boards: Add Star Labs Heads targets

.circleci/config.yml

@@ -262,7 +262,7 @@ jobs:
   #   See doc/circleci.md for full documentation.
   # Workspace chain: create_hashes -> x86_blobs -> x86_musl_cross_make -> x86_coreboot
   # Seeds (one per unique toolchain): coreboot-4.11, coreboot-25.09,
-  #   coreboot-dasharo_nv4x, coreboot-purism
+  #   coreboot-dasharo_nv4x, coreboot-purism, coreboot-starlabs_2607
   # Dasharo v56/msi_z690/msi_z790 are build jobs, not x86_coreboot.
   x86_coreboot:
     executor: heads-docker
@@ -527,6 +527,113 @@ workflows:
           requires:
             - x86-musl-cross-make [cross compiler]
 
+      # Star Labs 26.07 fork
+      - x86_coreboot:
+          name: starlabs_lite_adl [seed:coreboot-starlabs_2607]
+          target: starlabs_lite_adl
+          subcommand: ""
+          coreboot_dir: coreboot-starlabs_2607
+          requires:
+            - x86-musl-cross-make [cross compiler]
+
+      - build:
+          name: starlabs_adl_horizon
+          target: starlabs_adl_horizon
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_byte_adl
+          target: starlabs_byte_adl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_byte_cezanne
+          target: starlabs_byte_cezanne
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_byte_twl
+          target: starlabs_byte_twl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_labtop_cml
+          target: starlabs_labtop_cml
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_qemu
+          target: starlabs_qemu
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starbook_adl
+          target: starlabs_starbook_adl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starbook_adl_n
+          target: starlabs_starbook_adl_n
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starbook_cezanne
+          target: starlabs_starbook_cezanne
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starbook_mtl
+          target: starlabs_starbook_mtl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starbook_rpl
+          target: starlabs_starbook_rpl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starbook_tgl
+          target: starlabs_starbook_tgl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starfighter_mtl
+          target: starlabs_starfighter_mtl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starfighter_rpl
+          target: starlabs_starfighter_rpl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
       # ── coreboot 25.09 boards (alphabetical) ───────────────────────────────
       - build:
           name: EOL_m900_tower-hotp-maximized

Makefile

@@ -470,7 +470,14 @@ define define_module =
   $(eval $1_module_file = $(or $($1_module_file),$1))
 
   ifneq ("$($1_repo)","")
-    $(eval $1_patch_name = $1$(if $($1_patch_version),-$($1_patch_version),))
+    $(eval $1_patch_name = $(or $($1_patch_name_override),$1$(if $($1_patch_version),-$($1_patch_version),)))
+    $(eval $1_patch_files := $(sort \
+		$(wildcard patches/$($1_patch_name).patch) \
+		$(wildcard patches/$($1_patch_name)/*.patch)))
+    $(eval $1_patch_hash := $(shell \
+		if [ -n "$($1_patch_files)" ]; then \
+			sha256sum $($1_patch_files); \
+		fi | sha256sum | cut -d' ' -f1))
     # First time:
     #   Checkout the tree instead and create the canary file with repo and
     #   revision so that we know that the files are all present and their
@@ -530,36 +537,32 @@ define define_module =
 		echo "INFO: Updating .canary file with new repo info" && \
 		echo -n '$($1_repo)|$($1_commit_hash)' > "$$@" ; \
 	fi
-	if [ ! -e "$(build)/$($1_base_dir)/.patched" ]; then \
-		echo "INFO: .patched file not found. Beginning patch application for $1" && \
+	if ! printf '%s\n' '$($1_patch_hash)' | cmp -s - "$(build)/$($1_base_dir)/.patched"; then \
+		echo "INFO: Patch set changed. Resetting and applying patches for $1" && \
+		git -C "$(build)/$($1_base_dir)" reset --hard $($1_commit_hash) && \
+		git -C "$(build)/$($1_base_dir)" clean -dfx -e .canary && \
 		if [ -r patches/$($1_patch_name).patch ]; then \
 			echo "INFO: Applying single patch file: patches/$($1_patch_name).patch" && \
-			if ! git apply --verbose --reject --binary --directory build/$(CONFIG_TARGET_ARCH)/$($1_base_dir) < patches/$($1_patch_name).patch; then \
-				echo "ERROR: Failed to apply patch: patches/$($1_patch_name).patch. Reversing and reapplying." && \
-				git apply --reverse --verbose --reject --binary --directory build/$(CONFIG_TARGET_ARCH)/$($1_base_dir) < patches/$($1_patch_name).patch || true && \
-				git apply --verbose --reject --binary --directory build/$(CONFIG_TARGET_ARCH)/$($1_base_dir) < patches/$($1_patch_name).patch || exit 1; \
-			fi; \
+			git apply --verbose --reject --binary --directory build/$(CONFIG_TARGET_ARCH)/$($1_base_dir) < patches/$($1_patch_name).patch || exit 1; \
 		fi; \
 		if [ -d patches/$($1_patch_name) ]; then \
 			echo "INFO: Applying multiple patch files from directory: patches/$($1_patch_name)" && \
 			for patch in patches/$($1_patch_name)/*.patch; do \
 				echo "INFO: Applying patch file: $$$$patch" && \
-				if ! git apply --verbose --reject --binary --directory build/$(CONFIG_TARGET_ARCH)/$($1_base_dir) < "$$$$patch"; then \
-					echo "ERROR: Failed to apply patch: $$$$patch. Reversing and reapplying." && \
-					git apply --reverse --verbose --reject --binary --directory build/$(CONFIG_TARGET_ARCH)/$($1_base_dir) < "$$$$patch" || true && \
-					git apply --verbose --reject --binary --directory build/$(CONFIG_TARGET_ARCH)/$($1_base_dir) < "$$$$patch" || exit 1; \
-				fi; \
+				git apply --verbose --reject --binary --directory build/$(CONFIG_TARGET_ARCH)/$($1_base_dir) < "$$$$patch" || exit 1; \
 			done; \
 		fi; \
-		echo "INFO: Patches applied successfully. Creating .patched file." && \
-		touch "$(build)/$($1_base_dir)/.patched"; \
+		echo "INFO: Patches applied successfully. Updating .patched file." && \
+		printf '%s\n' '$($1_patch_hash)' > "$(build)/$($1_base_dir)/.patched.tmp" && \
+		mv "$(build)/$($1_base_dir)/.patched.tmp" "$(build)/$($1_base_dir)/.patched" && \
+		touch "$$@"; \
 	fi
   else
     # Versioned modules (each version a separate module) don't need to include
     # the version a second time.  (The '-' separator is also omitted then.)
     # $1_patch_version can still be defined manually.
     $(eval $1_patch_version ?= $(if $(filter %-$($1_version),$1),,$($1_version)))
-    $(eval $1_patch_name = $1$(if $($1_patch_version),-,)$($1_patch_version))
+    $(eval $1_patch_name = $(or $($1_patch_name_override),$1$(if $($1_patch_version),-,)$($1_patch_version)))
     # Fetch and verify the source tar file
     # wget creates it early, so we have to cleanup if it fails
     $(packages)/$($1_tar):

