boards: Add Star Labs Heads targets

.circleci/config.yml

@@ -262,7 +262,7 @@ jobs:
   #   See doc/circleci.md for full documentation.
   # Workspace chain: create_hashes -> x86_blobs -> x86_musl_cross_make -> x86_coreboot
   # Seeds (one per unique toolchain): coreboot-4.11, coreboot-25.09,
-  #   coreboot-dasharo_nv4x, coreboot-purism
+  #   coreboot-dasharo_nv4x, coreboot-purism, coreboot-starlabs_2607
   # Dasharo v56/msi_z690/msi_z790 are build jobs, not x86_coreboot.
   x86_coreboot:
     executor: heads-docker
@@ -527,6 +527,99 @@ workflows:
           requires:
             - x86-musl-cross-make [cross compiler]
 
+      # Star Labs 26.07 fork
+      - x86_coreboot:
+          name: starlabs_lite_adl [seed:coreboot-starlabs_2607]
+          target: starlabs_lite_adl
+          subcommand: ""
+          coreboot_dir: coreboot-starlabs_2607
+          requires:
+            - x86-musl-cross-make [cross compiler]
+
+      - build:
+          name: starlabs_adl_horizon
+          target: starlabs_adl_horizon
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_byte_adl
+          target: starlabs_byte_adl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_byte_twl
+          target: starlabs_byte_twl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_labtop_cml
+          target: starlabs_labtop_cml
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_qemu
+          target: starlabs_qemu
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starbook_adl
+          target: starlabs_starbook_adl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starbook_adl_n
+          target: starlabs_starbook_adl_n
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starbook_mtl
+          target: starlabs_starbook_mtl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starbook_rpl
+          target: starlabs_starbook_rpl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starbook_tgl
+          target: starlabs_starbook_tgl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starfighter_mtl
+          target: starlabs_starfighter_mtl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
+      - build:
+          name: starlabs_starfighter_rpl
+          target: starlabs_starfighter_rpl
+          subcommand: ""
+          requires:
+            - starlabs_lite_adl [seed:coreboot-starlabs_2607]
+
       # ── coreboot 25.09 boards (alphabetical) ───────────────────────────────
       - build:
           name: EOL_m900_tower-hotp-maximized

bin/validate_cbfs_ifd_fit.sh

@@ -92,11 +92,14 @@ CBFS_SIZE_DEC=$((CBFS_SIZE))
 # Extract IFD path from config
 IFD_PATH=$(grep "^CONFIG_IFD_BIN_PATH=" "$CONFIG_FILE" | cut -d'"' -f2)
 
-# Resolve relative IFD path to absolute, preferring coreboot base dir
+# Resolve relative IFD paths from the coreboot source tree. Some shared-
+# toolchain layouts pass a board object directory, so retain its parent as a
+# fallback before trying the caller's working directory.
 if [ -n "$IFD_PATH" ] && [[ "$IFD_PATH" != /* ]] && [[ "$IFD_PATH" != *"@"* ]]; then
-    COREBOOT_BASE_DIR="$(dirname "$COREBOOT_DIR")"
-    if [ -d "$COREBOOT_BASE_DIR" ]; then
-        IFD_PATH="$COREBOOT_BASE_DIR/$IFD_PATH"
+    if [ -f "$COREBOOT_DIR/$IFD_PATH" ]; then
+        IFD_PATH="$COREBOOT_DIR/$IFD_PATH"
+    elif [ -f "$(dirname "$COREBOOT_DIR")/$IFD_PATH" ]; then
+        IFD_PATH="$(dirname "$COREBOOT_DIR")/$IFD_PATH"
     else
         IFD_PATH="$PWD/$IFD_PATH"
     fi

