boards: Add Star Labs Heads targets

.circleci/config.yml

@@ -262,7 +262,7 @@ jobs:
   #   See doc/circleci.md for full documentation.
   # Workspace chain: create_hashes -> x86_blobs -> x86_musl_cross_make -> x86_coreboot
   # Seeds (one per unique toolchain): coreboot-4.11, coreboot-25.09,
-  #   coreboot-dasharo_nv4x, coreboot-purism
+  #   coreboot-dasharo_nv4x, coreboot-purism, coreboot-starlabs_2607
   # Dasharo v56/msi_z690/msi_z790 are build jobs, not x86_coreboot.
   x86_coreboot:
     executor: heads-docker
@@ -527,6 +527,15 @@ workflows:
           requires:
             - x86-musl-cross-make [cross compiler]
 
+      # Star Labs 26.07 fork
+      - x86_coreboot:
+          name: starlabs_lite_adl [seed:coreboot-starlabs_2607]
+          target: starlabs_lite_adl
+          subcommand: ""
+          coreboot_dir: coreboot-starlabs_2607
+          requires:
+            - x86-musl-cross-make [cross compiler]
+
       # ── coreboot 25.09 boards (alphabetical) ───────────────────────────────
       - build:
           name: EOL_m900_tower-hotp-maximized

boards/starlabs/common.config

@@ -0,0 +1,44 @@
+# Common Star Labs Heads configuration.
+export CONFIG_COREBOOT=y
+export CONFIG_COREBOOT_VERSION=starlabs_2607
+export CONFIG_LINUX_VERSION=6.1.8
+
+CONFIG_LINUX_CONFIG=config/linux-starlabs-common.config
+
+CONFIG_LINUX_USB=y
+CONFIG_LINUX_E1000=y
+CONFIG_MOBILE_TETHERING=y
+
+CONFIG_CRYPTSETUP2=y
+CONFIG_FLASHPROG=y
+CONFIG_FLASHTOOLS=y
+CONFIG_GPG2=y
+CONFIG_KEXEC=y
+CONFIG_UTIL_LINUX=y
+CONFIG_LVM2=y
+CONFIG_MBEDTLS=y
+CONFIG_PCIUTILS=y
+
+CONFIG_TPM2_TSS=y
+CONFIG_OPENSSL=y
+CONFIG_POPT=y
+CONFIG_QRENCODE=y
+CONFIG_TPMTOTP=y
+CONFIG_HOTPKEY=y
+
+CONFIG_CAIRO=y
+CONFIG_FBWHIPTAIL=y
+
+export CONFIG_AUTO_BOOT_TIMEOUT=5
+export CONFIG_TPM2_TOOLS=y
+export CONFIG_PRIMARY_KEY_TYPE=ecc
+export CONFIG_DEBUG_OUTPUT=n
+export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
+export CONFIG_TPM2_CAPTURE_PCAP=n
+export CONFIG_QUIET_MODE=y
+export CONFIG_BOOTSCRIPT=/bin/gui-init.sh
+export CONFIG_BOOT_REQ_HASH=n
+export CONFIG_BOOT_REQ_ROLLBACK=n
+export CONFIG_BOOT_KERNEL_ADD=""
+export CONFIG_BOOT_KERNEL_REMOVE="quiet rhgb splash"
+export CONFIG_KEYBOARD_KEYMAP="/usr/lib/kbd/keymaps/i386/qwerty/us.map"

boards/starlabs/compact-analysis-intel.config

@@ -0,0 +1,8 @@
+# Architecture-evidence targets retain the measured compact Intel runtime
+# without exposing an internal update command for unsupported flash layouts.
+include $(pwd)/boards/starlabs/compact-intel.config
+
+CONFIG_FLASH_OPTIONS :=
+CONFIG_FLASH_READ_OPTIONS :=
+unexport CONFIG_FLASH_OPTIONS CONFIG_FLASH_READ_OPTIONS
+export CONFIG_CBFS_VIA_FLASHPROG=n

boards/starlabs/compact-intel.config

@@ -0,0 +1,5 @@
+# Space-constrained Intel boards retain the deferred platform lock.
+include $(pwd)/boards/starlabs/compact.config
+
+CONFIG_IO386=y
+export CONFIG_FINALIZE_PLATFORM_LOCKING=y

