This enables *support* for Secure Boot. It is not recommended to enable
Secure Boot. There is no firmware UI for managing the state or keys.
The system will default to disabled in Setup Mode:
$ mokutil --sb-state
SecureBoot disabled
Platform is in Setup Mode
This is sufficient to install Windows 11.
Signed-off-by: Tim Crawford <tcrawford@system76.com>
Ensure QEMU builds with the correct edk2 options by providing a config
file like the other models.
Signed-off-by: Tim Crawford <tcrawford@system76.com>
Use minimal set of config selections and let coreboot generate the
default values for the rest of them.
The only differences are the following models selecting
CONFIG_CPU_MICROCODE_CBFS_DEFAULT_BINS instead of *_EXTERNAL_BINS:
- darp5
- darp6
- galp3-c
- galp4
- lemp9
* Add script for updating coreboot config
* Update coreboot and coreboot config
* Update coreboot and configs
* Pass board and version when running make clean in ec
* Add addw2 chip.txt
* Update coreboot
* Update coreboot