boards/starlabs/common.config

@@ -0,0 +1,44 @@
+# Common Star Labs Heads configuration.
+export CONFIG_COREBOOT=y
+export CONFIG_COREBOOT_VERSION=starlabs_2607
+export CONFIG_LINUX_VERSION=6.1.8
+
+CONFIG_LINUX_CONFIG=config/linux-starlabs-common.config
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000=y
+CONFIG_MOBILE_TETHERING=y
+
+CONFIG_CRYPTSETUP2=y
+CONFIG_FLASHPROG=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+
+CONFIG_TPM2_TSS=y
+CONFIG_OPENSSL=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_HOTPKEY=y
+
+CONFIG_CAIRO=y
+CONFIG_FBWHIPTAIL=y
+
+export CONFIG_AUTO_BOOT_TIMEOUT=5
+export CONFIG_TPM2_TOOLS=y
+export CONFIG_PRIMARY_KEY_TYPE=ecc
+export CONFIG_DEBUG_OUTPUT=n
+export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
+export CONFIG_TPM2_CAPTURE_PCAP=n
+export CONFIG_QUIET_MODE=y
+export CONFIG_BOOTSCRIPT=/bin/gui-init.sh
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_ADD=""
+export CONFIG_BOOT_KERNEL_REMOVE="quiet rhgb splash"
+export CONFIG_KEYBOARD_KEYMAP="/usr/lib/kbd/keymaps/i386/qwerty/us.map"

boards/starlabs/compact-intel.config

@@ -0,0 +1,8 @@
+# Space-constrained Intel boards retain the deferred platform lock.
+include $(pwd)/boards/starlabs/compact.config
+
+CONFIG_IO386=y
+export CONFIG_FINALIZE_PLATFORM_LOCKING=y
+export CONFIG_FINALIZE_PLATFORM_LOCKING_APM_CNT=0xb2
+export CONFIG_FINALIZE_PLATFORM_LOCKING_APM_STS=0xb3
+export CONFIG_FINALIZE_PLATFORM_LOCKING_CODE=0xcb

boards/starlabs/compact.config

@@ -0,0 +1,23 @@
+# Space-constrained physical Star Labs boards retain the graphical Heads UI,
+# GPG verification, TPM2 tools, flash tools, USB storage, and kexec.
+include $(pwd)/boards/starlabs/physical.config
+
+# Omit encrypted-storage, enrollment, filesystem-maintenance, networking, and
+# tools that do not fit alongside recovery and measured boot.
+CONFIG_BUSYBOX_COMPACT=y
+CONFIG_CRYPTSETUP2=n
+CONFIG_LVM2=n
+CONFIG_TPMTOTP=n
+CONFIG_HOTPKEY=n
+CONFIG_QRENCODE=n
+CONFIG_MOBILE_TETHERING=n
+CONFIG_MBEDTLS=n
+CONFIG_PCIUTILS=n
+CONFIG_PCIUTILS_LIB_ONLY=y
+CONFIG_POPT=n
+CONFIG_UTIL_LINUX=n
+CONFIG_EXFATPROGS=n
+CONFIG_E2FSPROGS=n
+CONFIG_KBD=n
+CONFIG_KBD_LOADKEYS=n
+CONFIG_LINUX_E1000=n

boards/starlabs/physical-intel.config

@@ -0,0 +1,7 @@
+include $(pwd)/boards/starlabs/physical.config
+
+CONFIG_IO386=y
+export CONFIG_FINALIZE_PLATFORM_LOCKING=y
+export CONFIG_FINALIZE_PLATFORM_LOCKING_APM_CNT=0xb2
+export CONFIG_FINALIZE_PLATFORM_LOCKING_APM_STS=0xb3
+export CONFIG_FINALIZE_PLATFORM_LOCKING_CODE=0xcb

boards/starlabs/physical.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/common.config
+
+# Keep the descriptor, ME, EC, SMMSTORE and per-unit data out of internal updates.
+export CONFIG_FLASH_OPTIONS="flashprog --progress --programmer internal --fmap -i COREBOOT"