boards/starlabs/compact.config

@@ -0,0 +1,23 @@
+# Space-constrained physical Star Labs boards retain the graphical Heads UI,
+# GPG verification, TPM2 tools, flash tools, USB storage, and kexec.
+include $(pwd)/boards/starlabs/physical.config
+
+# Omit encrypted-storage, enrollment, filesystem-maintenance, networking, and
+# tools that do not fit alongside recovery and measured boot.
+CONFIG_BUSYBOX_COMPACT=y
+CONFIG_CRYPTSETUP2=n
+CONFIG_LVM2=n
+CONFIG_TPMTOTP=n
+CONFIG_HOTPKEY=n
+CONFIG_QRENCODE=n
+CONFIG_MOBILE_TETHERING=n
+CONFIG_MBEDTLS=n
+CONFIG_PCIUTILS=n
+CONFIG_PCIUTILS_LIB_ONLY=y
+CONFIG_POPT=n
+CONFIG_UTIL_LINUX=n
+CONFIG_EXFATPROGS=n
+CONFIG_E2FSPROGS=n
+CONFIG_KBD=n
+CONFIG_KBD_LOADKEYS=n
+CONFIG_LINUX_E1000=n

boards/starlabs/physical-intel.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical.config
+
+CONFIG_IO386=y
+export CONFIG_FINALIZE_PLATFORM_LOCKING=y

boards/starlabs/physical.config

@@ -0,0 +1,5 @@
+include $(pwd)/boards/starlabs/common.config
+
+# Keep the descriptor, ME, EC, SMMSTORE and per-unit data out of internal updates.
+export CONFIG_FLASH_OPTIONS="flashprog --progress --programmer internal --fmap -i COREBOOT"
+export CONFIG_CBFS_VIA_FLASHPROG=y

boards/starlabs_adl_horizon/starlabs_adl_horizon.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_adl_horizon.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Horizon"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook\ Horizon

boards/starlabs_byte_adl/starlabs_byte_adl.config

@@ -0,0 +1,5 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_byte_adl.config
+export CONFIG_BOARD_NAME="Star Labs Byte Mk II"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=Byte
+export CONFIG_USB_KEYBOARD_REQUIRED=y

boards/starlabs_byte_cezanne/starlabs_byte_cezanne.config

@@ -0,0 +1,6 @@
+include $(pwd)/boards/starlabs/compact.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_byte_cezanne.config
+export CONFIG_STARLABS_AMD_BINARIES=y
+export CONFIG_BOARD_NAME="Star Labs Byte Mk I"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=Byte
+export CONFIG_USB_KEYBOARD_REQUIRED=y

boards/starlabs_byte_twl/starlabs_byte_twl.config

@@ -0,0 +1,5 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_byte_twl.config
+export CONFIG_BOARD_NAME="Star Labs Byte Mk III"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=Byte
+export CONFIG_USB_KEYBOARD_REQUIRED=y

boards/starlabs_labtop_cml/starlabs_labtop_cml.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_labtop_cml.config
+export CONFIG_BOARD_NAME="Star Labs LabTop Mk IV"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=LabTop

boards/starlabs_labtop_kbl/starlabs_labtop_kbl.config

@@ -0,0 +1,7 @@
+# Architecture-evidence target only. The fixed 8 MiB layout is 2,744,604
+# bytes short of the full in-flash Heads payload. Reduced and staged profiles
+# are unsupported, and this target is not an active build or hardware gate.
+include $(pwd)/boards/starlabs/compact-analysis-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_labtop_kbl.config
+export CONFIG_BOARD_NAME="Star Labs LabTop Mk III"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=LabTop

boards/starlabs_lite_adl/starlabs_lite_adl.config

@@ -0,0 +1,22 @@
+# Star Labs StarLite Mk V (Lite ADL).
+# Initial installation and recovery require an external SPI programmer.
+# https://support.starlabs.systems/hc/star-labs/articles/starlite-mk-v-installingrecovering-firmware-with-external-programmer
+include $(pwd)/boards/starlabs/physical-intel.config
+
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_lite_adl.config
+
+export CONFIG_BOARD_NAME="Star Labs StarLite Mk V"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarLite
+export CONFIG_USB_KEYBOARD_REQUIRED=y
+
+# The fixed COREBOOT region cannot contain the full Heads package set.
+CONFIG_CRYPTSETUP2=n
+CONFIG_LVM2=n
+CONFIG_MOBILE_TETHERING=n
+CONFIG_POPT=n
+CONFIG_UTIL_LINUX=n
+CONFIG_EXFATPROGS=n
+CONFIG_E2FSPROGS=n
+CONFIG_KBD=n
+CONFIG_KBD_LOADKEYS=n
+CONFIG_LINUX_E1000=n

boards/starlabs_lite_glk/starlabs_lite_glk.config

@@ -0,0 +1,7 @@
+# Architecture-evidence target only. Gemini Lake's signed IFWI and 0x1ffe00-byte
+# COREBOOT region is 5,594,396 bytes short of full in-flash Heads. Reduced and
+# staged profiles are unsupported; no internal flash command is set.
+include $(pwd)/boards/starlabs/compact-analysis-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_lite_glk.config
+export CONFIG_BOARD_NAME="Star Labs Lite Mk III (build analysis only)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=Lite

boards/starlabs_lite_glkr/starlabs_lite_glkr.config

@@ -0,0 +1,7 @@
+# Architecture-evidence target only. Gemini Lake's signed IFWI and 0x1ffe00-byte
+# COREBOOT region is 5,591,580 bytes short of full in-flash Heads. Reduced and
+# staged profiles are unsupported; no internal flash command is set.
+include $(pwd)/boards/starlabs/compact-analysis-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_lite_glkr.config
+export CONFIG_BOARD_NAME="Star Labs Lite Mk IV (build analysis only)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=Lite

boards/starlabs_qemu/starlabs_qemu.config

@@ -0,0 +1,14 @@
+# Star Labs software gate. This uses the same coreboot fork, Linux kernel,
+# userspace, graphical UI, and TPM2 stack as the physical targets.
+include $(pwd)/boards/starlabs/common.config
+
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_qemu.config
+CONFIG_LINUX_CONFIG=config/linux-qemu.config
+CONFIG_MOBILE_TETHERING=n
+
+export CONFIG_BOARD_NAME=qemu-starlabs
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=starlabs_qemu
+export CONFIG_BOOT_RECOVERY_SERIAL="/dev/ttyS0"
+export CONFIG_BOOT_KERNEL_ADD="console=ttyS0 console=tty systemd.zram=0 debug"
+
+BOARD_TARGETS := qemu

boards/starlabs_starbook_adl/starlabs_starbook_adl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_adl.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VI (Alder Lake)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_adl_n/starlabs_starbook_adl_n.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_adl_n.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VII (Alder Lake-N)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_cezanne/starlabs_starbook_cezanne.config

@@ -0,0 +1,5 @@
+include $(pwd)/boards/starlabs/compact.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_cezanne.config
+export CONFIG_STARLABS_AMD_BINARIES=y
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VI (Cezanne)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_mtl/starlabs_starbook_mtl.config

@@ -0,0 +1,7 @@
+# StarBook Mk VII (Meteor Lake) proof board.
+include $(pwd)/boards/starlabs/physical-intel.config
+
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_mtl.config
+
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VII (Meteor Lake)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_rpl/starlabs_starbook_rpl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_rpl.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk VI (Raptor Lake)"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starbook_tgl/starlabs_starbook_tgl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/compact-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starbook_tgl.config
+export CONFIG_BOARD_NAME="Star Labs StarBook Mk V"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarBook

boards/starlabs_starfighter_mtl/starlabs_starfighter_mtl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starfighter_mtl.config
+export CONFIG_BOARD_NAME="Star Labs StarFighter Mk II"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarFighter

boards/starlabs_starfighter_rpl/starlabs_starfighter_rpl.config

@@ -0,0 +1,4 @@
+include $(pwd)/boards/starlabs/physical-intel.config
+CONFIG_COREBOOT_CONFIG=config/coreboot-starlabs_starfighter_rpl.config
+export CONFIG_BOARD_NAME="Star Labs StarFighter Mk I"
+export CONFIG_COREBOOT_SMBIOS_PRODUCT_NAME=StarFighter

config/coreboot-starlabs_adl_horizon.config

@@ -0,0 +1,23 @@
+CONFIG_VENDOR_STARLABS=y
+CONFIG_BOARD_STARLABS_ADL_HORIZON=y
+CONFIG_HAVE_IFD_BIN=y
+CONFIG_HAVE_ME_BIN=y
+CONFIG_EC_STARLABS_ADD_ITE_BIN=y
+CONFIG_MAINBOARD_SERIAL_NUMBER="HZ00000"
+CONFIG_SBOM=y
+CONFIG_SMMSTORE=y
+CONFIG_USE_UEFI_VARIABLE_STORE=y
+CONFIG_BOOTMEDIA_LOCK_CONTROLLER=y
+CONFIG_BOOTMEDIA_LOCK_WHOLE_RO=y
+# CONFIG_BOOTMEDIA_SMM_BWP is not set
+# CONFIG_INTEL_CHIPSET_LOCKDOWN is not set
+CONFIG_SOC_INTEL_COMMON_SPI_LOCKDOWN_SMM=y
+CONFIG_LOCK_MANAGEMENT_ENGINE=y
+CONFIG_CBFS_SIZE=0x400000
+CONFIG_IFD_CHIPSET="adl"
+CONFIG_POST_IO=n
+CONFIG_FSP_TYPE_IOT=y
+CONFIG_FSP_USE_REPO=y
+CONFIG_PAYLOAD_LINUX=y
+CONFIG_PAYLOAD_FILE="@BOARD_BUILD_DIR@/bzImage"
+CONFIG_LINUX_INITRD="@BOARD_BUILD_DIR@/initrd.cpio.xz"

