Page MenuHomePureOS Tracker

kakaroto (Youness Alaoui)
UserEmail Not Verified

Projects

User Details

User Since
Dec 2 2016, 07:44 (153 w, 5 d)

Recent Activity

Sep 27 2018

kakaroto assigned T315: Enable vboot to kyle.rankin.

Kyle, can you evaluate vboot in terms of security, do we need it, do we want it and all that.. so we can decide if we want to add it or not

Sep 27 2018, 14:32 · Librem Coreboot

Aug 13 2018

kakaroto updated subscribers of T451: Please update flashrom package.

Bump. @zlatan.todoric any ETA on how soon can this be done ? @mladen.pejakovic needed to use flashrom yesterday and it wasn't working because it's still outdated, and I realized this hasn't been fixed yet.
Thanks!

Aug 13 2018, 12:45 · Restricted Project

Jul 16 2018

kakaroto closed T510: Coreboot build script fails on Librem 13v1 device as Resolved.

I fixed it by using the old commit hash for the previous microcode. I didn't want to update the microcode since that would mean changing the version (so, changing the config, adding a new tag, rebuilding all, changing coreboot final hashes, changelog, etc..) and I'd like to do it later when I update the FSP for the skylake ones as well, but that one needs testing first and I wanted this fix to be out asap.

Jul 16 2018, 12:08 · Librem Coreboot
kakaroto added a comment to T510: Coreboot build script fails on Librem 13v1 device.

Humm.. I thought that repo was meant to contain an archive of all microcodes, I didn't realize he deleted old ones when new ones are out.
I'll update the link and use the commit hash, I prefer that than having the script break constantly.

Jul 16 2018, 12:00 · Librem Coreboot

Jul 11 2018

kakaroto assigned T451: Please update flashrom package to zlatan.todoric.

Sure, I have no idea how you guys do things, so I'll just assign it to zlatan as suggested. Thanks.

Jul 11 2018, 14:57 · Restricted Project

Jul 10 2018

kakaroto added a comment to T451: Please update flashrom package.

Can someone follow up on this ? That request says "it doesn't have huge changes but it would be nice to have it" is actually wrong since this v1.0 release actually adds Skylake support which is definitely a must-have rather than a nice-to-have feature. (At least for us).

Jul 10 2018, 10:37 · Restricted Project

Jun 4 2018

kakaroto added a comment to T452: Please update coreboot package.

Yes, I know that, but I meant you don't need to build an actual coreboot image, just the utils that come with it.

Jun 4 2018, 10:13 · Restricted Project

Jun 1 2018

kakaroto added a comment to T452: Please update coreboot package.

Yes, it still is required (and it's not handled by the coreboot team). The source package might be 'coreboot' as stated above, but the binary package that I need updated is 'coreboot-utils'.
Thanks

Jun 1 2018, 15:47 · Restricted Project
kakaroto triaged T177: Test/Implement fwupd support as Normal priority.
Jun 1 2018, 11:52 · Librem Coreboot
kakaroto triaged T463: Build coreboot as part of purism-librem-coreboot-updater debian package as High priority.
Jun 1 2018, 11:51 · Librem Coreboot
kakaroto assigned T177: Test/Implement fwupd support to vivia.nikolaidou.
Jun 1 2018, 11:51 · Librem Coreboot
kakaroto created T463: Build coreboot as part of purism-librem-coreboot-updater debian package.
Jun 1 2018, 11:50 · Librem Coreboot
kakaroto assigned T170: Add Librems to flashrom's whitelist to vivia.nikolaidou.
Jun 1 2018, 11:48 · Librem BIOS
kakaroto closed T166: Port Coreboot to L15v2 as Resolved.
Jun 1 2018, 11:46 · Librem Coreboot
kakaroto closed T164: Verify NVMe issues with L13v1 port as Resolved.

I think the issue was found and resolved and tests by Francois haven't been able to reproduce the problem, so i'll consider this done.

Jun 1 2018, 11:46 · Librem Coreboot
kakaroto closed T313: Update/test/release 4.7 as Resolved.
Jun 1 2018, 11:45 · Librem Coreboot

May 28 2018

kakaroto added a comment to T452: Please update coreboot package.

