sums
      - run:
          name: Creating musl-cross-make and musl-cross-make patches digest (musl-cross-make cache digest)
          command: |
            find ./flake.lock modules/musl-cross-make* -type f | sort -h | xargs sha256sum > ./tmpDir/musl-cross-make.sha256sums
      - run:
          name: Creating blobs listing digest (for x86_blobs cache key)
          command: |
            find ./blobs -type f -name "*.sh" | sort -h | xargs sha256sum > ./tmpDir/blobs_listing.sha256sums
      - persist_to_workspace:
          root: ~/heads
          paths:
            - tmpDir

  # x86_blobs: downloads x86-specific blobs (ME, GBE, etc.)
  # - Checks out code to get blob download scripts
  # - Attaches workspace from create_hashes (has tmpDir with hashes)
  # - Restores blob cache (keyed on blob listing hash)
  # - Downloads blobs if cache missed
  # - Saves blob cache for future runs
  # - Persists blobs to workspace for downstream jobs
  # Only needed for x86 boards (ppc64 UNTESTED_talos-2 has no blobs)
  x86_blobs:
    executor: heads-docker
    steps:
      - checkout
      - attach_workspace:
          at: ~/heads
      - restore_cache:
          keys:
            - x86-blobs-nix-docker-heads-{{ checksum "./tmpDir/blobs_listing.sha256sums" }}{{ .Environment.CACHE_VERSION }}
      - run:
          name: Download and neuter xx20 ME (keep generated GBE and extracted IFD in tree)
          command: |
            ./blobs/xx20/download_parse_me.sh
      - run:
          name: Download Optiplex 7010/9010 blobs
          command: |
            ./blobs/xx30/optiplex_7010_9010.sh ./blobs/xx30
      # me_cleaner.py present under heads blobs/utils/me_cleaner dir comes from https://github.com/corna/me_cleaner/blob/43612a630c79f3bc6f2653bfe90dfe0b7b137e08/me_cleaner.py
      - run:
          name: Download and neuter xx30 ME (keep generated GBE and extracted IFD in tree)
          command: |
            ./blobs/xx30/download_clean_me_manually.sh -m $(readlink -f ./blobs/utils/me_cleaner/me_cleaner.py)
      - run:
          name: Download, neuter and deguard xx80 ME (keep generated GBE and extracted IFD in tree)
          command: |
            ./blobs/xx80/t480_download_clean_deguard_me_pad_tb.sh -m $(readlink -f ./blobs/utils/me_cleaner/me_cleaner.py) ./blobs/xx80/
            ./blobs/xx80/t480s_download_clean_deguard_me_pad_tb.sh -m $(readlink -f ./blobs/utils/me_cleaner/me_cleaner.py) ./blobs/xx80/
      - run:
          name: Download and extract t530 vbios roms for dgpu boards
          command: |
            echo skipping for now
            exit 0
            ./blobs/xx30/vbios_t530.sh
      - run:
          name: Download and extract w530 vbios roms for dgpu boards
          command: |
            echo skipping for now
            exit 0
            ./blobs/xx30/vbios_w530.sh
      - save_cache:
          key: x86-blobs-nix-docker-heads-{{ checksum "./tmpDir/blobs_listing.sha256sums" }}{{ .Environment.CACHE_VERSION }}
          paths:
            - blobs
      - persist_to_workspace:
          root: ~/heads
          paths:
            - blobs

  build:
    executor: heads-docker
    parameters:
      arch:
        type: string
        default: x86
      target:
        type: string
      subcommand:
        type: string
    steps:
      - checkout
      - attach_workspace:
          at: ~/heads
      - build_board:
          arch: <<parameters.arch>>
          target: <<parameters.target>>
          subcommand: <<parameters.subcommand>>

