linuxboot / heads

A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.
https://osresearch.net/
GNU General Public License v2.0
1.41k stars 186 forks source link

x230 flashed top-chip.How to proceed from here? #901

Closed ghost closed 3 years ago

ghost commented 3 years ago

@tlaurion @MrChromebox ,I just flashed Heads onto the top_chip of the x230.For that I went into builds/x230-flash and flashed x230-flash.rom.Now when I start the x230 I get into Heads-recovery-shell.How do I proceed from here?When plugging in the USBdrive that has the second Heads.rom on it,which needs to be installed internally,typing "cd /media" and then "ls" it shows no content,although there are some files on the USBdrive.

Edit:Before flashing Heads on the x230,I cleared the keys of the security-chip in the Lenovo-Bios.But I didn't take ownership.On the x220 I cleared the keys and took ownership with tpm-tools before flashing Heads.

ghost commented 3 years ago

I got the USBdrive mounted and now I see all the files on it.But I don't know if I do have to take ownership of TPM first before Heads could work.

ghost commented 3 years ago

@tlaurion @MrChromebox ,I installed the 12MB Heads-rom and it worked,got the running Bios signed with GPGkeys that were on an USBdrive.GPGkeys showing up on the keyring.But it turned out that setting up the TOTP wasn't possible because I didn't set up a password for the TPM in the Lenovo Bios before installing Heads.So I have to reflash Lenovo Bios again to set up the password for TPM.Before installing Heads I made backups of the vendor firmware of both chips.What would be the flashrom command in order reflash the Lenovo Bios?By the way,before installing Heads I cleaned ME following the tutorial on osresearch.net.

What would be the flashrom command for that

tlaurion commented 3 years ago

@userongihu : you have to reset TPM from Heads' TPM menu under options menu.

ghost commented 3 years ago

@tlaurion,thank you.I could set up TPM inside Heads.Everything works now.