Note: package is coreboot-utils

May 28 2018, 10:28 · Restricted Project

May 23 2018

kakaroto created T444: Update flashrom and coreboot-utils packages.
May 23 2018, 10:41 · Restricted Project

May 22 2018

kakaroto closed T442: Unable to build CoreBoot 4.7 due to missing kernel patch as Resolved.

It's fixed, and tested. Make sure you delete the flashrom directory so it gets checked out cleanly (rm -rf coreboot/flashrom/) then retry, it should work now.

May 22 2018, 13:41
kakaroto added a comment to T442: Unable to build CoreBoot 4.7 due to missing kernel patch.

Yes, it's a library dependency (libusb) while flashrom is being compiled by the script. It's unrelated to the kernel (though the kernel also uses libusb and is affected by the same issue).
It looks like this was fixed in flashrom 11 days ago and the commit is here : https://review.coreboot.org/cgit/flashrom.git/commit/?id=291764a70e6d8b212680e311bfb0825abf2b9a2f
I'm now testing it and I should have it fixed and the script updated within the hour.

May 22 2018, 12:56
kakaroto added a comment to T442: Unable to build CoreBoot 4.7 due to missing kernel patch.

I don't think the patch to the kernel is relevant here since coreboot has nothing to do with the linux kernel. I think the patch needed has to be on the flashrom project itself. I'll have a look and see if that was recently fixed upstream, then I'll update the flashrom we use in the build_coreboot script, and test it.

May 22 2018, 06:49

Feb 24 2018

kakaroto added a comment to T312: Enable Intel SGX or not.

From customer email :

Intel SGX is a technology that provides protection of predefined secrets even in a case of system compromise by creating SGX enclaves. I currently need to run several projects that makes use of SGX on the librem and that's why I need it enabled.
Feb 24 2018, 18:11 · Librem Coreboot

Feb 23 2018

kakaroto closed T314: Enable vboot as Invalid.
Feb 23 2018, 08:53 · Librem Coreboot
kakaroto added a comment to T313: Update/test/release 4.7.

IT's done for l13v2 and l15v3, need to add the iommu patches for broadwell in the branch and test it for l13 v1 as well

Feb 23 2018, 08:52 · Librem Coreboot
kakaroto moved T313: Update/test/release 4.7 from L13v2 to L13v1 on the Librem Coreboot board.
Feb 23 2018, 08:52 · Librem Coreboot
kakaroto closed T179: Test/Enable VT-d support as Resolved.
Feb 23 2018, 08:51 · Librem Coreboot
kakaroto added a comment to T179: Test/Enable VT-d support.

Yep, and we will very gladly do so! thanks for the reminder!

Feb 23 2018, 08:51 · Librem Coreboot

Feb 7 2018

kakaroto added a comment to T315: Enable vboot.

<avph> KaKaRoTo: does purism have any plans on using vboot btw?
<KaKaRoTo> avph, I'm not familiar with it, so I never looked into it. I was asked that same question last week and I opened this task for it : https://tracker.pureos.net/T315
<KaKaRoTo> it's mostly about "what is it? what is it for? do we need it? can we enable it ? etc..."
<KaKaRoTo> avph, so if you're familiar with vboot and want to give us some pointers on that, I'd appreciate it
<nico_h> mostly for a secure update mechanism
<nico_h> so not every malware can write to the flash chip
<avph> well it won't run the malware mostly :)
<nico_h> um, scratch the latter
<KaKaRoTo> nico_h, how does it achieve it? needs a portion of the flash to be read-only, no ? does it use an IFD region for that ?
<KaKaRoTo> does it require a TPM or is it a way to get verified boot without TPM ?
<nico_h> Google uses the write-protection feature and /WP pin of the flash chips
<nico_h> I'm not sure if it requires a TPM (I think only for downgrade protections or something)
<avph> KaKaRoTo: no read only is (or can be) achieved with southbridge registers. TPM is to prevent updates rollback but the secure boot and safe updates are still there
<KaKaRoTo> /WP pin of the flash chip with protect the entire chip, not just a portion of it
<nico_h> no, /WP pin to protected part of the flash chip
<nico_h> usually, /WP only protects the block protection setup of the chip not the whole chip
<nico_h> but... that depends on the chip
<nico_h> KaKaRoTo: the general idea is: 1. have one part RO during runtime (can be achieved with early programming of PCH registers, as avph pointed out). 2. the RO part only runs other (updated) parts if a signature verification worked out
<KaKaRoTo> ok
<KaKaRoTo> I assume the early programming of PCH registers is done by vboot itself already
<avph> not sure but certainly saw stuff like that
<KaKaRoTo> I have this in my TO-READ list, so I'll explore that more later : https://www.coreboot.org/git-docs/Intel/vboot.html
<nico_h> unlikely, as it's mostly only used on chromebooks with the /WP thing