  # x86_musl_cross_make: builds musl-cross-make for x86 architecture.
  # - Checks out code for build scripts
  # - Attaches workspace from x86_blobs (has blobs)
  # - Restores the fullest matching toolchain cache from previous builds
  #   (prefer full modules cache, then fall back to musl-only cache)
  #   Note: the first run after a cache-key change can miss modules if that
  #   broad cache has not been published by an earlier pipeline yet.
  # - Refreshed .configured/.build stamps prevent checkout mtimes from
  #   needlessly rebuilding restored musl-cross-make trees.
  # - Builds musl-cross-make toolchain
  # - Persists packages/x86, build/x86, crossgcc/x86, install/x86 to workspace
  # - Saves musl-cross-make cache for future runs, including install/x86 so
  #   the restored toolchain still has its sysroot headers and libraries
  # Workspace chain: create_hashes -> x86_blobs -> x86_musl_cross_make -> x86_coreboot
  x86_musl_cross_make:
    executor: heads-docker
    parameters:
      target:
        type: string
      subcommand:
        type: string
    steps:
      - checkout
      - attach_workspace:
          at: ~/heads
      - restore_cache:
          keys:
            - x86-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/musl-cross-make.sha256sums" }}{{ .Environment.CACHE_VERSION }}
      - build_board:
          arch: x86
          target: << parameters.target >>
          subcommand: << parameters.subcommand >>
      - persist_to_workspace:
          root: ~/heads
          paths:
            - packages/x86
            - build/x86
            - crossgcc/x86
            - install/x86
      - save_cache:
          key: x86-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/musl-cross-make.sha256sums" }}{{ .Environment.CACHE_VERSION }}
          paths:
            - build/x86/musl-cross-make-fd6be58297ee21fcba89216ccd0d4aca1e3f1c5c
            - crossgcc/x86
            - install/x86
            - packages/x86

  # x86_coreboot: builds a coreboot fork for x86 architecture.
  # - Checks out code for build scripts
  # - Attaches workspace from x86_musl_cross_make (has blobs + musl)
  # - Restores cache with fallbacks:
  #   (modules+coreboot+musl -> coreboot+musl -> musl)
  #   Largest valid cache is first to maximize reuse when multiple keys exist.
  #   Restored build stamps are refreshed before make so source checkout mtimes
  #   do not force a redundant musl-cross-make rebuild.
  #   Do not restore a generic coreboot cache across forks: that can inject
  #   another fork's coreboot build tree (for example z790 into z690).
  # - Builds coreboot firmware for this fork
  # - Persists packages/x86, build/x86, crossgcc/x86, install/x86 to workspace
  # - Saves fork-specific coreboot+toolchain cache, including install/x86 so
  #   the restored cache still contains the musl sysroot used by modules
  # - Optionally saves full modules cache (only on one fork)
  #   This is kept as an escape hatch, but enabling it on the seed job would
  #   extend that job's runtime and delay all downstream jobs that require it.
  # Each distinct coreboot fork uses this: dasharo_nv4x, dasharo_v56, purism, 25.09, 4.11, dasharo_msi_*, etc.
  # Workspace chain: create_hashes -> x86_blobs -> x86_musl_cross_make -> x86_coreboot
  x86_coreboot:
    executor: heads-docker
    parameters:
      target:
        type: string
      subcommand:
        type: string
      coreboot_dir:
        type: string
        description: "The build/x86/coreboot-* directory built by this fork (e.g. coreboot-24.02.01)"
    steps:
      - checkout
      - attach_workspace:
          at: ~/heads
      - restore_cache:
          keys:
            - x86-modules-coreboot-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/all_modules_and_patches.sha256sums" }}{{ .Environment.CACHE_VERSION }}-<< parameters.coreboot_dir >>
            - x86-coreboot-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/coreboot_musl-cross-make.sha256sums" }}{{ .Environment.CACHE_VERSION }}-<< parameters.coreboot_dir >>
            - x86-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/musl-cross-make.sha256sums" }}{{ .Environment.CACHE_VERSION }}
      - build_board:
          arch: x86
          target: << parameters.target >>
          subcommand: << parameters.subcommand >>
      - persist_to_workspace:
          root: ~/heads
          paths:
            - packages/x86
            - build/x86
            - crossgcc/x86
            - install/x86
      - save_cache:
          key: x86-modules-coreboot-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/all_modules_and_patches.sha256sums" }}{{ .Environment.CACHE_VERSION }}-<< parameters.coreboot_dir >>
          paths:
            - build/x86
            - install/x86
            - crossgcc/x86
            - packages/x86
      - save_cache:
          key: x86-coreboot-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/coreboot_musl-cross-make.sha256sums" }}{{ .Environment.CACHE_VERSION }}-<< parameters.coreboot_dir >>
          paths:
            - build/x86/<< parameters.coreboot_dir >>
            - build/x86/musl-cross-make-fd6be58297ee21fcba89216ccd0d4aca1e3f1c5c
            - crossgcc/x86
            - install/x86
            - packages/x86

