diff --git a/.codespellrc b/.codespellrc index c07567ed48..da835197be 100644 --- a/.codespellrc +++ b/.codespellrc @@ -1,3 +1,3 @@ [codespell] exclude-file = .codespellx -ignore-words-list = FPT,FTP,fpt,ftp,Compex,compex,dout,doubt,HDA,HAD,hda,had,TNE +ignore-words-list = FPT,FTP,fpt,ftp,Compex,compex,dout,doubt,HDA,HAD,hda,had,TNE,HSI,SME diff --git a/docs/variants/gigabyte_mz33-ar1/gigabyte_mz33_ar1_v0.9.0.rom_openness_chart.png b/docs/variants/gigabyte_mz33-ar1/gigabyte_mz33_ar1_v0.9.0.rom_openness_chart.png new file mode 100644 index 0000000000..987b125f6c Binary files /dev/null and b/docs/variants/gigabyte_mz33-ar1/gigabyte_mz33_ar1_v0.9.0.rom_openness_chart.png differ diff --git a/docs/variants/gigabyte_mz33-ar1/gigabyte_mz33_ar1_v0.9.0.rom_openness_chart_full_image.png b/docs/variants/gigabyte_mz33-ar1/gigabyte_mz33_ar1_v0.9.0.rom_openness_chart_full_image.png new file mode 100644 index 0000000000..88b4340362 Binary files /dev/null and b/docs/variants/gigabyte_mz33-ar1/gigabyte_mz33_ar1_v0.9.0.rom_openness_chart_full_image.png differ diff --git a/docs/variants/gigabyte_mz33-ar1/initial-deployment.md b/docs/variants/gigabyte_mz33-ar1/initial-deployment.md index 7bd84789dc..5c50b9419e 100644 --- a/docs/variants/gigabyte_mz33-ar1/initial-deployment.md +++ b/docs/variants/gigabyte_mz33-ar1/initial-deployment.md @@ -1,23 +1,11 @@ # Initial deployment -This document describes the process of building, installing and running -flashrom on Ubuntu 24.04. +The Dasharo firmware should be already deployed when purchasing the product +from [our +shop](https://shop.3mdeb.com/product/full-build-gigabyte-mz33-ar1-with-dasharo-corebootuefi-pro-package-for-servers/) +and agreeing to the terms of service. -## Build flashrom +## Initial deployment via BMC -Please follow generic guide for [Dasharo flashrom fork](../../osf-trivia-list/deployment.md#how-to-install-dasharo-flashrom-fork). - -## Reading flash contents - -Always prepare a backup of the current firmware image. To read from the flash -and save it to a file (`dump.rom`), execute the following command: - -```bash -flashrom -p internal -r dump.rom -``` - -## Flashing Dasharo - -To flash Dasharo on the platform, it is only possible with an external -programmer currently. Follow the same process as in [recovery -section](recovery.md). +Use the same procedure as in [Flashing via BMC in Recovery +section](recovery.md#flashing-via-bmc). diff --git a/docs/variants/gigabyte_mz33-ar1/openness-score.md b/docs/variants/gigabyte_mz33-ar1/openness-score.md index 77847af287..c07fd4e9f5 100644 --- a/docs/variants/gigabyte_mz33-ar1/openness-score.md +++ b/docs/variants/gigabyte_mz33-ar1/openness-score.md @@ -4,3 +4,135 @@ This page contains the [Dasharo Openness Score](../../glossary.md#dasharo-openness-score) for Gigabyte MZ33-AR1 Dasharo releases. The content of the page is generated with [Dasharo Openness Score utility](https://github.com/Dasharo/Openness-Score). + +## v0.9.0 + +Openness Score for gigabyte_mz33_ar1_v0.9.0.rom + +Open-source code percentage: **23.1%** +Closed-source code percentage: **76.9%** + +* Image size: 33554432 (0x2000000) +* Number of regions: 30 +* Number of CBFSes: 4 +* Total open-source code size: 1648422 (0x192726) +* Total closed-source code size: 5480640 (0x53a0c0) +* Total data size: 1779366 (0x1b26a6) +* Total