Feb 7 2018, 08:37 · Librem Coreboot

Feb 5 2018

kakaroto added a comment to T177: Test/Implement fwupd support.

You won't taint it because this task/project is about writing a bash script, there's no proprietary bits in the bash script itself. Unless it's about the FSF requirement and the fact that the script itself will manipulate a binary file? Somehow I'm not sure that's a valid reason, considering that the librem-coreboot-updater script is already in PureOS and this task is about porting that script to the fwupd system
Either way, whether it's tagged PureOS or not, a PureOS developer is still probably the best person for the task here.

Feb 5 2018, 12:18 · Librem Coreboot

Jan 29 2018

kakaroto created T315: Enable vboot.
Jan 29 2018, 12:25 · Librem Coreboot
kakaroto created T314: Enable vboot.
Jan 29 2018, 12:25 · Librem Coreboot
kakaroto added a comment to T312: Enable Intel SGX or not.

Oh yeah, here's the changes needed to enable SGX (over commit id 65d2754e1aaa4e90059b65fac3c00d847e2e465f) :

Jan 29 2018, 12:21 · Librem Coreboot
kakaroto created T313: Update/test/release 4.7.
Jan 29 2018, 12:18 · Librem Coreboot
kakaroto created T312: Enable Intel SGX or not.
Jan 29 2018, 12:17 · Librem Coreboot
kakaroto added a comment to T174: Reverse Engineer the MFS partition file format.

The format was reverse engineered by PT at Blackhat 2017 : https://www.blackhat.com/eu-17/briefings.html#intel-me-flash-file-system-explained

Jan 29 2018, 11:58 · Librem BIOS
kakaroto closed T176: cleanup coreboot patches and upstream them as Resolved.
Jan 29 2018, 11:18 · Librem Coreboot
kakaroto triaged T179: Test/Enable VT-d support as High priority.
Jan 29 2018, 11:17 · Librem Coreboot

Dec 1 2017

kakaroto closed T171: Test Skylake neutralized ME as Resolved.
Dec 1 2017, 13:12 · Librem BIOS
kakaroto closed T173: cleanup me_cleaner patches and upstream as Invalid.
Dec 1 2017, 13:11 · Librem BIOS
kakaroto closed T172: cleanup me_cleaner patches and upstream as Resolved.
Dec 1 2017, 13:11 · Librem BIOS
kakaroto added a comment to T172: cleanup me_cleaner patches and upstream.

It's been merged, so yeay!
https://github.com/corna/me_cleaner/pull/70

Dec 1 2017, 13:11 · Librem BIOS
kakaroto added a comment to T189: Figure out gpio stuff from Hannah.

Considered fixed.

Dec 1 2017, 13:08 · Librem Coreboot
kakaroto closed T189: Figure out gpio stuff from Hannah as Resolved.
Dec 1 2017, 13:08 · Librem Coreboot

Nov 23 2017

kakaroto added a comment to T170: Add Librems to flashrom's whitelist.

Thanks a lot @habs for the contribution. I never did that because I also couldn't figure out proper docs on what those 4 PCI IDS should be., but it feels to me like it can be any PCI device on the machine, I just didn't think that they would uniquely identify the librems. I'm now realizing that uniquely identifying via PCI is not needed, but it rather needs to identify with PCI + dmi information, so it's fine as is.
I tested your patch but unfortunately it didn't work, because the ISA bridge doesn't have a subsystem id, so the pci id that worked for me is : {0x8086, 0x9d48, 0, 0, 0x8086, 0x1904, 0x8086, 0x2015}
Did you send the patch to them via gerrit or do you want me to finish it (add the info for librem 13, and for the previous revisions?) then send it in one commit ?

Nov 23 2017, 12:19 · Librem BIOS
kakaroto added a comment to T190: Fix SeaBIOS boot order.