  # ppc64_musl_cross_make: builds musl-cross-make for ppc64 architecture.
  # - Checks out code for build scripts
  # - Attaches workspace from create_hashes (has tmpDir with hashes)
  # - Restores musl-cross-make cache (keyed on musl-cross-make sources hash)
  # - Builds musl-cross-make toolchain
  # - Persists packages/ppc64, build/ppc64, crossgcc/ppc64, install/ppc64 to workspace
  # - Saves musl-cross-make cache for future runs
  # Workspace chain: create_hashes -> ppc64_musl_cross_make -> ppc64_coreboot
  ppc64_musl_cross_make:
    executor: heads-docker
    parameters:
      target:
        type: string
      subcommand:
        type: string
    steps:
      - checkout
      - attach_workspace:
          at: ~/heads
      - restore_cache:
          keys:
            - ppc64-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/musl-cross-make.sha256sums" }}{{ .Environment.CACHE_VERSION }}
      - build_board:
          arch: ppc64
          target: << parameters.target >>
          subcommand: << parameters.subcommand >>
      - persist_to_workspace:
          root: ~/heads
          paths:
            - packages/ppc64
            - build/ppc64
            - crossgcc/ppc64
            - install/ppc64
      - save_cache:
          key: ppc64-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/musl-cross-make.sha256sums" }}{{ .Environment.CACHE_VERSION }}
          paths:
            - build/ppc64/musl-cross-make-fd6be58297ee21fcba89216ccd0d4aca1e3f1c5c
            - crossgcc/ppc64
            - install/ppc64
            - packages/ppc64

  # ppc64_coreboot: builds coreboot fork for ppc64 architecture (coreboot version: talos_2).
  # - Checks out code for build scripts
  # - Attaches workspace from ppc64_musl_cross_make (has musl toolchain)
  # - Restores cache with fallbacks:
  #   (modules+coreboot+musl -> coreboot+musl -> musl)
  # - Largest valid cache is first to avoid restoring a narrower key when a
  #   fuller cache for the same checksums already exists.
  # - Restored build stamps are refreshed before make for the same reason as x86.
  # - Builds coreboot fork
  # - Persists packages/ppc64, build/ppc64, crossgcc/ppc64, install/ppc64 to workspace
  # - Saves fork-specific coreboot+toolchain cache, including install/ppc64 so
  #   the restored cache still contains the musl sysroot used by modules
  # - Optionally saves full modules cache
  # Workspace chain: create_hashes -> ppc64_musl_cross_make -> ppc64_coreboot
  ppc64_coreboot:
    executor: heads-docker
    parameters:
      target:
        type: string
      subcommand:
        type: string
      coreboot_dir:
        type: string
        description: "The build/ppc64/coreboot-* directory built by this fork (e.g. coreboot-talos_2)"
    steps:
      - checkout
      - attach_workspace:
          at: ~/heads
      - restore_cache:
          keys:
            - ppc64-modules-coreboot-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/all_modules_and_patches.sha256sums" }}{{ .Environment.CACHE_VERSION }}-<< parameters.coreboot_dir >>
            - ppc64-coreboot-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/coreboot_musl-cross-make.sha256sums" }}{{ .Environment.CACHE_VERSION }}-<< parameters.coreboot_dir >>
            - ppc64-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/musl-cross-make.sha256sums" }}{{ .Environment.CACHE_VERSION }}
      - build_board:
          arch: ppc64
          target: << parameters.target >>
          subcommand: << parameters.subcommand >>
      - persist_to_workspace:
          root: ~/heads
          paths:
            - packages/ppc64
            - build/ppc64
            - crossgcc/ppc64
            - install/ppc64
      - save_cache:
          key: ppc64-modules-coreboot-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/all_modules_and_patches.sha256sums" }}{{ .Environment.CACHE_VERSION }}-<< parameters.coreboot_dir >>
          paths:
            - build/ppc64
            - install/ppc64
            - crossgcc/ppc64
            - packages/ppc64
      - save_cache:
          key: ppc64-coreboot-musl-cross-make-nix-docker-heads-{{ checksum "./tmpDir/coreboot_musl-cross-make.sha256sums" }}{{ .Environment.CACHE_VERSION }}-<< parameters.coreboot_dir >>
          paths:
            - build/ppc64/<< parameters.coreboot_dir >>
            - build/ppc64/musl-cross-make-fd6be58297ee21fcba89216ccd0d4aca1e3f1c5c
            - crossgcc/ppc64
            - install/ppc64
            - packages/ppc64

