boards: Add Star Labs StarLite Mk V

.circleci/config.yml

@@ -262,7 +262,7 @@ jobs:
   #   See doc/circleci.md for full documentation.
   # Workspace chain: create_hashes -> x86_blobs -> x86_musl_cross_make -> x86_coreboot
   # Seeds (one per unique toolchain): coreboot-4.11, coreboot-25.09,
-  #   coreboot-dasharo_nv4x, coreboot-purism
+  #   coreboot-dasharo_nv4x, coreboot-purism, coreboot-starlabs_2607
   # Dasharo v56/msi_z690/msi_z790 are build jobs, not x86_coreboot.
   x86_coreboot:
     executor: heads-docker
@@ -527,6 +527,15 @@ workflows:
           requires:
             - x86-musl-cross-make [cross compiler]
 
+      # Star Labs 26.07 fork
+      - x86_coreboot:
+          name: starlabs_lite_adl [seed:coreboot-starlabs_2607]
+          target: starlabs_lite_adl
+          subcommand: ""
+          coreboot_dir: coreboot-starlabs_2607
+          requires:
+            - x86-musl-cross-make [cross compiler]
+
       # ── coreboot 25.09 boards (alphabetical) ───────────────────────────────
       - build:
           name: EOL_m900_tower-hotp-maximized

boards/starlabs/common.config

@@ -0,0 +1,44 @@
+# Common Star Labs Heads configuration.
+export CONFIG_COREBOOT=y
+export CONFIG_COREBOOT_VERSION=starlabs_2607
+export CONFIG_LINUX_VERSION=6.1.8
+
+CONFIG_LINUX_CONFIG=config/linux-starlabs-common.config
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000=y
+CONFIG_MOBILE_TETHERING=y
+
+CONFIG_CRYPTSETUP2=y
+CONFIG_FLASHPROG=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+
+CONFIG_TPM2_TSS=y
+CONFIG_OPENSSL=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_HOTPKEY=y
+
+CONFIG_CAIRO=y
+CONFIG_FBWHIPTAIL=y
+
+export CONFIG_AUTO_BOOT_TIMEOUT=5
+export CONFIG_TPM2_TOOLS=y
+export CONFIG_PRIMARY_KEY_TYPE=ecc
+export CONFIG_DEBUG_OUTPUT=n
+export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
+export CONFIG_TPM2_CAPTURE_PCAP=n
+export CONFIG_QUIET_MODE=y
+export CONFIG_BOOTSCRIPT=/bin/gui-init.sh
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_ADD=""
+export CONFIG_BOOT_KERNEL_REMOVE="quiet rhgb splash"
+export CONFIG_KEYBOARD_KEYMAP="/usr/lib/kbd/keymaps/i386/qwerty/us.map"

boards/starlabs/physical-intel.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical.config
+
+CONFIG_IO386=y
+export CONFIG_FINALIZE_PLATFORM_LOCKING=y

boards/starlabs/physical.config

@@ -0,0 +1,5 @@
+include $(pwd)/boards/starlabs/common.config
+
+# Keep the descriptor, ME, EC, SMMSTORE and per-unit data out of internal updates.
+export CONFIG_FLASH_OPTIONS="flashprog --progress --programmer internal --fmap -i COREBOOT"
+export CONFIG_CBFS_VIA_FLASHPROG=y

boards/starlabs_lite_adl/starlabs_lite_adl.config

@@ -0,0 +1,22 @@
+# Star Labs StarLite Mk V (Lite ADL).
+# Initial installation and recovery require an external SPI programmer.
+# https://support.starlabs.systems/hc/star-labs/articles/starlite-mk-v-installingrecovering-firmware-with-external-programmer
+include $(pwd)/boards/starlabs/physical-intel.config
+
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_lite_adl.config
+
+export CONFIG_BOARD_NAME="Star Labs StarLite Mk V"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarLite
+export CONFIG_USB_KEYBOARD_REQUIRED=y
+
+# The fixed COREBOOT region cannot contain the full Heads package set.
+CONFIG_CRYPTSETUP2=n
+CONFIG_LVM2=n
+CONFIG_MOBILE_TETHERING=n
+CONFIG_POPT=n
+CONFIG_UTIL_LINUX=n
+CONFIG_EXFATPROGS=n
+CONFIG_E2FSPROGS=n
+CONFIG_KBD=n
+CONFIG_KBD_LOADKEYS=n
+CONFIG_LINUX_E1000=n

config/coreboot-starlabs_lite_adl.config

@@ -0,0 +1,20 @@
+CONFIG_USE_UEFI_VARIABLE_STORE=y
+CONFIG_VENDOR_STARLABS=y
+# CONFIG_POST_IO is not set
+CONFIG_HAVE_IFD_BIN=y
+CONFIG_BOARD_STARLABS_LITE_ADL=y
+# Required by the Heads CBFS/IFD validator; the board FMD is authoritative.
+CONFIG_CBFS_SIZE=0x400000
+CONFIG_EC_STARLABS_ADD_ITE_BIN=y
+# CONFIG_BOOTMEDIA_SMM_BWP is not set
+CONFIG_TPM_MEASURED_BOOT=y
+CONFIG_SOC_INTEL_COMMON_SPI_LOCKDOWN_SMM=y
+# CONFIG_INTEL_CHIPSET_LOCKDOWN is not set
+CONFIG_HAVE_ME_BIN=y
+CONFIG_LOCK_MANAGEMENT_ENGINE=y
+CONFIG_SMMSTORE=y
+CONFIG_BOOTMEDIA_LOCK_CONTROLLER=y
+CONFIG_MAINBOARD_SERIAL_NUMBER="I500000"
+CONFIG_PAYLOAD_LINUX=y
+CONFIG_PAYLOAD_FILE="@BOARD_BUILD_DIR@/bzImage"
+CONFIG_LINUX_INITRD="@BOARD_BUILD_DIR@/initrd.cpio.xz"