heads/boards/UNTESTED_kgpe-d16_server-tpm2/UNTESTED_kgpe-d16_server-tpm2.config at e76c8f383522f3f3b4e6a12d859c5309781f7fea · linuxboot/heads · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
# Configuration for a kgpe-d16_server (TPM2 variant)
# See https://15h.org/index.php/ASUS_KGPE-D16 for full hardware details
#
# Hardware:
# - Board revisions: 1.02G, 1.03G, 1.04, 1.05 (revisions 1.04/1.05 recommended)
# - Dual socket G34 for AMD Opteron 6200/6300 series (6100 series unsupported)
# - AMD SR5690 northbridge, AMD SP5100 southbridge
# - Winbond W83667HG-A Super I/O, ASPEED AST2050 BMC
# - 16 DDR3 slots (8 channels), up to 512GB ECC UDIMM/RDIMM/LRDIMM
# - 2 MiB DIP-8 flash socket (W25Q16V) - REPLACE WITH 16 MiB CHIP FOR HEADS
# - Intel 82574L dual gigabit Ethernet
#
# Display:
# - VGA_SW1 jumper: "Enable" = onboard AST2050 VGA, "Disable" = PCIe GPU
# - This config uses BMC serial console only (ttyS1, 115200) - headless server
# - No VGA output, connect via BMC IPMI SOL
#
# Fan Control:
# - CPUFAN_SEL1: CPU fan zone (4-pin PWM recommended)
# - CHAFAN_SEL1: Chassis fan zone (4-pin PWM recommended)
# - 3-pin fans will run at 100% in PWM mode
#
# TPM:
# - Infineon SLB9665 (Asus TPM-L R2.0)
# - See https://15h.org/index.php/KGPE-D16_(Raptor)#TPM
#
# Status:
# - TPM support still in progress (see 15h.org wiki)
# - Two black SATA ports are inactive
# - SeaBIOS does not respond to keyboards behind USB hub
# - S3 Suspend/Resume unsupported
# - No microcode included (see Linux panics with latest microcode)
#   AMD Opteron 6300 series users: ensure OS loads microcode updates
#
# Initial flash (REQUIRED):
# - Stock 2 MiB flash (W25Q16V) is NOT big enough for Heads
# - MUST replace with 16 MiB flash chip (e.g., W25Q128JV)
# - Initial flash MUST be done externally (3.3V CH341A SPI programmer)
# - Chip location: bottom right corner of board (labeled BIOS)
# - CMOS clear after flashing: move CLRTC1 to 2-3, wait 20s, restore
# - After initial external flash, internal upgrades work like any other Heads board
#
# BMC:
# - Connect via ttyS1 at 115200n8
# - https://github.com/osresearch/heads/issues/134#issuecomment-368922440
#
# Links:
# - https://15h.org/index.php/ASUS_KGPE-D16
# - https://15h.org/index.php/Coreboot-15h
# - Please contribute documentation to heads-wiki

export CONFIG_COREBOOT=y
export CONFIG_COREBOOT_VERSION=15h
export CONFIG_LINUX_VERSION=6.1.8

CONFIG_COREBOOT_CONFIG=config/coreboot-kgpe-d16_server-tpm2.config
CONFIG_LINUX_CONFIG=config/linux-kgpe-d16_server.config

CONFIG_CRYPTSETUP2=y
CONFIG_OPENSSL=y
CONFIG_FLASHPROG=y
CONFIG_FLASHPROG_AST1100=y
CONFIG_FLASHTOOLS=y
CONFIG_GPG2=y
CONFIG_KEXEC=y
CONFIG_UTIL_LINUX=y
CONFIG_LVM2=y
CONFIG_MBEDTLS=y
CONFIG_PCIUTILS=y
CONFIG_POPT=y
CONFIG_QRENCODE=y
CONFIG_TPMTOTP=y
CONFIG_DROPBEAR=y

CONFIG_LINUX_USB=y
CONFIG_LINUX_E1000E=y
export CONFIG_LINUX_USB_COMPANION_CONTROLLER=y

export CONFIG_TPM=y
export CONFIG_TPM2=y
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
export CONFIG_TPM2_CAPTURE_PCAP=n
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/generic-init.sh

# Console: dual output to BMC (ttyS1) and local VGA (tty0)
export CONFIG_BOOT_KERNEL_ADD="nohz=on console=ttyS1,115200n8 console=tty0"
export CONFIG_BOOT_RECOVERY_SERIAL="/dev/ttyS0"
export CONFIG_BOOT_STATIC_IP=192.168.2.3

export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
export CONFIG_BOOT_KERNEL_REMOVE="plymouth.ignore-serial-consoles"
export CONFIG_BOARD_NAME="KGPE-D16 Server TPM2"
export CONFIG_USB_BOOT_DEV="/dev/sdb1"
export CONFIG_FLASH_OPTIONS="flashprog --progress --programmer internal"