kgpe-d16: add AGESA 15h fork support with TPM1/TPM2 variants

Add coreboot-15h module pointing to the AGESA-based 15h fork:
  repo:   https://git.15h.org/mrothfuss/coreboot-15h.git
  branch: 4.11_wip-tpm
  commit: 1afdea5572e4908c51c5b4bed43fcdc2a98fd768

Move all four kgpe-d16 boards out of unmaintained_boards/ to boards/ and create
TPM1/TPM2 variants:
  - kgpe-d16_server-tpm1, kgpe-d16_server-tpm2
  - kgpe-d16_workstation-tpm1, kgpe-d16_workstation-tpm2
  - kgpe-d16_server-whiptail-tpm1, kgpe-d16_server-whiptail-tpm2
  - kgpe-d16_workstation-usb_keyboard-tpm1, kgpe-d16_workstation-usb_keyboard-tpm2

Rename coreboot configs to match TPM variant (-tpm1/-tpm2 suffix).

Add coreboot TPM configs:
  - TPM1: CONFIG_TPM1=y, CONFIG_TPM_INIT=y, CONFIG_USER_TPM1=y
  - TPM2: CONFIG_TPM2=y, CONFIG_TPM2_MODE=spt, CONFIG_TPM2_PPI=y, CONFIG_USER_TPM2=y

Add board documentation with 15h.org wiki references:
  - Hardware specs (sockets, chipset, memory, PCIe slots)
  - TPM chip compatibility (SLB9635/SLB9655 for TPM1, SLB9665 for TPM2)
  - VGA_SW1 jumper for display selection
  - Fan control zones (CPUFAN_SEL1, CHAFAN_SEL1)
  - Flashing instructions (CH341a, CMOS clear)
  - BMC console configuration

Add workstation GPU support:
  - Tested: Nvidia GPUs (require NvForcePost=1 for post)
  - Linux config: nouveau, radeon, amdgpu enabled

Fix modules/coreboot typo: fan contol -> fan control

circleci: add kgpe-d16 tpm1 and tpm2 build jobs

Reproduction notes - saving configs in proper format:

./docker_repro.sh make BOARD=$board coreboot.save_in_defconfig_format_backup

./docker_repro.sh make BOARD=$board coreboot.save_in_oldconfig_format_backup

./docker_repro.sh make BOARD=$board linux.save_in_defconfig_format_backup

./docker_repro.sh make BOARD=$board linux.save_in_olddefconfig_format_backup

for board in $(ls -d boards/*/ | grep kgpe | sed 's|boards/||g' | sed 's|/$||g'); do
  ./docker_repro.sh make BOARD=$board coreboot.save_in_defconfig_format_backup
done

Signed-off-by: Thierry Laurion <insurgo@riseup.net>

Author: tlaurion

.circleci/config.yml

@@ -800,7 +800,65 @@ workflows:
           requires:
             - novacustom-v560tu
 
-      # Dasharo msi_z690: shares dasharo_msi_z690 toolchain with UNTESTED_msi_z690a_ddr4
+# Dasharo msi_z690: shares dasharo_msi_z690 toolchain with UNTESTED_msi_z690a_ddr4
+      # coreboot fam15h (AGESA 15h fork)
+      - build:
+          name: kgpe-d16_workstation-tpm1
+          target: kgpe-d16_workstation-tpm1
+          subcommand: ""
+          requires:
+            - x86-musl-cross-make
+
+      - build:
+          name: kgpe-d16_workstation-tpm2
+          target: kgpe-d16_workstation-tpm2
+          subcommand: ""
+          requires:
+            - kgpe-d16_workstation-tpm1
+
+      - build:
+          name: kgpe-d16_workstation-usb_keyboard-tpm1
+          target: kgpe-d16_workstation-usb_keyboard-tpm1
+          subcommand: ""
+          requires:
+            - kgpe-d16_workstation-tpm2
+
+      - build:
+          name: kgpe-d16_workstation-usb_keyboard-tpm2
+          target: kgpe-d16_workstation-usb_keyboard-tpm2
+          subcommand: ""
+          requires:
+            - kgpe-d16_workstation-usb_keyboard-tpm1
+
+      - build:
+          name: kgpe-d16_server-tpm1
+          target: kgpe-d16_server-tpm1
+          subcommand: ""
+          requires:
+            - kgpe-d16_workstation-usb_keyboard-tpm2
+
+      - build:
+          name: kgpe-d16_server-tpm2
+          target: kgpe-d16_server-tpm2
+          subcommand: ""
+          requires:
+            - kgpe-d16_server-tpm1
+
+      - build:
+          name: kgpe-d16_server-whiptail-tpm1
+          target: kgpe-d16_server-whiptail-tpm1
+          subcommand: ""
+          requires:
+            - kgpe-d16_server-tpm2
+
+      - build:
+          name: kgpe-d16_server-whiptail-tpm2
+          target: kgpe-d16_server-whiptail-tpm2
+          subcommand: ""
+          requires:
+            - kgpe-d16_server-whiptail-tpm1
+
+      # dasharo_msi
       - build:
           name: UNTESTED_msi_z690a_ddr5
           target: UNTESTED_msi_z690a_ddr5

