<div dir="ltr">Sad to hear Coreboot cannot provide this info. Is there some downstream project I don't know about that could provide this?<div><br></div><div>Maybe Google will take pity on the poor Chromebooks and provide some kind of firmware update themselves after the EoL.</div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><br></div><div>--emi<br></div></div></div></div>
<br><div class="gmail_quote">On Thu, Oct 13, 2016 at 10:35 PM, Matt DeVillier <span dir="ltr"><<a href="mailto:matt.devillier@gmail.com" target="_blank">matt.devillier@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">but then you get into the situation where coreboot (org) is providing hashes for binary firmware it didn't build / isn't providing / can't easily validate. And pulling that from a live system like is done with board status isn't easily done, for multiple reasons. That's one of the reasons for the "rom-o-matic" GSoC project (where users would provide the blobs, and a firmware image would be build in real-time using a known good commit hash, config, etc), but I'm not sure the status on that<div><br></div><div>Funny you mention the C710, as I'll be releasing updated firmware for it, both UEFI and Legacy versions, supporting both SB/IVB variants, in the next few days. You will be able to reproduce it yourself using my posted sources, build scripts, and the blobs extracted from my firmware.</div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 13, 2016 at 2:22 PM, Emilian Bold <span dir="ltr"><<a href="mailto:emilian.bold@gmail.com" target="_blank">emilian.bold@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Just listing SHA hashes of the recommended ROMs for a given Chromebook would be an improvement.<div><br></div><div>The hash is sufficient to verify a build / download. But it has to come from Coreboot.</div><div><br></div><div>Actually, this would be a nice project for someone from Google.</div><div><br></div><div>I can only volunteer testing a build on my Acer C710 (which is probably the only Chromebook with upgradeable RAM and disk).</div><div><br></div></div><div class="gmail_extra"><br clear="all"><div><div class="m_-8326323586976384236m_-1459874160769950135gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><br></div><div>--emi<br></div></div></div></div><div><div class="m_-8326323586976384236h5">
<br><div class="gmail_quote">On Thu, Oct 13, 2016 at 6:49 PM, Matt DeVillier <span dir="ltr"><<a href="mailto:matt.devillier@gmail.com" target="_blank">matt.devillier@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">well, in order for that to happen, someone would have to take ownership of that - are you volunteering? =)<div><br></div><div>There's also the issue of blobs that can't be redistributed, which is AIUI one of the reasons why coreboot doesn't offer compiled firmware. Additionally, some models (ie, Chomeboxes) require persistence of parts of the stock firmware in order to maintain their unique ethernet MAC address, so having users simply download and manually flash a compiled firmware manually is highly suboptimal. This is why I implemented the flashing script (well that, and to provide some basic sanity checks that users weren't flashing the wrong firmware, had write-protect disabled, etc)</div></div><div class="m_-8326323586976384236m_-1459874160769950135HOEnZb"><div class="m_-8326323586976384236m_-1459874160769950135h5"><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 13, 2016 at 10:14 AM, Emilian Bold <span dir="ltr"><<a href="mailto:emilian.bold@gmail.com" target="_blank">emilian.bold@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I think EoL Chromebooks are a good opportunity for Coreboot to present itself to end users.<div><br></div><div>Right now Chromebooks use Coreboot but nobody knows that.</div><div><br></div><div>But once a Chromebook reaches EoL people will either throw it away or use it with the insecure and outdated browser version they have until it breaks.</div><div><br></div><div>People would appreciate that it's possible to keep the device and use a modern Linux with up-to-date browser by only installing a dedicated Coreboot ROM.</div><div><br></div><div>A per-device wiki page would be great! Something to show how to install it, etc.