@nicole: SeaBIOS will boot from the M.2 and I think linux will assign 'sda' to the HDD it boots from, no ? If you have a linux installed on the 2.5" and you boot on it, the 2.5" would be seen as "sda" in that case, no ?

Nov 23 2017, 11:51 · Librem BIOS

Oct 30 2017

kakaroto updated the task description for T179: Test/Enable VT-d support.
Oct 30 2017, 13:43 · Librem Coreboot

Oct 16 2017

kakaroto added a comment to T176: cleanup coreboot patches and upstream them.

Patches have been cleaned up and pushed to gerrit.

Oct 16 2017, 11:10 · Librem Coreboot
kakaroto closed T182: Create variant for librem 15v3 as Resolved.
Oct 16 2017, 10:09 · Librem Coreboot
kakaroto added a comment to T182: Create variant for librem 15v3.

Done by @MrChromebox

Oct 16 2017, 10:09 · Librem Coreboot
kakaroto updated subscribers of T167: Fix SATA issues on Skylake.

Fixed by @MrChromebox via FSP2 SATA speed limit option.

Oct 16 2017, 10:08 · Librem Coreboot
kakaroto closed T167: Fix SATA issues on Skylake as Resolved.
Oct 16 2017, 10:07 · Librem Coreboot
kakaroto closed T185: Finish/integrate FSP2 support as Resolved.
Oct 16 2017, 10:07 · Librem Coreboot
kakaroto updated subscribers of T185: Finish/integrate FSP2 support.

Done by @MrChromebox and to be merged upstream soon.

Oct 16 2017, 10:07 · Librem Coreboot
kakaroto added a comment to T165: Add L13v1 support to do build script.

Done, and tested.

Oct 16 2017, 10:06 · Librem Coreboot
kakaroto closed T165: Add L13v1 support to do build script as Resolved.
Oct 16 2017, 10:06 · Librem Coreboot

Oct 10 2017

kakaroto changed the visibility for Librem Coreboot.
Oct 10 2017, 13:03
kakaroto changed the visibility for Librem BIOS.
Oct 10 2017, 13:02

Sep 14 2017

kakaroto created T195: Test HAP bit on various ME versions.
Sep 14 2017, 10:16 · Librem BIOS

Sep 8 2017

kakaroto created T192: Investigate i915 crash for DP lanes.
Sep 8 2017, 11:45 · Librem Coreboot
kakaroto claimed T184: add me_cleaner choice to build_coreboot script.
Sep 8 2017, 11:43 · Librem Coreboot
kakaroto closed T184: add me_cleaner choice to build_coreboot script as Resolved.
Sep 8 2017, 11:42 · Librem Coreboot

Sep 5 2017

kakaroto created T190: Fix SeaBIOS boot order.
Sep 5 2017, 12:43 · Librem BIOS
kakaroto created T189: Figure out gpio stuff from Hannah.
Sep 5 2017, 08:23 · Librem Coreboot
kakaroto closed T168: Fix SATA issues on Skylake as Invalid.
Sep 5 2017, 08:21 · Librem Coreboot
kakaroto closed T169: Fix SATA issues on Skylake as Invalid.
Sep 5 2017, 08:20 · Librem Coreboot