workflows:
  build_and_test:
    max_auto_reruns: 3
    jobs:
      - create_hashes

      # ── x86 blobs ───────────────────────────────────────────────────────
      # Chain: create_hashes -> x86_blobs -> x86_musl_cross_make -> x86_coreboot
      - x86_blobs:
          requires:
            - create_hashes

      # ── ppc64 talos-2 ──────────────────────────────────────────────────
      # Chain: create_hashes -> ppc64_musl_cross_make -> ppc64_coreboot -> firmware
      - ppc64_musl_cross_make:
          name: ppc64-musl-cross-make
          target: UNTESTED_talos-2
          subcommand: "musl-cross-make"
          requires:
            - create_hashes

      - ppc64_coreboot:
          name: ppc64_talos_2
          target: UNTESTED_talos-2
          subcommand: ""
          coreboot_dir: coreboot-talos_2
          requires:
            - ppc64-musl-cross-make

      # ── x86 musl-cross-make seed ──────────────────────────────────────────
      # Chain: x86_blobs -> x86_musl_cross_make -> x86_coreboot seeds
      - x86_musl_cross_make:
          name: x86-musl-cross-make
          target: EOL_t480-hotp-maximized
          subcommand: "musl-cross-make"
          requires:
            - x86_blobs

      # ── x86 coreboot fork seeds ───────────────────────────────────────────
      # Chain: x86_musl_cross_make -> x86_coreboot (linear per fork)
      # Each seed builds its coreboot fork and saves fork-specific cache.
      # No fan-in -> no workspace collision.

      # dasharo_nv4x fork
      - x86_coreboot:
          name: novacustom-nv4x_adl
          target: novacustom-nv4x_adl
          subcommand: ""
          coreboot_dir: coreboot-dasharo_nv4x
          requires:
            - x86-musl-cross-make

      # dasharo_v56 fork
      - x86_coreboot:
          name: novacustom-v560tu
          target: novacustom-v560tu
          subcommand: ""
          coreboot_dir: coreboot-dasharo_v56
          requires:
            - x86-musl-cross-make

      # purism fork
      - x86_coreboot:
          name: librem_14
          target: librem_14
          subcommand: ""
          coreboot_dir: coreboot-purism
          requires:
            - x86-musl-cross-make

        # 25.09 fork
        # Seed workspace for downstream 25.09 boards and x86_save_modules_cache.
      - x86_coreboot:
          name: EOL_t480-hotp-maximized
          target: EOL_t480-hotp-maximized
          subcommand: ""
          coreboot_dir: coreboot-25.09
          requires:
            - x86-musl-cross-make

