Difference between revisions of "Firmware"

Revision as of 17:19, 16 July 2016

Stock (Factory) Firmware

Factory firmware for ChromeOS devices is built for booting ChromeOS. Support for other operating systems is a much lower priority, if it's a priority at all.

The factory firmware on some models works pretty well for booting Linux (most Haswells). Some others have firmware with annoying but tolerable bugs (Broadwells), and some others (Bay Trail, Braswell, ...) are simply broken for any purpose other than ChromeOS.

In addition to fixing factory bugs, custom firmware options can improve other functionality. See below.

Factory Firmware Bugs

TODO document more and better...MattDevo/CoolStar please help! :)

• Haswell
  • PANTHER, ZAKO USB ports non-functional in legacy boot mode / SeaBIOS (fixed in custom firmware)
  • WOLF non-functional legacy boot mode / SeaBIOS (fixed in custom firmware)
• Broadwell
  • (all models?) Early boot display error, can't see GRUB messages (details) (fixed in custom firmware)
• Bay Trail
  • (all models) Legacy boot capability (SeaBIOS) not included (fixed in custom firmware)
• Braswell
  • (all models) Legacy boot capability (SeaBIOS) not included (WIP)
• Skylake
  • TBD. Early reports indicate the presence of SeaBIOS, but functional state unknown.

Custom Firmware

The stock/factory firmware on some Chromebooks and Chromeboxes contains a legacy boot payload (RW_LEGACY) capable of running Linux out of the box; however, many ChromeOS devices, particularly those with BayTrail/Braswell CPUs, do not include this capability stock and must use a 3rd party firmware update in order to run GalliumOS (or any other OS).

Three types of custom firmware updates are available (though not all types are available for every device):

Types

1. RW_LEGACY
   • Updates/replaces the stock legacy boot payload (SeaBIOS) included on many models; supplements the ChromeOS / secure boot payload (BOOT_STUB)
   • Leaves all stock functionality intact, including the developer mode boot (white "OS verification is OFF") screen
   • Allows device to dual-boot GalliumOS alongside ChromeOS
   • Does not require disabling the firmware write-protect
   • Carries zero risk of bricking the device
   • On some models, includes bugfixes and enables additional functionality
2. BOOT_STUB
   • Replaces the ChromeOS verified boot payload with a legacy boot payload (SeaBIOS)
   • Removes the developer mode boot (white "OS verification is OFF") screen
   • Requires the firmware write-protect screw to be removed
   • Removes the ability to run ChromeOS, creating a small risk of bricking your device
   • Leaves the recovery mode (ESC + REFRESH + POWER) functionality of the stock ROM intact
     • If you engage this key sequence, device will reboot and try to run ChromeOS Recovery (which will fail)
     • This process will repeat on every boot until you disassemble the device and briefly disconnect the battery
3. Full Firmware / ROM
   • A complete firmware image which replaces the hardware init component (coreboot) and payload components (BOOT_STUB, RW_LEGACY) of the stock firmware with updated and/or customized versions of coreboot and SeaBIOS
   • Removes the developer mode boot (white "OS verification is OFF") screen
   • Removes the ability to run ChromeOS, creating a small risk of bricking your device
   • Offers the best support for booting all OSes besides ChromeOS (including Windows).
   • On many models, adds full hardware support for virtualization (vmx / VT-x)
   • Fixes many bugs and/or idiosyncrasies associated with the stock firmware (but could potentially add new ones)
   • Essentially turns your ChromeOS device into a "regular" PC / laptop

Availability Options

Check Hardware Compatibility and the appropriate Support page to determine the status of your model.

There are several custom firmware options available, depending on your Chromebook/box model class, and the features you require:

Additions and corrections, please let us know: contact@galliumos.org

Firmware and NVRAM Flags

Both the crossystem and GBB flags listed below are only relevant when booting legacy mode via RW_LEGACY (CTRL+L on dev mode boot screen); they do not have any effect when using a custom BOOT_STUB firmware.

crossystem

ChromeOS System (crossystem) flags are firmware level settings which are stored in volatile memory, and are therefore lost/reset if the battery on your Chromebook is fully drained or disconnected; they do not require firmware write protect to be disabled in order to set/unset them.

The dev_boot_legacy flag needs to be set (=1) in order to enable legacy booting (and installation/booting of GalliumOS). Most users do not need to set this manually, as it is set automatically when installing a RW_LEGACY firmware payload, but should be aware that it can be unset via battery drain/disconnect. This can be problematic if GalliumOS is the only OS installed on the system (as it would require the user to restore ChromeOS to re-enable legacy booting), and so it is recommended that users who are not dual-booting set the GBB flags below to ensure legacy boot capability is not "turned off" if battery power is lost.

Note: many other sources mistakenly insist that dev_boot_usb needs to be set as well, but it does not - that flag only enables booting ChromeOS (or an OS with a ChromeOS-signed kernel) via CTRL+U on the developer mode boot screen; it has nothing to do with booting from USB in legacy boot mode (CTRL+L).

GBB Flags

Google Binary Block (GBB) flags are firmware level settings stored directly in the firmware flash chip itself in a read-only (RO) area, and so require the firmware write protect screw to be removed before setting. The GBB flags are used to set the default boot mode (ChromeOS or legacy boot), developer mode boot screen timeout (2s or 30s), prevent exiting developer mode via spacebar, and to enable legacy booting regardless of crossystem setting, among other things.

Most users should not attempt to set these manually, but instead use MattDevo's (/u/MrChromebox) ChromeOS firmware utility script to set them based on their preferred default boot mode and boot timeout (the script automatically sets the dev mode and legacy boot mode overrides for all options except factory default). For those curious, a full description of all the GBB flags can be found in the Google source code here