boards/kgpe-d16_server-tpm1/kgpe-d16_server-tpm1.config

@@ -0,0 +1,95 @@
+# Configuration for a kgpe-d16_server (TPM1.2 variant)
+# See https://15h.org/index.php/ASUS_KGPE-D16 for full hardware details
+#
+# Hardware:
+# - Board revisions: 1.02G, 1.03G, 1.04, 1.05 (revisions 1.04/1.05 recommended)
+# - Dual socket G34 for AMD Opteron 6200/6300 series (6100 series unsupported)
+# - AMD SR5690 northbridge, AMD SP5100 southbridge
+# - Winbond W83667HG-A Super I/O, ASPEED AST2050 BMC
+# - 16 DDR3 slots (8 channels), up to 512GB ECC UDIMM/RDIMM/LRDIMM
+# - 2 MiB DIP-8 flash socket (W25Q16V) - REPLACE WITH 16 MiB CHIP FOR HEADS
+# - Intel 82574L dual gigabit Ethernet
+#
+# Display:
+# - VGA_SW1 jumper: "Enable" = onboard AST2050 VGA, "Disable" = PCIe GPU
+# - This config uses onboard VGA (text mode) via BMC serial console
+#
+# Fan Control:
+# - CPUFAN_SEL1: CPU fan zone (4-pin PWM recommended)
+# - CHAFAN_SEL1: Chassis fan zone (4-pin PWM recommended)
+# - 3-pin fans will run at 100% in PWM mode
+#
+# TPM:
+# - Infineon SLB9635 (Asus MC01B0-B01)
+# - Infineon SLB9655 (Supermicro AOM-TPM-9655V)
+# - See https://15h.org/index.php/KGPE-D16_(Raptor)#TPM
+#
+# Status:
+# - TPM support still in progress (see 15h.org wiki)
+# - Two black SATA ports are inactive
+# - SeaBIOS does not respond to keyboards behind USB hub
+# - S3 Suspend/Resume unsupported
+# - No microcode included (see Linux panics with latest microcode)
+#   AMD Opteron 6300 series users: ensure OS loads microcode updates
+#
+# Initial flash (REQUIRED):
+# - Stock 2 MiB flash (W25Q16V) is NOT big enough for Heads
+# - MUST replace with 16 MiB flash chip (e.g., W25Q128JV)
+# - Initial flash MUST be done externally (3.3V CH341A SPI programmer)
+# - Chip location: bottom right corner of board (labeled BIOS)
+# - CMOS clear after flashing: move CLRTC1 to 2-3, wait 20s, restore
+# - After initial external flash, internal upgrades work like any other Heads board
+#
+# BMC:
+# - Connect via ttyS1 at 115200n8
+# - https://github.com/osresearch/heads/issues/134#issuecomment-368922440
+#
+# Links:
+# - https://15h.org/index.php/ASUS_KGPE-D16
+# - https://15h.org/index.php/Coreboot-15h
+# - Please contribute documentation to heads-wiki
+
+export CONFIG_COREBOOT=y
+export CONFIG_COREBOOT_VERSION=15h
+export CONFIG_LINUX_VERSION=6.1.8
+
+CONFIG_COREBOOT_CONFIG=config/coreboot-kgpe-d16_server-tpm1.config
+CONFIG_LINUX_CONFIG=config/linux-kgpe-d16_server.config
+
+CONFIG_CRYPTSETUP2=y
+CONFIG_FLASHPROG=y
+CONFIG_FLASHPROG_AST1100=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_DROPBEAR=y
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000E=y
+export CONFIG_LINUX_USB_COMPANION_CONTROLLER=y
+
+export CONFIG_TPM=y
+export CONFIG_DEBUG_OUTPUT=n
+export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
+export CONFIG_TPM2_CAPTURE_PCAP=n
+export CONFIG_QUIET_MODE=y
+export CONFIG_BOOTSCRIPT=/bin/generic-init.sh
+
+# Console: dual output to BMC (ttyS1) and local VGA (tty0)
+export CONFIG_BOOT_KERNEL_ADD="nohz=on console=ttyS1,115200n8 console=tty0"
+export CONFIG_BOOT_RECOVERY_SERIAL="/dev/ttyS0"
+export CONFIG_BOOT_STATIC_IP=192.168.2.3
+
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_REMOVE="plymouth.ignore-serial-consoles"
+export CONFIG_BOARD_NAME="KGPE-D16 Server"
+export CONFIG_USB_BOOT_DEV="/dev/sdb1"
+export CONFIG_FLASH_OPTIONS="flashprog --progress --programmer internal"