Aug 31 2017

kakaroto added a member for Librem BIOS: MrChromebox.
Aug 31 2017, 12:31
kakaroto added a member for Librem Coreboot: MrChromebox.
Aug 31 2017, 12:30
kakaroto created T185: Finish/integrate FSP2 support.
Aug 31 2017, 12:17 · Librem Coreboot
kakaroto created T184: add me_cleaner choice to build_coreboot script.
Aug 31 2017, 12:15 · Librem Coreboot
kakaroto created T183: add support for l13v2/l15v3 to the coreboot-updater.
Aug 31 2017, 12:13 · Librem Coreboot
kakaroto created T182: Create variant for librem 15v3.
Aug 31 2017, 12:12 · Librem Coreboot
kakaroto moved T176: cleanup coreboot patches and upstream them from Backlog to Generic on the Librem Coreboot board.
Aug 31 2017, 12:10 · Librem Coreboot
kakaroto moved T177: Test/Implement fwupd support from Backlog to Generic on the Librem Coreboot board.
Aug 31 2017, 12:10 · Librem Coreboot
kakaroto moved T181: Port/test libgfxinit for skylake from Generic to L13v2 on the Librem Coreboot board.
Aug 31 2017, 12:10 · Librem Coreboot
kakaroto moved T181: Port/test libgfxinit for skylake from Backlog to Generic on the Librem Coreboot board.
Aug 31 2017, 12:10 · Librem Coreboot
kakaroto created T181: Port/test libgfxinit for skylake.
Aug 31 2017, 12:09 · Librem Coreboot
kakaroto created T180: Verify/fix/test CLKREQ settings for wifi and nvme.
Aug 31 2017, 12:08 · Librem Coreboot
kakaroto created T179: Test/Enable VT-d support.
Aug 31 2017, 12:04 · Librem Coreboot
kakaroto created T178: Free the EC firmware.
Aug 31 2017, 12:01 · Librem BIOS
kakaroto created T177: Test/Implement fwupd support.
Aug 31 2017, 11:58 · Librem Coreboot
kakaroto created T176: cleanup coreboot patches and upstream them.
Aug 31 2017, 11:56 · Librem Coreboot
kakaroto created T175: Test relocation and truncation options for me_cleaner.
Aug 31 2017, 11:53 · Librem BIOS
kakaroto created T174: Reverse Engineer the MFS partition file format.
Aug 31 2017, 11:45 · Librem BIOS
kakaroto created T172: cleanup me_cleaner patches and upstream.
Aug 31 2017, 11:44 · Librem BIOS
kakaroto created T173: cleanup me_cleaner patches and upstream.
Aug 31 2017, 11:44 · Librem BIOS
kakaroto created T171: Test Skylake neutralized ME.
Aug 31 2017, 11:42 · Librem BIOS
kakaroto created T170: Add Librems to flashrom's whitelist.
Aug 31 2017, 11:39 · Librem BIOS
kakaroto created T169: Fix SATA issues on Skylake.
Aug 31 2017, 11:39 · Librem Coreboot
kakaroto created T168: Fix SATA issues on Skylake.
Aug 31 2017, 11:39 · Librem Coreboot
kakaroto created T167: Fix SATA issues on Skylake.
Aug 31 2017, 11:39 · Librem Coreboot
kakaroto created T166: Port Coreboot to L15v2.
Aug 31 2017, 11:37 · Librem Coreboot
kakaroto created T165: Add L13v1 support to do build script.
Aug 31 2017, 11:37 · Librem Coreboot
kakaroto created T164: Verify NVMe issues with L13v1 port.
Aug 31 2017, 11:36 · Librem Coreboot

Jul 26 2017

kakaroto added a comment to T126: OEM image formats wrong hdd?.

Humm, ok,well, it's not intuitive because it asks for confirmation *after* it already repartitioned the disc (and yes, even without reformatting it's bad), but I guess it can be closed since technically, it's OEM and it shouldn't be running on a machine which is not meant to be wiped.. but in that case, just drop the "hdd already has a partition, are you sure you want to delete?" prompt since it's useless.

Jul 26 2017, 15:38 · Restricted Project

Jul 6 2017

kakaroto created T126: OEM image formats wrong hdd?.
Jul 6 2017, 08:09 · Restricted Project

May 20 2017

kakaroto added a comment to T84: set the psmouse proto depending on the trackpad/librem version.

Note: I got it working on the Librem 15. I removed the /etc/modules.d/purism-psmouse.conf and did modprobe -r psmouse && modprobe psmouse, that fixed the multitouch. Note though that on reboot, I had to do the modprobe again because it was loaded with the wrong options by default even if the /etc/modprobe file wasn't there.

May 20 2017, 09:03

May 19 2017

kakaroto added a comment to T84: set the psmouse proto depending on the trackpad/librem version.

My current librem 13 v2 prototype has a fried touchpad, once I receive the final hardware, I'll be able to test and provide proper logs. For now, all I can say is that MrChromeBox who tested it on his prototype said that mouse scrolling/multitouch doesn't work in PureOS but works in GalliumOS. Also, when he tried to remove psmouse module then re-insert it with proto=imps, he said that it broke scrolling in GalliumOS.
The logs I have from before the mouse was fried had this in dmesg :

May 19 2017, 09:48