config/coreboot-starlabs_byte_adl.config

@@ -0,0 +1,24 @@
+CONFIG_VENDOR_STARLABS=y
+CONFIG_BOARD_STARLABS_BYTE_ADL=y
+CONFIG_HAVE_IFD_BIN=y
+CONFIG_HAVE_ME_BIN=y
+CONFIG_EC_STARLABS_ADD_ITE_BIN=y
+CONFIG_MAINBOARD_SERIAL_NUMBER="Y200000"
+CONFIG_SBOM=y
+CONFIG_SMMSTORE=y
+CONFIG_USE_UEFI_VARIABLE_STORE=y
+CONFIG_BOOTMEDIA_LOCK_CONTROLLER=y
+CONFIG_BOOTMEDIA_LOCK_WHOLE_RO=y
+# CONFIG_BOOTMEDIA_SMM_BWP is not set
+# CONFIG_INTEL_CHIPSET_LOCKDOWN is not set
+CONFIG_SOC_INTEL_COMMON_SPI_LOCKDOWN_SMM=y
+CONFIG_TPM_MEASURED_BOOT=y
+CONFIG_LOCK_MANAGEMENT_ENGINE=y
+CONFIG_CBFS_SIZE=0x400000
+CONFIG_IFD_CHIPSET="adl"
+CONFIG_POST_IO=n
+CONFIG_FSP_TYPE_IOT=y
+CONFIG_FSP_USE_REPO=y
+CONFIG_PAYLOAD_LINUX=y
+CONFIG_PAYLOAD_FILE="@BOARD_BUILD_DIR@/bzImage"
+CONFIG_LINUX_INITRD="@BOARD_BUILD_DIR@/initrd.cpio.xz"

config/coreboot-starlabs_byte_cezanne.config

@@ -0,0 +1,21 @@
+CONFIG_VENDOR_STARLABS=y
+CONFIG_BOARD_STARLABS_BYTE_CEZANNE=y
+CONFIG_EC_STARLABS_ADD_ITE_BIN=y
+CONFIG_MAINBOARD_SERIAL_NUMBER="Y100000"
+CONFIG_SBOM=y
+CONFIG_SMMSTORE=y
+CONFIG_USE_UEFI_VARIABLE_STORE=y
+CONFIG_CBFS_SIZE=0x01000000
+CONFIG_POST_IO=n
+CONFIG_ADD_FSP_BINARIES=y
+CONFIG_FSP_M_FILE="../amd_binaries/FSP/CEZANNE_M.fd"
+CONFIG_FSP_S_FILE="../amd_binaries/FSP/CEZANNE_S.fd"
+CONFIG_RUN_FSP_GOP=y
+CONFIG_USE_AMD_BLOBS=y
+CONFIG_ADD_APCB_SOURCES=y
+CONFIG_APCB_SOURCES_PATH="../amd_binaries/CZN/APCB/Byte-Y1"
+CONFIG_AMDFW_CONFIG_FILE="src/mainboard/starlabs/cezanne/fw.cfg"
+CONFIG_TPM_MEASURED_BOOT=y
+CONFIG_PAYLOAD_LINUX=y
+CONFIG_PAYLOAD_FILE="@BOARD_BUILD_DIR@/bzImage"
+CONFIG_LINUX_INITRD="@BOARD_BUILD_DIR@/initrd.cpio.xz"