boards/starlabs/common.config

@@ -0,0 +1,44 @@
+# Common Star Labs Heads configuration.
+export CONFIG_COREBOOT=y
+export CONFIG_COREBOOT_VERSION=starlabs_2607
+export CONFIG_LINUX_VERSION=6.1.8
+
+CONFIG_LINUX_CONFIG=config/linux-starlabs-common.config
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000=y
+CONFIG_MOBILE_TETHERING=y
+
+CONFIG_CRYPTSETUP2=y
+CONFIG_FLASHPROG=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+
+CONFIG_TPM2_TSS=y
+CONFIG_OPENSSL=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_HOTPKEY=y
+
+CONFIG_CAIRO=y
+CONFIG_FBWHIPTAIL=y
+
+export CONFIG_AUTO_BOOT_TIMEOUT=5
+export CONFIG_TPM2_TOOLS=y
+export CONFIG_PRIMARY_KEY_TYPE=ecc
+export CONFIG_DEBUG_OUTPUT=n
+export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
+export CONFIG_TPM2_CAPTURE_PCAP=n
+export CONFIG_QUIET_MODE=y
+export CONFIG_BOOTSCRIPT=/bin/gui-init.sh
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_ADD=""
+export CONFIG_BOOT_KERNEL_REMOVE="quiet rhgb splash"
+export CONFIG_KEYBOARD_KEYMAP="/usr/lib/kbd/keymaps/i386/qwerty/us.map"

boards/starlabs/compact-intel.config

@@ -0,0 +1,5 @@
+# Space-constrained Intel boards retain the deferred platform lock.
+include $(pwd)/boards/starlabs/compact.config
+
+CONFIG_IO386=y
+export CONFIG_FINALIZE_PLATFORM_LOCKING=y

boards/starlabs/compact.config

@@ -0,0 +1,23 @@
+# Space-constrained physical Star Labs boards retain the graphical Heads UI,
+# GPG verification, TPM2 tools, flash tools, USB storage, and kexec.
+include $(pwd)/boards/starlabs/physical.config
+
+# Omit encrypted-storage, enrollment, filesystem-maintenance, networking, and
+# tools that do not fit alongside recovery and measured boot.
+CONFIG_BUSYBOX_COMPACT=y
+CONFIG_CRYPTSETUP2=n
+CONFIG_LVM2=n
+CONFIG_TPMTOTP=n
+CONFIG_HOTPKEY=n
+CONFIG_QRENCODE=n
+CONFIG_MOBILE_TETHERING=n
+CONFIG_MBEDTLS=n
+CONFIG_PCIUTILS=n
+CONFIG_PCIUTILS_LIB_ONLY=y
+CONFIG_POPT=n
+CONFIG_UTIL_LINUX=n
+CONFIG_EXFATPROGS=n
+CONFIG_E2FSPROGS=n
+CONFIG_KBD=n
+CONFIG_KBD_LOADKEYS=n
+CONFIG_LINUX_E1000=n

