| Age | Commit message (Collapse) | Author |
|---|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
The AFL website[1] states the following:
Note: AFL hasn't been updated for a couple of years; while it
should still work fine, a more complex fork with a variety of
improvements and additional features, known as AFL++, is available
from other members of the community and might be worth checking
out.
[1]https://lcamtuf.coredump.cx/afl/
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
|
|
To create the deblobbed tarball, the following files from lbml were
modified by bill-auger (and pastebined on #parabola on liberachat):
- resources/scripts/build/release/u-boot-libre
- resources/scripts/download/u-boot
So to enable users to recreate (and potentially modify) the packages
it's a good idea to at least add these (modified) files in git.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
I asked bill-auger to push his modifications so he uploaded the
packages to libre-testing and the PKGBUILD modifications to abslibre.
Since the pakcages have been uploaded to libre-testing it's better to
move them here.
While the code is not ready yet, it enables users to test the new
u-boot which fixes the Ethernet PHY. From linux-sunxi we have[1]:
Proper fix for rev. F and newer is to apply trace length
compensation at the PHY.
This is done by default (also for rev. H and newer despite commit
message mentioning only realtek not Micrel) since mainline linux
v5.15 and since mainline u-boot v2022.04;
[1]https://linux-sunxi.org/Olimex_A20-OLinuXino-Lime2#calibrate_at_PHY
That page also has more background on the issue being fixed here
(basically making all the various Lime 2 A20 revisions (which have
different Ethernet PHY) work with the same u-boot binary / package.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
The installer uses tar to extract the downloaded tarball.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
|
|
|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
Before this change, the armv7h build failed
Signed-off-by: David P <megver83@parabola.nu>
|
|
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
|
|
|
|
|
|
|
|
|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
Without that fix, with libremakepkg we have:
==> Downloading sources...
| ==> ERROR: install file (linux-libre-vanilla-chromebook.install) does not exist or is not a regular file.
| ==> ERROR: Could not download sources.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
This new kernel enables to test if maintaining a kernel without
additional patches is easier and faster:
- Not having to refresh patches makes it faster to update the
kernel. And the procedure to liberate the Arch Linux patches is also
not documented (though with trial and errors someone can relatively
easy manage to do it, but that's time consuming).
- Some of the patches are never upstreamed so they stay there for
years. This also means that what work in Parabola is broken in other
FSDG compliant distributions because they don't use these patches.
In addition this kernel also enable users to test their hardware with
a stock linux-libre kernel. In the past the armv7h Parabola kernel
carried out patches to make capes work on the Beaglebone Single Board
Computers.
This made me think that this feature was upstream because it worked in
Parabola. The patches to do that were removed at some point so it
stopped working. So if I started relying on it it would have been a
very bad idea as it would have stopped working without even a warning.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
This reverts commit fb2a4cae9a6d07a7fa69e6382f2ce11f6d6a8497.
|
|
This panel is present in the Nokia n900 smartphone. While this
smartphone is not officially supported by Parabola (it has a nonfree
bootloader on the device, and it also only has 256M of RAM so its use
is limited), this still enable users to make its display work if they
install Parabola on it.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
I didn't do pacman -Sy before checking so now there is a
mobile-broadband-provider-info pacage for ARM.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
The 'CUSTOM' license comes from this COPYING file:
THIS WORK IS IN PUBLIC DOMAIN:
The person or persons who have associated work with this document
(the "Dedicator" or "Certifier") hereby either (a) certifies that, to the best
of his knowledge, the work of authorship identified is in the public domain of
the country from which the work is published, or (b) hereby dedicates whatever
copyright the dedicators holds in the work of authorship identified below
(the "Work") to the public domain. A certifier, moreover, dedicates any
copyright interest he may have in the associated work, and for these purposes,
is described as a "dedicator" below.
A certifier has taken reasonable steps to verify the copyright status of this
work. Certifier recognizes that his good faith efforts may not shield him from
liability if in fact the work certified is not in the public domain.
Dedicator makes this dedication for the benefit of the public at large and to
the detriment of the Dedicator's heirs and successors. Dedicator intends this
dedication to be an overt act of relinquishment in perpetuity of all present
and future rights under copyright law, whether vested or contingent, in the
Work. Dedicator understands that such relinquishment of all rights includes the
relinquishment of all rights to enforce (by lawsuit or otherwise) those
copyrights in the Work.
Dedicator recognizes that, once placed in the public domain, the Work may be
freely reproduced, distributed, transmitted, used, modified, built upon, or
otherwise exploited by anyone for any purpose, commercial or non-commercial,
and in any way, including by methods that have not yet been invented or
conceived.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
|
|
Update patches for some notable changes:
1. about:devtools has been removed upstream, see [1]
2. security.pki.crlite_mode property value has been changed to 3 by
default by upstream, but we still disable it. This disablement is
still up for discussion, please refer to the appropriate commit message
from 9001-FSDG-sync-remote-settings-with-local-dump.patch
3. Remove promos of Firefox Focus and Klar from Private Browsing page
which appeared in this release (Klar for Germany, Focus for other
locations)
Also update existing patching of "More from Mozilla" anti-feature to
actually remove SVG files with QR codes that lead to nonfree software.