boards/starlabs_adl_horizon/starlabs_adl_horizon.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_adl_horizon.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Horizon"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook\ Horizon

boards/starlabs_byte_adl/starlabs_byte_adl.config

@@ -0,0 +1,5 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_byte_adl.config
+export CONFIG_BOARD_NAME="Star Labs Byte Mk II"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=Byte
+export CONFIG_USB_KEYBOARD_REQUIRED=y

boards/starlabs_byte_twl/starlabs_byte_twl.config

@@ -0,0 +1,5 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_byte_twl.config
+export CONFIG_BOARD_NAME="Star Labs Byte Mk III"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=Byte
+export CONFIG_USB_KEYBOARD_REQUIRED=y

boards/starlabs_labtop_cml/starlabs_labtop_cml.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_labtop_cml.config
+export CONFIG_BOARD_NAME="Star Labs LabTop Mk IV"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=LabTop

boards/starlabs_lite_adl/starlabs_lite_adl.config

@@ -0,0 +1,22 @@
+# Star Labs StarLite Mk V (Lite ADL).
+# Initial installation and recovery require an external SPI programmer.
+# https://support.starlabs.systems/hc/star-labs/articles/starlite-mk-v-installingrecovering-firmware-with-external-programmer
+include $(pwd)/boards/starlabs/physical-intel.config
+
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_lite_adl.config
+
+export CONFIG_BOARD_NAME="Star Labs StarLite Mk V"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarLite
+export CONFIG_USB_KEYBOARD_REQUIRED=y
+
+# The fixed COREBOOT region cannot contain the full Heads package set.
+CONFIG_CRYPTSETUP2=n
+CONFIG_LVM2=n
+CONFIG_MOBILE_TETHERING=n
+CONFIG_POPT=n
+CONFIG_UTIL_LINUX=n
+CONFIG_EXFATPROGS=n
+CONFIG_E2FSPROGS=n
+CONFIG_KBD=n
+CONFIG_KBD_LOADKEYS=n
+CONFIG_LINUX_E1000=n

boards/starlabs_qemu/starlabs_qemu.config

@@ -0,0 +1,14 @@
+# Star Labs software gate. This uses the same coreboot fork, Linux kernel,
+# userspace, graphical UI, and TPM2 stack as the physical targets.
+include $(pwd)/boards/starlabs/common.config
+
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_qemu.config
+CONFIG_LINUX_CONFIG=config/linux-qemu.config
+CONFIG_MOBILE_TETHERING=n
+
+export CONFIG_BOARD_NAME=qemu-starlabs
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=starlabs_qemu
+export CONFIG_BOOT_RECOVERY_SERIAL="/dev/ttyS0"
+export CONFIG_BOOT_KERNEL_ADD="console=ttyS0 console=tty systemd.zram=0 debug"
+
+BOARD_TARGETS := qemu

boards/starlabs_starbook_adl/starlabs_starbook_adl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_adl.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VI (Alder Lake)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_adl_n/starlabs_starbook_adl_n.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_adl_n.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VII (Alder Lake-N)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_mtl/starlabs_starbook_mtl.config

@@ -0,0 +1,7 @@
+# StarBook Mk VII (Meteor Lake) proof board.
+include $(pwd)/boards/starlabs/physical-intel.config
+
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_mtl.config
+
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VII (Meteor Lake)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_rpl/starlabs_starbook_rpl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_rpl.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VI (Raptor Lake)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_tgl/starlabs_starbook_tgl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_tgl.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk V"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starfighter_mtl/starlabs_starfighter_mtl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starfighter_mtl.config
+export CONFIG_BOARD_NAME="Star Labs StarFighter Mk II"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarFighter

boards/starlabs_starfighter_rpl/starlabs_starfighter_rpl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starfighter_rpl.config
+export CONFIG_BOARD_NAME="Star Labs StarFighter Mk I"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarFighter