Libreboot Thinkpad T480 с Raspberry Pi Pico

Как прошить Libreboot на Thinkpad T480 извне с помощью Raspberry Pi Pico.

Вот детали и инструменты, которые я использовал:
Raspberry Pi Pico
Jumper wires
Pomona 5250 SOIC-8 clip
Screwdriver
Opening tool
Another computer to build and flash libreboot
Kingston Fury RAM 2x32GB (KF432S20IBK2/64)

Ресурсы:
Libreboot homepage: https://libreboot.org
Libreboot T480 instructions: https://libreboot.org/docs/install/t480.html
Прошивка Libreboot по интерфейсу SPI: https://libreboot.org/docs/install/spi.html

Все команды, которые я выполнил в видео.

Lenovo BIOS Update
BIOS Settings:
Disable - Thunderbolt Assist
Disable - Secure Rollback Prevention
Enable - Flash BIOS Updating by End Users
Disable - Windows UEFI Firmware Update
Disable - Secure boot
Both - UEFI/Legacy boot
Legacy First - UEFI/Legacy Boot Priority
Yes - CSM Support

Обновление BIOS Lenovo

wget https://download.lenovo.com/pccbbs/mobiles/n24ur39w.iso
geteltorito -o t480_bios_update.img /T480/n24ur39w.iso
dd if=t480_bios_update.img of=/dev/sdb bs=4M conv=fsync status=progress

Установите Git
sudo apt install git

Настройте Git
git config --global user.name "John Doe"
git config --global user.email [email protected]


Build libreboot
git clone https://codeberg.org/libreboot/lbmk
cd lbmk
export XBMK_THREADS=4
./mk dependencies mint
./mk -b coreboot t480_vfsp_16mb

Build flashprog
./mk -b flashprog

Build pico-serprog
wget https://mirrors.mit.edu/libreboot/stable/20241206/roms/libreboot-20241206rev9_serprog_pico.tar.xz
tar -xvf libreboot-20241206rev9_serprog_pico.tar.xz

Inject vendor files
wget https://mirrors.mit.edu/libreboot/stable/20241206/roms/libreboot-20241206rev8_t480_vfsp_16mb.tar.xz
./mk inject libreboot-RELEASE_targetname.tar.xz

Flash Thunderbolt
flashprog -p serprog:dev=/dev/ttyACM0 -r ../../../t480tb1.bin
flashprog -p serprog:dev=/dev/ttyACM0 -r ../../../t480tb2.bin
sha512sum ../../../t480tb*.bin (MAKE SURE BOTH HASHES MATCH)
flashprog -p serprog:dev=/dev/ttyACM0 -E
dd if=/dev/zero of=null.bin bs=1M count=1
flashprog -p serprog:dev=/dev/ttyACM0 -w null.bin
NOW, REMOVE the clip. Button it back up and turn the T480 on, with both the battery and the charger connected, plugging in the battery first.
flashprog -p serprog:dev=/dev/ttyACM0 -w ../../vendorfiles/t480/tb.bin
NOW, REMOVE the clip. Button it back up and turn the T480 on, with both the battery and the charger connected, plugging in the battery first.

Flash libreboot external with pico
cd ../..
tar -xvf libreboot-20241206rev8_t480_vfsp_16mb.tar.xz
cd elf/flashprog
sudo ./flashprog -p serprog:dev=/dev/ttyACM0 -r ../../../t480bios1.rom
sudo ./flashprog -p serprog:dev=/dev/ttyACM0 -r ../../../t480bios2.rom
sha512sum ../../../t480bios*.rom (MAKE SURE BOTH HASHES MATCH)
sudo ./flashprog -p serprog:dev=/dev/ttyACM0 -w ../../bin/t480_vfsp_16mb/libreboot-20241206rev8_t480_vfsp_16mb_libgfxinit_corebootfb_usqwerty.rom

ГЛАВЫ---------------------------------------------------
0:00 Интро
0:12 T480 Технические характеристики
1:02 Обновление BIOS от Lenovo
4:20 Сборка утилит Libreboot
4:56 Настройка Pico для прошивки SPI
7:50 Инжектируйте файлы поставщиков
8:54 Прошивка микропрограммы Thunderbolt
13:47 Флеш Libreboot
16:33 Установка обновлений
17:44 Аутро

перевод канала @DeviceCastingCouchTechPodcast