</div><div><br></div><div>A ROM sha-256 (and a link) is also essential to know what to grab (or if your build was good).</div><div><br></div><div>I'm actually the one that started the reproducible builds thread last time precisely because I could not get the same ROM image as the ones posted online and I was wondering what I did wrong and if I would brick my laptop or not.</div><div><br></div></div><div class="gmail_extra"><br clear="all"><div><div class="m_-8326323586976384236m_-1459874160769950135m_-2357324037384418172m_5357072345583465645gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><br></div><div>--emi<br></div></div></div></div><div><div class="m_-8326323586976384236m_-1459874160769950135m_-2357324037384418172h5">
<br><div class="gmail_quote">On Thu, Oct 13, 2016 at 5:53 PM, Matt DeVillier <span dir="ltr"><<a href="mailto:matt.devillier@gmail.com" target="_blank">matt.devillier@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Emi,<div><br></div><div>I think this is what you're looking for: <a href="https://www.coreboot.org/Supported_Motherboards" target="_blank">https://www.coreboot.org/<wbr>Supported_Motherboards</a></div><div>It contains the commit hash, build config, and a few other logs for each device/commit. It is user submitted though, since there doesn't exist a test setup for every supported device.</div><div><br></div><div>Right now, I'm the main builder/distributor of upstream coreboot firmware for ChromeOS devices; I support all Haswell, Broadwell, and some Baytrail devices, the former with both UEFI and Legacy Boot variants. When time permits, I'll expand that to cover the rest of the Baytrail devices, then move on to adding support for Skylake. No plans for Braswell support unless I acquire a device on which to test.</div><div><br></div><div>John Lewis has some upstream firmware for the older SandyBridge/IvyBridge models, but his Haswell firmware is build from Google's tree/branches not upstream. He also has no plans for any future upstream firmware.</div><div><br></div><div>cheers,<br>Matt</div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="m_-8326323586976384236m_-1459874160769950135m_-2357324037384418172m_5357072345583465645h5">On Thu, Oct 13, 2016 at 6:49 AM, Emilian Bold <span dir="ltr"><<a href="mailto:emilian.bold@gmail.com" target="_blank">emilian.bold@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="m_-8326323586976384236m_-1459874160769950135m_-2357324037384418172m_5357072345583465645h5"><div dir="ltr">Hello,<div><br></div><div>Now that Coreboot has reproducible builds, could you provide a list of build hashes for Chromebooks that are or will soon reach End of Life?</div><div><br></div><div>I see on <a href="https://support.google.com/chrome/a/answer/6220366?hl=en" target="_blank">https://support.google.com/<wbr>chrome/a/answer/6220366?hl=en</a> <wbr>that 2 Chromebooks will reach End of Life in 2016 and 3 more in 2017 then 7 in 2018. I assume the number will increase each year.</div><div><br></div><div>I know that Coreboot does not distribute builds, but the little Custom roms section on <a href="https://www.coreboot.org/users.html" target="_blank">https://www.coreboot.org/us<wbr>ers.html</a> seems insufficient.</div><div><br></div><div>It's easy making a build, you just need to have the certainty you did it well. Or that the one you are downloading is correct.</div><div><br></div><div>Posting an official SHA-256 hash for a ROM would solve this.<br clear="all"><div><div class="m_-8326323586976384236m_-1459874160769950135m_-2357324037384418172m_5357072345583465645m_1806676478886462297m_4448321613720898651gmail_signature"><div dir="ltr"><div><br></div><div>--emi<br></div></div></div></div>
</div></div>
<br></div></div><span class="m_-8326323586976384236m_-1459874160769950135m_-2357324037384418172m_5357072345583465645HOEnZb"><font color="#888888">--<br>
coreboot mailing list: <a href="mailto:coreboot@coreboot.org" target="_blank">coreboot@coreboot.org</a><br>
<a href="https://www.coreboot.org/mailman/listinfo/coreboot" rel="noreferrer" target="_blank">https://www.coreboot.org/mailm<wbr>an/listinfo/coreboot</a><br></font></span></blockquote></div><br></div>
</blockquote></div><br></div></div></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div></div></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>