boards/kgpe-d16_server-tpm2/kgpe-d16_server-tpm2.config

@@ -0,0 +1,96 @@
+# Configuration for a kgpe-d16_server (TPM2 variant)
+# See https://15h.org/index.php/ASUS_KGPE-D16 for full hardware details
+#
+# Hardware:
+# - Board revisions: 1.02G, 1.03G, 1.04, 1.05 (revisions 1.04/1.05 recommended)
+# - Dual socket G34 for AMD Opteron 6200/6300 series (6100 series unsupported)
+# - AMD SR5690 northbridge, AMD SP5100 southbridge
+# - Winbond W83667HG-A Super I/O, ASPEED AST2050 BMC
+# - 16 DDR3 slots (8 channels), up to 512GB ECC UDIMM/RDIMM/LRDIMM
+# - 2 MiB DIP-8 flash socket (W25Q16V) - REPLACE WITH 16 MiB CHIP FOR HEADS
+# - Intel 82574L dual gigabit Ethernet
+#
+# Display:
+# - VGA_SW1 jumper: "Enable" = onboard AST2050 VGA, "Disable" = PCIe GPU
+# - This config uses onboard VGA (text mode) via BMC serial console
+#
+# Fan Control:
+# - CPUFAN_SEL1: CPU fan zone (4-pin PWM recommended)
+# - CHAFAN_SEL1: Chassis fan zone (4-pin PWM recommended)
+# - 3-pin fans will run at 100% in PWM mode
+#
+# TPM:
+# - Infineon SLB9665 (Asus TPM-L R2.0)
+# - See https://15h.org/index.php/KGPE-D16_(Raptor)#TPM
+#
+# Status:
+# - TPM support still in progress (see 15h.org wiki)
+# - Two black SATA ports are inactive
+# - SeaBIOS does not respond to keyboards behind USB hub
+# - S3 Suspend/Resume unsupported
+# - No microcode included (see Linux panics with latest microcode)
+#   AMD Opteron 6300 series users: ensure OS loads microcode updates
+#
+# Initial flash (REQUIRED):
+# - Stock 2 MiB flash (W25Q16V) is NOT big enough for Heads
+# - MUST replace with 16 MiB flash chip (e.g., W25Q128JV)
+# - Initial flash MUST be done externally (3.3V CH341A SPI programmer)
+# - Chip location: bottom right corner of board (labeled BIOS)
+# - CMOS clear after flashing: move CLRTC1 to 2-3, wait 20s, restore
+# - After initial external flash, internal upgrades work like any other Heads board
+#
+# BMC:
+# - Connect via ttyS1 at 115200n8
+# - https://github.com/osresearch/heads/issues/134#issuecomment-368922440
+#
+# Links:
+# - https://15h.org/index.php/ASUS_KGPE-D16
+# - https://15h.org/index.php/Coreboot-15h
+# - Please contribute documentation to heads-wiki
+
+export CONFIG_COREBOOT=y
+export CONFIG_COREBOOT_VERSION=15h
+export CONFIG_LINUX_VERSION=6.1.8
+
+CONFIG_COREBOOT_CONFIG=config/coreboot-kgpe-d16_server-tpm2.config
+CONFIG_LINUX_CONFIG=config/linux-kgpe-d16_server.config
+
+CONFIG_CRYPTSETUP2=y
+CONFIG_OPENSSL=y
+CONFIG_FLASHPROG=y
+CONFIG_FLASHPROG_AST1100=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_DROPBEAR=y
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000E=y
+export CONFIG_LINUX_USB_COMPANION_CONTROLLER=y
+
+export CONFIG_TPM=y
+export CONFIG_TPM2=y
+export CONFIG_DEBUG_OUTPUT=n
+export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
+export CONFIG_TPM2_CAPTURE_PCAP=n
+export CONFIG_QUIET_MODE=y
+export CONFIG_BOOTSCRIPT=/bin/generic-init.sh
+
+# Console: dual output to BMC (ttyS1) and local VGA (tty0)
+export CONFIG_BOOT_KERNEL_ADD="nohz=on console=ttyS1,115200n8 console=tty0"
+export CONFIG_BOOT_RECOVERY_SERIAL="/dev/ttyS0"
+export CONFIG_BOOT_STATIC_IP=192.168.2.3
+
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_REMOVE="plymouth.ignore-serial-consoles"
+export CONFIG_BOARD_NAME="KGPE-D16 Server TPM2"
+export CONFIG_USB_BOOT_DEV="/dev/sdb1"
+export CONFIG_FLASH_OPTIONS="flashprog --progress --programmer internal"

boards/kgpe-d16_server-whiptail-tpm1/kgpe-d16_server-whiptail-tpm1.config

@@ -0,0 +1,97 @@
+# Configuration for a kgpe-d16_server with whiptail (TPM1.2 variant)
+# See https://15h.org/index.php/ASUS_KGPE-D16 for full hardware details
+#
+# Hardware:
+# - Board revisions: 1.02G, 1.03G, 1.04, 1.05 (revisions 1.04/1.05 recommended)
+# - Dual socket G34 for AMD Opteron 6200/6300 series (6100 series unsupported)
+# - AMD SR5690 northbridge, AMD SP5100 southbridge
+# - Winbond W83667HG-A Super I/O, ASPEED AST2050 BMC
+# - 16 DDR3 slots (8 channels), up to 512GB ECC UDIMM/RDIMM/LRDIMM
+# - 2 MiB DIP-8 flash socket (W25Q16V) - REPLACE WITH 16 MiB CHIP FOR HEADS
+# - Intel 82574L dual gigabit Ethernet
+#
+# Display:
+# - VGA_SW1 jumper: "Enable" = onboard AST2050 VGA, "Disable" = PCIe GPU
+# - This config uses onboard VGA (text mode) via BMC serial console
+#
+# Fan Control:
+# - CPUFAN_SEL1: CPU fan zone (4-pin PWM recommended)
+# - CHAFAN_SEL1: Chassis fan zone (4-pin PWM recommended)
+# - 3-pin fans will run at 100% in PWM mode
+#
+# TPM:
+# - Infineon SLB9635 (Asus MC01B0-B01)
+# - Infineon SLB9655 (Supermicro AOM-TPM-9655V)
+# - See https://15h.org/index.php/KGPE-D16_(Raptor)#TPM
+#
+# Status:
+# - TPM support still in progress (see 15h.org wiki)
+# - Two black SATA ports are inactive
+# - SeaBIOS does not respond to keyboards behind USB hub
+# - S3 Suspend/Resume unsupported
+# - No microcode included (see Linux panics with latest microcode)
+#   AMD Opteron 6300 series users: ensure OS loads microcode updates
+#
+# Initial flash (REQUIRED):
+# - Stock 2 MiB flash (W25Q16V) is NOT big enough for Heads
+# - MUST replace with 16 MiB flash chip (e.g., W25Q128JV)
+# - Initial flash MUST be done externally (3.3V CH341A SPI programmer)
+# - Chip location: bottom right corner of board (labeled BIOS)
+# - CMOS clear after flashing: move CLRTC1 to 2-3, wait 20s, restore
+# - After initial external flash, internal upgrades work like any other Heads board
+#
+# BMC:
+# - Connect via ttyS1 at 115200n8
+# - https://github.com/osresearch/heads/issues/134#issuecomment-368922440
+#
+# Links:
+# - https://15h.org/index.php/ASUS_KGPE-D16
+# - https://15h.org/index.php/Coreboot-15h
+# - Please contribute documentation to heads-wiki
+
+export CONFIG_COREBOOT=y
+export CONFIG_COREBOOT_VERSION=15h
+export CONFIG_LINUX_VERSION=6.1.8
+
+CONFIG_COREBOOT_CONFIG=config/coreboot-kgpe-d16_server-whiptail-tpm1.config
+CONFIG_LINUX_CONFIG=config/linux-kgpe-d16_server-whiptail.config
+
+CONFIG_CRYPTSETUP2=y
+CONFIG_FLASHPROG=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_DROPBEAR=y
+
+CONFIG_SLANG=y
+CONFIG_NEWT=y
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000E=y
+export CONFIG_LINUX_USB_COMPANION_CONTROLLER=y
+
+export CONFIG_TPM=y
+export CONFIG_DEBUG_OUTPUT=n
+export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
+export CONFIG_TPM2_CAPTURE_PCAP=n
+export CONFIG_QUIET_MODE=y
+export CONFIG_BOOTSCRIPT=/bin/gui-init.sh
+
+# Console: BMC serial console output
+export CONFIG_BOOT_KERNEL_ADD="nohz=on console=ttyS1,115200n8 "
+export CONFIG_BOOT_RECOVERY_SERIAL="/dev/ttyS0"
+export CONFIG_BOOT_STATIC_IP=192.168.2.3
+
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_REMOVE="plymouth.ignore-serial-consoles"
+export CONFIG_BOARD_NAME="KGPE-D16 Server-whiptail"
+export CONFIG_USB_BOOT_DEV="/dev/sdb1"
+export CONFIG_FLASH_OPTIONS="flashprog --progress --programmer internal"