      # 4.11 fork
      - x86_coreboot:
          name: EOL_librem_l1um
          target: EOL_librem_l1um
          subcommand: ""
          coreboot_dir: coreboot-4.11
          requires:
            - x86-musl-cross-make

      # dasharo_msi_z690 fork
      - x86_coreboot:
          name: UNTESTED_msi_z690a_ddr4
          target: UNTESTED_msi_z690a_ddr4
          subcommand: ""
          coreboot_dir: coreboot-dasharo_msi_z690
          requires:
            - x86-musl-cross-make

      # dasharo_msi_z790 fork
      - x86_coreboot:
          name: UNTESTED_msi_z790p_ddr4
          target: UNTESTED_msi_z790p_ddr4
          subcommand: ""
          coreboot_dir: coreboot-dasharo_msi_z790
          requires:
            - x86-musl-cross-make

      # Those onboarding new boards should add their entries below.
      # coreboot 25.09 boards
      - build:
          name: EOL_x220-hotp-maximized
          target: EOL_x220-hotp-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_x220-maximized
          target: EOL_x220-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_t420-hotp-maximized
          target: EOL_t420-hotp-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_t420-maximized
          target: EOL_t420-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_t430-hotp-maximized
          target: EOL_t430-hotp-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_x230-maximized
          target: EOL_x230-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_optiplex-7010_9010-maximized
          target: EOL_optiplex-7010_9010-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_optiplex-7010_9010-hotp-maximized
          target: EOL_optiplex-7010_9010-hotp-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_optiplex-7010_9010_TXT-maximized
          target: EOL_optiplex-7010_9010_TXT-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_optiplex-7010_9010_TXT-hotp-maximized
          target: EOL_optiplex-7010_9010_TXT-hotp-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      # Runs in parallel with other 25.09 board builds.

      - build:
          name: EOL_x230-hotp-maximized_usb-kb
          target: EOL_x230-hotp-maximized_usb-kb
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_x230-maximized-fhd_edp
          target: EOL_x230-maximized-fhd_edp
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_x230-hotp-maximized-fhd_edp
          target: EOL_x230-hotp-maximized-fhd_edp
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_w530-hotp-maximized
          target: EOL_w530-hotp-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_t430-maximized
          target: EOL_t430-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_w530-maximized
          target: EOL_w530-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_UNTESTED_t530-maximized
          target: EOL_UNTESTED_t530-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_UNTESTED_t530-hotp-maximized
          target: EOL_UNTESTED_t530-hotp-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_t440p-maximized
          target: EOL_t440p-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_t440p-hotp-maximized
          target: EOL_t440p-hotp-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_w541-maximized
          target: EOL_w541-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_w541-hotp-maximized
          target: EOL_w541-hotp-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: qemu-coreboot-fbwhiptail-tpm2-hotp
          target: qemu-coreboot-fbwhiptail-tpm2-hotp
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_z220-cmt-maximized
          target: EOL_z220-cmt-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_z220-cmt-hotp-maximized
          target: EOL_z220-cmt-hotp-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      # librem boards: use coreboot-purism fork (librem_14 builds the fork's toolchain)
      - build:
          name: EOL_librem_13v2
          target: EOL_librem_13v2
          subcommand: ""
          requires:
            - librem_14

      - build:
          name: EOL_librem_15v3
          target: EOL_librem_15v3
          subcommand: ""
          requires:
            - librem_14

      - build:
          name: EOL_librem_13v4
          target: EOL_librem_13v4
          subcommand: ""
          requires:
            - librem_14

      - build:
          name: EOL_librem_15v4
          target: EOL_librem_15v4
          subcommand: ""
          requires:
            - librem_14

      - build:
          name: librem_mini
          target: librem_mini
          subcommand: ""
          requires:
            - librem_14

      - build:
          name: librem_mini_v2
          target: librem_mini_v2
          subcommand: ""
          requires:
            - librem_14