[1] https://bugzilla.mozilla.org/show_bug.cgi?id=1609100
|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
Signed-off-by: David P <megver83@parabola.nu>
|
|
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
Without that fix it still builds fine with makepkg but it fails
because python-setuptool is missing:
| Traceback (most recent call last):
| File "/build/libreboot-utils/src/libreboot-20211122_src/coreboot/default/util/me_cleaner/setup.py", line 3, in <module>
| from setuptools import setup
| ModuleNotFoundError: No module named 'setuptools'
| ==> ERROR: A failure occurred in build().
| Aborting...
In addition the 'python' package provides 'python3', but it's probably
more clear if we use the 'python' package as dependency instead of
what it provides.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
* revised nsswitch.conf rules for systemd
* arch dropped the empty motd;
so i added a pretty one for parabola instead
* added VARIANT_ID to the os-release file
as a reliable way to determine the init-system
the rest of the changes were only to minimize the diff
against the arch PKGBUILD
|
|
|
|
Recent (post 2006) Intel computers typically have a flash chip that
contains several partitions:
- An "Intel flash descriptor" partition that contains a partition
table, permission settings for read/write access to these
partitions. various configuration settings like the flash chip
speed, and so on.
- A partition for the BIOS that contains the BIOS, Coreboot, EFI,
Libreboot, UEFI, etc.
- A partition for the Management Engine firmware.
- A partition for some Gigabit Ethernet settings (the MAC address,
LEDs settings, etc).
- A partition named "Platform data" that probably contains some serial
numbers or other data on some computers.
The ifdtool utility can display these partitions, various settings
present in Intel flash descriptor, extract or replace these partitions
content, etc.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
Recent (post 2006) Intel computers typically have a flash chip that
contains several partitions:
- A partition that contains a partition table, permission settings
for read/write access to these partitions. various configuration
settings like the flash chip speed, and so on.
- A partition for the BIOS that contains the BIOS, Coreboot, EFI,
Libreboot, UEFI, etc.
- A partition for the Management Engine firmware.
- A partition for some Gigabit Ethernet settings (the MAC address,
LEDs settings, etc).
- A partition named "Platform data" that probably contains some serial
numbers or other data on some computers.
The Management Engine firmware is signed, so its code cannot be
modified. However the Management Engine firmware also contains its own
partitioning scheme, and it's possible to remove some of its partitions
in a way that enable computers to still boot and function normally.
The me_cleaner utility can do that (so it still lives part of the
Management Engine code or Operating system).
The me_cleaner can also tell the Management Engine OS (with
--soft-disable), that once its booted, it should not try to load
additional applications.
In addition me_cleaner can also verify the Management Engine firmware
signatures.
Note that me_cleaner cannot be used to completely remove the
Management Engine firmware. To do that you need to use Libreboot
instead. Libreboot removes completely the Management Engine
firmware. However the method used by Libreboot only works with
computers with the Intel GM45 chipset.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
This utility enables to dump the registers of various chips (CPU,
chipset, etc) on Intel computers.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
The cbmem utility enables to retrieve the Coreboot and Libreboot boot
logs. This requires Coreboot or Libreboot to be built with
CONFIG_CONSOLE_CBMEM=y to work.
In addition cbmem also supports retrieving additional boot information
like timestamps (which requires CONFIG_COLLECT_TIMESTAMPS=y), and so
on.
GRUB also has a cbmem console, so if configured to use it we can also
retrieve the GRUB boot log.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
The bincfg utility enable to convert various binary formats to text
file and vice-versa.
It supports the GM45 Intel Flash Descriptor (IFD) which is contains
the flash chip partition table and various settings including
read/write permissions for the various flash partitions.
Beware when changing the values in ways that have not been tested
before as it could lead to non-booting computers. This is for instance
the case when trying to set the BIOS partition read-only for all "CPUs"
(Management Engine, main CPU, and Gigabit Ethernet).
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
When building Coreboot or Libreboot with CONFIG_SPKMODEM, the boot
messages data is encoded as sound and sent to the sound card.
To receive them you can record them with another computer (and ideally
you need an audio cable for that and to make sure that the volume is
not too low or not too high), and you can then decode them in real
time with a command similar to that one:
parec --channels=1 --rate=48000 --format=s16le | spkmodem-recv
This also works with grub spkmodem console output.
Note that the messages speed is relatively slow, so if you build
Coreboot or Libreboot with that option, your boot might take a long
time (like 30min for instance) if you have a lot of messages.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
This makes sure that all the tools are installed. Some tools like
cbfstool also have other tools like fmaptool that are really useful.
fmaptool can be used to work with Chromebook images for instance.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
The warning about bucts was removed as in fact most of these tools are
probably dangerous in one way or another if used improperly.
Flashrom which is packaged in most GNU/Linux distributions is also very
dangerous if used improperly, though it comes with warnings and safe
defaults.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
Now that it builds for all architectures we can also ship it.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
|
On i686, cbfstool wasn't build because it failed to compile, and on
armv7h, the build fail with an error similar to this one:
host/lib/extract_vmlinuz.c: In function ‘ExtractVmlinuz’:
host/lib/extract_vmlinuz.c:67:9: warning:
‘memcpy’ specified bound between 2147483648 and 4294967295
exceeds maximum object size 2147483647 [-Wstringop-overflow=]
67 | memcpy(vmlinuz, kpart_data + vmlinuz_header_offset,
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
68 | vmlinuz_header_size);
| ~~~~~~~~~~~~~~~~~~~~
This fixes that build error and enables cbfstool to be built on all the
architectures supported by Parabola.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
|