empty size: 7868788 (0x781174) + +![](gigabyte_mz33_ar1_v0.9.0.rom_openness_chart.png) + +![](gigabyte_mz33_ar1_v0.9.0.rom_openness_chart_full_image.png) + +> Numbers given above already include the calculations from CBFS regions +> presented below + +### FMAP regions + +| FMAP region | Offset | Size | Category | +| ----------- | ------ | ---- | -------- | +| RO_VPD | 0x0 | 0x4000 | data | +| FMAP | 0x4000 | 0x1000 | data | +| RO_FRID | 0x5000 | 0x100 | data | +| RO_FRID_PAD | 0x5100 | 0x700 | data | +| GBB | 0x5800 | 0x3000 | data | +| VBLOCK_A | 0x800000 | 0x10000 | data | +| RW_FWID_A | 0xafff00 | 0x100 | data | +| VBLOCK_B | 0xb00000 | 0x10000 | data | +| RW_FWID_B | 0xdfff00 | 0x100 | data | +| RW_ELOG | 0xe00000 | 0x4000 | data | +| SHARED_DATA | 0xe04000 | 0x2000 | data | +| VBLOCK_DEV | 0xe06000 | 0x2000 | data | +| RW_VPD | 0xe08000 | 0x2000 | data | +| RW_NVRAM | 0xe0a000 | 0x6000 | data | +| CONSOLE | 0xe50000 | 0x20000 | data | +| SMMSTORE | 0xeb0000 | 0x80000 | data | +| RW_MRC_CACHE | 0xf30000 | 0xd0000 | data | + +### CBFS COREBOOT + +* CBFS size: 8353792 +* Number of files: 21 +* Open-source files size: 1648422 (0x192726) +* Closed-source files size: 5185728 (0x4f20c0) +* Data size: 40018 (0x9c52) +* Empty size: 1479624 (0x1693c8) + +> Numbers given above are already normalized (i.e. they already include size +> of metadata and possible closed-source LAN drivers included in the payload +> which are not visible in the table below) + +| CBFS filename | CBFS filetype | Size | Compression | Category | +| ------------- | ------------- | ---- | ----------- | -------- | +| fallback/payload | simple elf | 1342255 | none | open-source | +| fallback/romstage | stage | 33487 | LZ4 | open-source | +| fallback/ramstage | stage | 254144 | LZMA | open-source | +| fallback/dsdt.aml | raw | 18536 | none | open-source | +| cpu_microcode_b100.bin | microcode | 14368 | none | closed-source | +| cpu_microcode_b110.bin | microcode | 14368 | none | closed-source | +| cpu_microcode_b000.bin | microcode | 14368 | none | closed-source | +| cpu_microcode_b010.bin | microcode | 14368 | none | closed-source | +| cpu_microcode_b020.bin | microcode | 14368 | none | closed-source | +| cpu_microcode_b021.bin | microcode | 14368 | none | closed-source | +| apu/amdfw | amdfw | 5099520 | none | closed-source | +| cbfs_master_header | cbfs header | 32 | none | data | +| config | raw | 4719 | LZMA | data | +| revision | raw | 910 | none | data | +| build_info | raw | 106 | none | data | +| cmos_layout.bin | cmos_layout | 864 | none | data | +| logo.bmp | raw | 11977 | LZMA | data | +| sbom | raw | 19700 | none | data | +| header_pointer | cbfs header | 4 | none | data | +| (empty) | null | 2340 | none | empty | +| (empty) | null | 1477284 | none | empty | + +### CBFS FW_MAIN_A + +* CBFS size: 3079936 +* Number of files: 1 +* Open-source files size: 0 (0x0) +* Closed-source files size: 0 (0x0) +* Data size: 28 (0x1c) +* Empty size: 3079908 (0x2efee4) + +> Numbers given above are already normalized (i.e. they already include size +> of metadata and possible closed-source LAN drivers included in the payload +> which are not visible in the table below) + +| CBFS filename | CBFS filetype | Size | Compression | Category | +| ------------- | ------------- | ---- | ----------- | -------- | +| (empty) | null | 3079908 | none | empty | + +### CBFS FW_MAIN_B + +* CBFS size: 3079936 +* Number of files: 1 +* Open-source files size: 0 (0x0) +* Closed-source files size: 0 (0x0) +* Data size: 28 (0x1c) +* Empty size: 3079908 (0x2efee4) + +> Numbers given above are already normalized (i.e. they already include size +> of metadata and possible closed-source LAN drivers included in the payload +> which are not visible in the table below) + +| CBFS filename | CBFS filetype | Size | Compression | Category | +| ------------- | ------------- | ---- | ----------- | -------- | +| (empty) | null | 3079908 | none | empty | + +### CBFS BOOTSPLASH + +* CBFS size: 229376 +* Number of files: 1 +* Open-source files size: 0 (0x0) +* Closed-source files size: 0 (0x0) +* Data size: 28 (0x1c) +* Empty size: 229348 (0x37fe4) + +> Numbers given above are already normalized (i.e. they already include size +> of metadata and possible closed-source LAN drivers included in the payload +> which are not visible in the table below) + +| CBFS filename | CBFS filetype | Size | Compression | Category | +| ------------- | ------------- | ---- | ----------- | -------- | +| (empty) | null | 229348 | none | empty | diff --git a/docs/variants/gigabyte_mz33-ar1/releases.md b/docs/variants/gigabyte_mz33-ar1/releases.md index 2d0fa72d10..fd899d51c7 100644 --- a/docs/variants/gigabyte_mz33-ar1/releases.md +++ b/docs/variants/gigabyte_mz33-ar1/releases.md @@ -6,5 +6,131 @@ for Gigabyte MZ33-AR1. For details about our release process please read [Dasharo Standard Release Process](../../dev-proc/standard-release-process.md). +
+ {{ subscribe_form("54954349-8626-4c32-836f-90e9738c0510", "Subscribe to Gigabyte MZ33-AR1 Dasharo Release Newsletter") }} + +
+ +!!! note "Note" + + Before using this firmware, please review the [Dasharo Terms of + Service](https://www.dasharo.com/pages/terms/) and AMD's [openSIL project + page](https://github.com/openSIL/openSIL), which describes openSIL's + current Proof-of-Concept status and AMD's evaluation-only support model. + Use of this firmware is at the user's own responsibility. + +## v0.9.0 - 2026-05-14 + +Test results for this release can be found +[here](https://github.com/Dasharo/osfv-results/blob/main/boards/Gigabyte/MZ33-AR1/v0.9.0_results.csv). + +### Added + +- Initial support for the Gigabyte MZ33-AR1 server board, based on AMD Turin +- [UEFI compatible interface](https://docs.dasharo.com/unified-test-documentation/dasharo-compatibility/30M-uefi-compatible-interface/) +- [Configurable boot order](https://docs.dasharo.com/unified-test-documentation/dasharo-compatibility/325-custom-boot-order/) +- Configurable boot options +- [UEFI Secure Boot support](https://docs.dasharo.com/unified-test-documentation/dasharo-security/206-secure-boot/) +- [USB boot support](https://docs.dasharo.com/unified-test-documentation/dasharo-compatibility/31N-usb-boot/) +- [NVMe boot support](https://docs.dasharo.com/unified-test-documentation/dasharo-compatibility/312-nvme-support/) +- [Ubuntu LTS booting](https://docs.dasharo.com/unified-test-documentation/dasharo-compatibility/308-debian-stable-and-ubuntu-lts-support/) +- [Windows 11 booting](https://docs.dasharo.com/unified-test-documentation/dasharo-compatibility/31A-windows-booting/) +- [Serial port console