m900 tower port (rebased on tpm1_fixes with DA lockout gating)#2118

Open

tlaurion wants to merge 40 commits into

m900_with_tpm1_fixes

Commits on May 16, 2026

initrd: fix TPM1 counter auth regression and defend lock cascade failure
tlaurion
committed

Commits on May 19, 2026

initrd/etc/gui_functions.sh: use return 1 instead of exit 1 on USB abort
tlaurion
committed
initrd/bin/tpmr.sh: improve tpm1_da_state feedback when DA state unavailable
tlaurion
committed
initrd/bin/tpmr.sh: report TPM spec revision and vendor when DA state unavailable
tlaurion
committed
initrd/bin/tpmr.sh: fix hex-to-decimal conversion in DA state feedback
tlaurion
committed
initrd/bin/tpmr.sh, doc/tpm.md: add TCG spec references for DA capability version requirements
tlaurion
committed
initrd/bin/tpmr.sh: check TPM spec version before querying DA state
tlaurion
committed
initrd/etc/functions.sh: detect TPM1 defend lock on increment failure, skip migration fallback
tlaurion
committed
initrd/etc/functions.sh: clean up DA guard comment, restore TPM2 guard path
tlaurion
committed
initrd/bin/tpmr.sh: add DA-unavailable guidance to tpm1_bad_auth
tlaurion
committed
initrd/bin/tpmr.sh: label TPM 1.2 explicitly in DA state output, clean bad_auth guidance
tlaurion
committed
initrd/bin/tpmr.sh: concise UX for da_state and bad_auth on pre-rev 103 TPM1
tlaurion
committed
initrd/bin/tpmr.sh: normalize TPM vendor/rev output format
tlaurion
committed
initrd/bin/tpmr.sh: non-developer UX for da_state and bad_auth on older TPM1
tlaurion
committed
doc: update inline docs and tpm.md for DA state version-first probe and pre-rev 103 fallback
tlaurion
committed
initrd/bin/tpmr.sh: strengthen version-first logic in tpm1_da_state
tlaurion
committed
doc: fix code/doc mismatches found in consistency review
tlaurion
committed
add the script to download, deguard and reduce the intel ME blob

notgivenby
authored and
tlaurion
committed
add ifd and gbe blobs for the m900_tower board

notgivenby
authored and
tlaurion
committed
add m900_tower board information including caveats

notgivenby
authored and
tlaurion
committed
add hashes of the blobs and .gitignore file

notgivenby
authored and
tlaurion
committed
add the .gitignore file

notgivenby
authored and
tlaurion
committed
add the board config for m900_tower hotp variant

notgivenby
authored and
tlaurion
committed
add the board config for m900_tower maximized variant

notgivenby
authored and
tlaurion
committed
add the coreboot config for m900_tower board

notgivenby
authored and
tlaurion
committed
add target mk file to download, deguard, and reduce the ME blob for m900_tower board

notgivenby
authored and
tlaurion
committed
add the linux config for the m900_tower board

notgivenby
authored and
tlaurion
committed
blobs/m900: refactor download script to use shared blobs/lib.sh
tlaurion
committed
circleci: add m900 blob download step in x86_blobs
tlaurion
committed
add m900 hotp and maximized into circle ci

notgivenby
authored and
tlaurion
committed
EOL_m900_tower-*: fix review comments -- typos, blob names, board name
tlaurion
committed