config/coreboot-starlabs_byte_twl.config

@@ -0,0 +1,24 @@
+CONFIG_VENDOR_STARLABS=y
+CONFIG_BOARD_STARLABS_BYTE_TWL=y
+CONFIG_HAVE_IFD_BIN=y
+CONFIG_HAVE_ME_BIN=y
+CONFIG_EC_STARLABS_ADD_ITE_BIN=y
+CONFIG_MAINBOARD_SERIAL_NUMBER="Y200000"
+CONFIG_SBOM=y
+CONFIG_SMMSTORE=y
+CONFIG_USE_UEFI_VARIABLE_STORE=y
+CONFIG_BOOTMEDIA_LOCK_CONTROLLER=y
+CONFIG_BOOTMEDIA_LOCK_WHOLE_RO=y
+# CONFIG_BOOTMEDIA_SMM_BWP is not set
+# CONFIG_INTEL_CHIPSET_LOCKDOWN is not set
+CONFIG_SOC_INTEL_COMMON_SPI_LOCKDOWN_SMM=y
+CONFIG_TPM_MEASURED_BOOT=y
+CONFIG_LOCK_MANAGEMENT_ENGINE=y
+CONFIG_CBFS_SIZE=0x400000
+CONFIG_IFD_CHIPSET="adl"
+CONFIG_POST_IO=n
+CONFIG_FSP_TYPE_IOT=y
+CONFIG_FSP_USE_REPO=y
+CONFIG_PAYLOAD_LINUX=y
+CONFIG_PAYLOAD_FILE="@BOARD_BUILD_DIR@/bzImage"
+CONFIG_LINUX_INITRD="@BOARD_BUILD_DIR@/initrd.cpio.xz"

config/coreboot-starlabs_labtop_cml.config

@@ -0,0 +1,22 @@
+CONFIG_VENDOR_STARLABS=y
+CONFIG_BOARD_STARLABS_LABTOP_CML=y
+CONFIG_HAVE_IFD_BIN=y
+CONFIG_HAVE_ME_BIN=y
+CONFIG_EC_STARLABS_ADD_ITE_BIN=y
+CONFIG_MAINBOARD_SERIAL_NUMBER="L400000"
+CONFIG_SBOM=y
+CONFIG_SMMSTORE=y
+CONFIG_USE_UEFI_VARIABLE_STORE=y
+CONFIG_BOOTMEDIA_LOCK_CONTROLLER=y
+CONFIG_BOOTMEDIA_LOCK_WHOLE_RO=y
+# CONFIG_BOOTMEDIA_SMM_BWP is not set
+# CONFIG_INTEL_CHIPSET_LOCKDOWN is not set
+CONFIG_SOC_INTEL_COMMON_SPI_LOCKDOWN_SMM=y
+CONFIG_TPM_MEASURED_BOOT=y
+CONFIG_LOCK_MANAGEMENT_ENGINE=y
+CONFIG_CBFS_SIZE=0x200000
+CONFIG_IFD_CHIPSET="cnl"
+CONFIG_POST_IO=n
+CONFIG_PAYLOAD_LINUX=y
+CONFIG_PAYLOAD_FILE="@BOARD_BUILD_DIR@/bzImage"
+CONFIG_LINUX_INITRD="@BOARD_BUILD_DIR@/initrd.cpio.xz"

config/coreboot-starlabs_labtop_kbl.config

@@ -0,0 +1,22 @@
+CONFIG_VENDOR_STARLABS=y
+CONFIG_BOARD_STARLABS_LABTOP_KBL=y
+CONFIG_HAVE_IFD_BIN=y
+CONFIG_HAVE_ME_BIN=y
+CONFIG_EC_STARLABS_ADD_ITE_BIN=n
+CONFIG_MAINBOARD_SERIAL_NUMBER="L300000"
+CONFIG_SBOM=y
+CONFIG_SMMSTORE=y
+CONFIG_USE_UEFI_VARIABLE_STORE=y
+CONFIG_BOOTMEDIA_LOCK_CONTROLLER=y
+CONFIG_BOOTMEDIA_LOCK_WHOLE_RO=y
+# CONFIG_BOOTMEDIA_SMM_BWP is not set
+# CONFIG_INTEL_CHIPSET_LOCKDOWN is not set
+CONFIG_SOC_INTEL_COMMON_SPI_LOCKDOWN_SMM=y
+CONFIG_TPM_MEASURED_BOOT=y
+CONFIG_LOCK_MANAGEMENT_ENGINE=y
+CONFIG_CBFS_SIZE=0x200000
+CONFIG_IFD_CHIPSET="sklkbl"
+CONFIG_POST_IO=n
+CONFIG_PAYLOAD_LINUX=y
+CONFIG_PAYLOAD_FILE="@BOARD_BUILD_DIR@/bzImage"
+CONFIG_LINUX_INITRD="@BOARD_BUILD_DIR@/initrd.cpio.xz"