redirection](https://docs.dasharo.com/unified-test-documentation/dasharo-compatibility/31G-ec-and-superio/#sio004001-serial-port-in-firmware) +- [TPM Measured Boot](https://docs.dasharo.com/unified-test-documentation/dasharo-security/203-measured-boot/) +- [SMM BIOS write protection with AMD ROM Armor](https://docs.dasharo.com/dasharo-menu-docs/dasharo-system-features/#dasharo-security-options) +- [Firmware update mode](https://docs.dasharo.com/guides/firmware-update/#firmware-update-mode) +- [Setup menu password configuration](https://docs.dasharo.com/dasharo-menu-docs/overview/#dasharo-menu-guides) +- [USB stack disable option in setup menu](https://docs.dasharo.com/dasharo-menu-docs/dasharo-system-features/#usb-configuration) +- [Network stack disable option in setup menu](https://docs.dasharo.com/dasharo-menu-docs/dasharo-system-features/#networking-options) +- TPM PPI support with UEFI variable backend +- [SBOM generation for AMD PSP blobs](https://doc.coreboot.org/sbom/sbom.html) +- AMD SME and AMD SEV-SNP support +- [UEFI Capsule Updarte v1 support](https://docs.dasharo.com/unified-test-documentation/dasharo-stability/capsule-update/) +- Rebased coreboot on 25.12 tag +- Rebased iPXE on last commit of February 2026 +- [Option to customize the SMBIOS Serial Number and UUID](https://docs.dasharo.com/unified-test-documentation/dasharo-compatibility/362-dcu/) +- Support for firmware flashing via BMC with RBU files +- [TCG OPAL disk password support](https://docs.dasharo.com/unified-test-documentation/dasharo-security/208-opal-disk-password-support/) +- SATA disk password support +- [Boot manager menu disable option](https://docs.dasharo.com/unified-test-documentation/dasharo-security/20P-boot-menu/) +- [Auto boot option creation for pre-installed OSes](https://docs.dasharo.com/unified-test-documentation/dasharo-compatibility/361-esp-scanning/) +- Early graphical sign of life +- Quiet boot/Fast boot options +- AMD memory context save/restore support +- SMBIOS 3.8.0 specification support +- AMD PSP HSTI reporting to reach fwupd HSI2 level and fulfill HSI4 requirements +- AMD CPU temperature reporting via ACPI Thermal Zone + +### Known issues + +- [UEFI Capsules do not survive resets, only immediate Capsule on Disk supported](https://github.com/Dasharo/dasharo-issues/issues/1843) +- [Previous power state restoration does not work for powered off state](https://github.com/Dasharo/dasharo-issues/issues/1844) +- [I3C controller initialization fails in Linux](https://github.com/Dasharo/dasharo-issues/issues/1845) +- [Fast Boot does not reduce boot time](https://github.com/Dasharo/dasharo-issues/issues/1841) +- [Firmware flashing and reset to defaults do not give the same measurements](https://github.com/Dasharo/dasharo-issues/issues/1842) + +### Binaries + +#### Raw Dasharo image + +[sha256][gigabyte_mz33_ar1_v0.9.0.rom_hash]{.md-button} +[sha256.sig][gigabyte_mz33_ar1_v0.9.0.rom_sig]{.md-button} +(gigabyte_mz33_ar1_v0.9.0.rom) + +#### Update via BMC image + +[sha256][gigabyte_mz33_ar1_v0.9.0.rbu_hash]{.md-button} +[sha256.sig][gigabyte_mz33_ar1_v0.9.0.rbu_sig]{.md-button} +(gigabyte_mz33_ar1_v0.9.0.rbu) + +#### SBOM CycloneDX + +[sha256][gigabyte_mz33_ar1_v0.9.0.sbom.json_hash]{.md-button} +[sha256.sig][gigabyte_mz33_ar1_v0.9.0.sbom.json_sig]{.md-button} +(gigabyte_mz33_ar1_v0.9.0.sbom.json) + +This