      - build:
          name: librem_11
          target: librem_11
          subcommand: ""
          requires:
            - librem_14

      - build:
          name: librem_l1um_v2
          target: librem_l1um_v2
          subcommand: ""
          requires:
            - librem_14

      # t480 is based on 25.09 coreboot release
      - build:
          name: EOL_t480-maximized
          target: EOL_t480-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_t480s-hotp-maximized
          target: EOL_t480s-hotp-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      - build:
          name: EOL_t480s-maximized
          target: EOL_t480s-maximized
          subcommand: ""
          requires:
            - EOL_t480-hotp-maximized

      # Dasharo nv4x: shares dasharo_nv4x toolchain with novacustom-nv4x_adl
      - build:
          name: UNTESTED_nitropad-ns50
          target: UNTESTED_nitropad-ns50
          subcommand: ""
          requires:
            - novacustom-nv4x_adl

      # NovaCustom v56: shares dasharo_v56 toolchain with novacustom-v560tu
      - build:
          name: novacustom-v540tu
          target: novacustom-v540tu
          subcommand: ""
          requires:
            - novacustom-v560tu

      # coreboot fam15h (AGESA 15h fork)
      - x86_coreboot:
          name: UNTESTED_kgpe-d16_workstation-tpm1
          target: UNTESTED_kgpe-d16_workstation-tpm1
          subcommand: ""
          coreboot_dir: coreboot-15h
          requires:
            - x86-musl-cross-make

      - build:
          name: UNTESTED_kgpe-d16_workstation-tpm2
          target: UNTESTED_kgpe-d16_workstation-tpm2
          subcommand: ""
          requires:
            - UNTESTED_kgpe-d16_workstation-tpm1

      - build:
          name: UNTESTED_kgpe-d16_workstation-usb_keyboard-tpm1
          target: UNTESTED_kgpe-d16_workstation-usb_keyboard-tpm1
          subcommand: ""
          requires:
            - UNTESTED_kgpe-d16_workstation-tpm1

      - build:
          name: UNTESTED_kgpe-d16_workstation-usb_keyboard-tpm2
          target: UNTESTED_kgpe-d16_workstation-usb_keyboard-tpm2
          subcommand: ""
          requires:
            - UNTESTED_kgpe-d16_workstation-tpm1

      - build:
          name: UNTESTED_kgpe-d16_server-tpm1
          target: UNTESTED_kgpe-d16_server-tpm1
          subcommand: ""
          requires:
            - UNTESTED_kgpe-d16_workstation-tpm1

      - build:
          name: UNTESTED_kgpe-d16_server-tpm2
          target: UNTESTED_kgpe-d16_server-tpm2
          subcommand: ""
          requires:
            - UNTESTED_kgpe-d16_workstation-tpm1

      - build:
          name: UNTESTED_kgpe-d16_server-whiptail-tpm1
          target: UNTESTED_kgpe-d16_server-whiptail-tpm1
          subcommand: ""
          requires:
            - UNTESTED_kgpe-d16_workstation-tpm1

      - build:
          name: UNTESTED_kgpe-d16_server-whiptail-tpm2
          target: UNTESTED_kgpe-d16_server-whiptail-tpm2
          subcommand: ""
          requires:
            - UNTESTED_kgpe-d16_workstation-tpm1

      # Dasharo msi_z690: shares dasharo_msi_z690 toolchain with UNTESTED_msi_z690a_ddr4
      - build:
          name: UNTESTED_msi_z690a_ddr5
          target: UNTESTED_msi_z690a_ddr5
          subcommand: ""
          requires:
            - UNTESTED_msi_z690a_ddr4

      # Dasharo msi_z790: shares dasharo_msi_z790 toolchain with UNTESTED_msi_z790p_ddr4
      - build:
          name: msi_z790p_ddr5
          target: msi_z790p_ddr5
          subcommand: ""
          requires:
            - UNTESTED_msi_z790p_ddr4