boards/starlabs/physical-intel.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical.config
+
+CONFIG_IO386=y
+export CONFIG_FINALIZE_PLATFORM_LOCKING=y

boards/starlabs/physical.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/common.config
+
+# Keep the descriptor, ME, EC, SMMSTORE and per-unit data out of internal updates.
+export CONFIG_FLASH_OPTIONS="flashprog --progress --programmer internal --fmap -i COREBOOT"

boards/starlabs_adl_horizon/starlabs_adl_horizon.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_adl_horizon.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Horizon"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook\ Horizon

boards/starlabs_byte_adl/starlabs_byte_adl.config

@@ -0,0 +1,5 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_byte_adl.config
+export CONFIG_BOARD_NAME="Star Labs Byte Mk II"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=Byte
+export CONFIG_USB_KEYBOARD_REQUIRED=y

boards/starlabs_byte_cezanne/starlabs_byte_cezanne.config

@@ -0,0 +1,6 @@
+include $(pwd)/boards/starlabs/compact.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_byte_cezanne.config
+export CONFIG_STARLABS_AMD_BINARIES=y
+export CONFIG_BOARD_NAME="Star Labs Byte Mk I"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=Byte
+export CONFIG_USB_KEYBOARD_REQUIRED=y

boards/starlabs_byte_twl/starlabs_byte_twl.config

@@ -0,0 +1,5 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_byte_twl.config
+export CONFIG_BOARD_NAME="Star Labs Byte Mk III"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=Byte
+export CONFIG_USB_KEYBOARD_REQUIRED=y

boards/starlabs_labtop_cml/starlabs_labtop_cml.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_labtop_cml.config
+export CONFIG_BOARD_NAME="Star Labs LabTop Mk IV"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=LabTop

boards/starlabs_lite_adl/starlabs_lite_adl.config

@@ -0,0 +1,22 @@
+# Star Labs StarLite Mk V (Lite ADL).
+# Initial installation and recovery require an external SPI programmer.
+# https://support.starlabs.systems/hc/star-labs/articles/starlite-mk-v-installingrecovering-firmware-with-external-programmer
+include $(pwd)/boards/starlabs/physical-intel.config
+
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_lite_adl.config
+
+export CONFIG_BOARD_NAME="Star Labs StarLite Mk V"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarLite
+export CONFIG_USB_KEYBOARD_REQUIRED=y
+
+# The fixed COREBOOT region cannot contain the full Heads package set.
+CONFIG_CRYPTSETUP2=n
+CONFIG_LVM2=n
+CONFIG_MOBILE_TETHERING=n
+CONFIG_POPT=n
+CONFIG_UTIL_LINUX=n
+CONFIG_EXFATPROGS=n
+CONFIG_E2FSPROGS=n
+CONFIG_KBD=n
+CONFIG_KBD_LOADKEYS=n
+CONFIG_LINUX_E1000=n

boards/starlabs_qemu/starlabs_qemu.config

@@ -0,0 +1,14 @@
+# Star Labs software gate. This uses the same coreboot fork, Linux kernel,
+# userspace, graphical UI, and TPM2 stack as the physical targets.
+include $(pwd)/boards/starlabs/common.config
+
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_qemu.config
+CONFIG_LINUX_CONFIG=config/linux-qemu.config
+CONFIG_MOBILE_TETHERING=n
+
+export CONFIG_BOARD_NAME=qemu-starlabs
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=starlabs_qemu
+export CONFIG_BOOT_RECOVERY_SERIAL="/dev/ttyS0"
+export CONFIG_BOOT_KERNEL_ADD="console=ttyS0 console=tty systemd.zram=0 debug"
+
+BOARD_TARGETS := qemu

boards/starlabs_starbook_adl/starlabs_starbook_adl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_adl.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VI (Alder Lake)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_adl_n/starlabs_starbook_adl_n.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_adl_n.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VII (Alder Lake-N)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_cezanne/starlabs_starbook_cezanne.config

@@ -0,0 +1,5 @@
+include $(pwd)/boards/starlabs/compact.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_cezanne.config
+export CONFIG_STARLABS_AMD_BINARIES=y
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VI (Cezanne)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_mtl/starlabs_starbook_mtl.config

@@ -0,0 +1,7 @@
+# StarBook Mk VII (Meteor Lake) proof board.
+include $(pwd)/boards/starlabs/physical-intel.config
+
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_mtl.config
+
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VII (Meteor Lake)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_rpl/starlabs_starbook_rpl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_rpl.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VI (Raptor Lake)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_tgl/starlabs_starbook_tgl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_tgl.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk V"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starfighter_mtl/starlabs_starfighter_mtl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starfighter_mtl.config
+export CONFIG_BOARD_NAME="Star Labs StarFighter Mk II"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarFighter

boards/starlabs_starfighter_rpl/starlabs_starfighter_rpl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starfighter_rpl.config
+export CONFIG_BOARD_NAME="Star Labs StarFighter Mk I"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarFighter