PC Engines apu coreboot Open Source Firmware v4.9.0.4

Key changes - Mainline

Added possibility to reboot platform with coldboot path to ensure full platform reset during remote firmware update, option is intended to mitigate reboot issue when migrating from BIOS version older than v4.9.0.x. For detail how to safely update firmware remotely, please refer to the documentation.
Updated SeaBIOS to rel-1.12.1.1 with new TPM menu option. For details how to use the menu options for TPM please refer to the documentation.
Rebased with official coreboot repository commit 28def8b.
Created a repository structure for apu2-documentatation repository for better overview of the contents inside the documentation repository.
Performed comprehensive research of fastboot capability for PC Engines platforms. The outcome is available here. In short, it is not possible to achieve Intel like fastboot feature, which allows to skip full memory training during boot using stored configuration in MRC cache. That is also an official AMD statement, that the fastboot is possible only during S3 wakeup.
We have been reached by our customers with a question about ROCA TPM vulnerability for Infineon SLB9665 chips present on TPM1a modules. The engineers verified that the TPMs are vulnerable. For details and mitigation refer to the documentation. The document describes how to upgrade TPM firmware and get rid of the vulnerability.
Added a list of supported and verified mPCIe modules. The list also describes known issues with modules and workarounds to get the modules working properly. Please check the list when encountered any issues with mPCIe modules. Contribution is welcome. Also be sure to check whether the slot is compatible with the module. In order to do so, look at the interfaces connected to each mPCIe slot here and the interfaces required by the module in its product specification etc.

Statistics

The chart shows the total files changed from release tag against the rebase point of given release specified in CHANGELOG (CHANGELOG.md and gitlab-ci.yml excluded from statistics). Check the statistics with:

git diff --stat 7a732b4 ':(exclude)gitlab-ci.yml' ':(exclude)CHANGELOG.md'

The chart represents the total line added and deleted on the PC Engines coreboot fork against the rebase point for a given release. Check the statistics with:

git diff --stat 7a732b4 ':(exclude)gitlab-ci.yml' ':(exclude)CHANGELOG.md'

Two files have not been included in the diff as mentioned above since they are not a part of coreboot tree.

Testing

PC Engines hardware configuration matrix - hardware configurations available for testing in 3mdeb laboratory.
PC Engines release validation results - please note there are separate sheets for each board-release.

Test changes in this release:

Added automatic test for ROCA TPM vulnerability (1 test-case)
- more information about ROCA: link1, link2
Added Quectel EP06 and WLE1216V5-20 modems detection tests (3 test-cases)
Added Wake On Lan feature verification test (1 test-case)
Added bootorder verification test (1 test-case)
Added CPB (Core Performance Boost) enable/disable tests (3 test-cases)
Fixed test regarding booting Xen over iPXE (boot and login problem)
Verified OPNsense installation on all bootable devices (OS-table)
Improved cooling system in the 3mdeb laboratory (better platforms stability)

Aggregated test results

Mainline:
- PASSED: 341 (+23)
- FAILED: 11 (-3)
- PASSED [%]: 96,88% (+1.1%)

The improvement of the PASSED tests coverage results from adding 9 test-cases and populating all Ethernet ports in PC Engines platforms in the rack infrastructure (some test-cases are now supported by all tested platforms).

Reggresion issue tables

Unresolved:

Issue	Brief Description	coreboot	Affected Version	Platform
29	Some USB 3x sticks may not appear in boot menu	Both	from 4.6.10/4.0.18	All
30	APU4 USB port issue	Both	from 4.6.10/4.0.18	Apu4
64	Reboot/Post hang	Both	from 4.0.17/4.6.10	All
109	XEN booting is unstable	Both	from 4.0.17/4.8.0.3	All
115	Some PCIe cards may not be detected on certain OSes	Mailnine	4.9.0.1	Apu2

Download the latest firmware

See how to verify the signatures on asciinema

For more information about documentation, releases and issues, please visit PC Engines firmware release page and PC Engines GitHub.

Our mailing address is:
3mdeb Embedded Systems Consulting
ul. Burgaska 9D/10
Gdańsk 80-287
Poland

Add us to your address book

Want to change how you receive these emails?
You can update your preferences or unsubscribe from this list.

This email was sent to <<Email Address>>
why did I get this? unsubscribe from this list update subscription preferences
3mdeb Embedded Systems Consulting · ul. Burgaska 9D/10 · Gdańsk 80-287 · Poland