is a Dasharo Pro Package release. For this platform, access to pre-built +binaries is provided exclusively through the +[Full Build for Gigabyte MZ33-AR1](https://shop.3mdeb.com/product/full-build-gigabyte-mz33-ar1-with-dasharo-corebootuefi-pro-package-for-servers/), +a bundled hardware-and-firmware product available in +the 3mdeb shop. A standalone Dasharo Pro Package subscription is not offered +for this platform; additional purchase options (Enterprise Build and Barebones +Build) are expected in the next 3-6 months. + +With the Full Build, you receive firmware updates for the duration of your +subscription via the Dasharo Pro Package newsletter, and gain entry to the +Dasharo Premier Support invite-only live chat on the Matrix network, enabling +direct engagement with the Dasharo Team and fellow subscribers for +personalized, priority assistance. + +To verify binary integrity with hash and signature please follow the +instructions in [Dasharo release signature verification](/guides/signature-verification) +using [this key](https://raw.githubusercontent.com/3mdeb/3mdeb-secpack/master/dasharo/gigabyte_mz33-ar1/dasharo-release-0.x-compatible-with-gigabyte-mz33-ar1-signing-key.asc) + +### SBOM (Software Bill of Materials) + +- [Dasharo coreboot fork based on 25.12 revision b7796125](https://github.com/Dasharo/coreboot/tree/b7796125) + + [License](https://github.com/Dasharo/coreboot/blob/b7796125/COPYING) +- [Dasharo EDKII fork based on edk2-stable202502 revision eedcdea6](https://github.com/Dasharo/edk2/tree/eedcdea6) + + [License](https://github.com/Dasharo/edk2/blob/eedcdea6/License.txt) +- [Dasharo iPXE fork based on 2026.02 revision ad8cbcee](https://github.com/Dasharo/ipxe/tree/ad8cbcee) + + [License](https://github.com/Dasharo/ipxe/blob/ad8cbcee/COPYING.GPLv2) +- [AMD openSIL based on turin_poc revision df18968a](https://github.com/openSIL/openSIL/tree/df18968a) + + [License](https://github.com/openSIL/openSIL/blob/genoa_poc/LICENSE/MIT-License.txt) + +An [integrated SBOM](https://doc.coreboot.org/sbom/sbom.html) is also +included in the firmware images. It describes a complete set of components +and their versions used to build the firmware images. The published SBOM +artifact is in CycloneDX format and can be viewed by SBOM tools, for example +[sbom-tools](https://github.com/sbom-tool/sbom-tools). + +[gigabyte_mz33_ar1_v0.9.0.rom_hash]: https://dl.3mdeb.com/open-source-firmware/Dasharo/gigabyte_mz33_ar1/uefi/v0.9.0/gigabyte_mz33_ar1_v0.9.0.rom.sha256 +[gigabyte_mz33_ar1_v0.9.0.rom_sig]: https://dl.3mdeb.com/open-source-firmware/Dasharo/gigabyte_mz33_ar1/uefi/v0.9.0/gigabyte_mz33_ar1_v0.9.0.rom.sha256.sig + +[gigabyte_mz33_ar1_v0.9.0.rbu_hash]: https://dl.3mdeb.com/open-source-firmware/Dasharo/gigabyte_mz33_ar1/uefi/v0.9.0/gigabyte_mz33_ar1_v0.9.0.rbu.sha256 +[gigabyte_mz33_ar1_v0.9.0.rbu_sig]: https://dl.3mdeb.com/open-source-firmware/Dasharo/gigabyte_mz33_ar1/uefi/v0.9.0/gigabyte_mz33_ar1_v0.9.0.rbu.sha256.sig + +[gigabyte_mz33_ar1_v0.9.0.sbom.json_hash]: https://dl.3mdeb.com/open-source-firmware/Dasharo/gigabyte_mz33_ar1/uefi/v0.9.0/gigabyte_mz33_ar1_v0.9.0.sbom.json.sha256 +[gigabyte_mz33_ar1_v0.9.0.sbom.json_sig]: https://dl.3mdeb.com/open-source-firmware/Dasharo/gigabyte_mz33_ar1/uefi/v0.9.0/gigabyte_mz33_ar1_v0.9.0.sbom.json.sha256.sig