coreboot icon indicating copy to clipboard operation
coreboot copied to clipboard

TALOS II's coreboot's buildgcc : change IASL_ARCHIVE link to point to intel, same hash

Open tlaurion opened this issue 2 years ago • 0 comments

Similar to #366 but applied to Talos II release 0.7. Point release needed : 0.7.1

Note that Heads doesn't point to the coreboot hash as it was on release.


suggested workflow for point release:

  • [ ] Merge under dasharo/coreboot fork Dasharo:raptor-cs_talos-2/rel_v0.7.1
  • [ ] Have commit updated under https://github.com/osresearch/heads/blob/02c3a1f9ee270403a962fd826ade28d642a232fb/modules/coreboot#L47 to match coreboot commit under Heads PR
    • [ ] Have that PR remove current mitigation patches, present under https://github.com/osresearch/heads/tree/master/patches/coreboot-talos_2 and applied on top of coreboot-git directory as per https://github.com/osresearch/heads/blob/02c3a1f9ee270403a962fd826ade28d642a232fb/modules/coreboot#L46
  • [ ] Have PR merged under Heads (tested for no regression on Heads side)
  • [ ] Do Dasharo release, pointing to good Heads used coreboot hash, with Heads version matching the commit ID pointing to good coreboot fork under https://docs.dasharo.com/variants/talos_2/releases/ notes

Doing so, SBOM would be valid. Otherwise, BOM is invalid. Heads coreboot's hash won't match what is in your release. (as of now for 0.7)

tlaurion avatar Aug 04 '23 20:08 tlaurion