Purism Librem 14¶
This page describes how to run coreboot on the Purism Librem 14.
|CPU||Intel Core i7-10710U|
|PCH||Comet Lake LP Premium (Comet Lake-U)|
|Coprocessor||Intel Management Engine (CSME 14.x)|
Required proprietary blobs¶
To build a minimal working coreboot image some blobs are required (assuming only the BIOS region is being modified).
|Binary file||Apply||Required / Optional|
|FSP-M, FSP-S||Intel Firmware Support Package||Required|
FSP-M and FSP-S are obtained after splitting the CometLake1 FSP binary
(done automatically by the coreboot build system and included into the
image) from the
Microcode updates are automatically included into the coreboot image by the
build system from the
3rdparty/intel-microcode submodule. Official Purism
release images may include newer microcode, which is instead pulled from
Purism’s purism-blobs repository.
A VGA Option ROM is not required to boot, as the Librem 14 uses libgfxinit.
Intel Management Engine¶
The Librem 14 uses version 14.x of the Intel Management Engine (ME) / Converged Security Engine (CSE). The ME/CSE is disabled using the High Assurance Platform (HAP) bit, which puts the ME into a disabled state after platform bring-up (BUP) and disables all PCI/HECI interfaces. This can be verified checking the coreboot console log, using coreboot’s cbmem utility:
`sudo ./cbmem -1 | grep 'ME:'`
provided coreboot has been patched to output the ME status even when the PCI device is not visible/active (as it is in Purism’s release builds).
The main SPI flash can be accessed using flashrom. No official flashrom release supports the CometLake-U SoC yet, so it must be built from source. Version v1.2-107-gb1f858f or later is needed. Firmware an be easily flashed with internal programmer (either BIOS region or full image).
The system has an internal flash chip which is a 16 MiB soldered SOIC-8 chip, and has a diode attached to the VCC line for in-system programming. This chip is located on the bottom side of the board, in between the CPU heatsink and the left cooling fan, just above the left SO-DIMM slot.
One has to remove all 9 screws from the bottom cover, then disconnect the battery from the mainboard (bottom left of mainboard). Use a SOIC-8 chip clip to program the chip (a Gigadevice GD25Q127C (3.3V) - datasheet).
The EC firmware is stored on a separate SOIC-8 chip (a Gigadevices GD25Q80C), located underneath the Wi-Fi module, below the left cooling fan.
- Automatic detection of external audio input/output via the 3.5mm jack does not currently work.
- PL1/PL2 limited to 15W/20W by charger and battery discharge capability, not SoC or thermal design.
- Internal display with libgfxinit, VGA option ROM, or FSP/GOP init
- External displays via HDMI, USB-C Alt-Mode
- SeaBIOS (1.14), edk2 (CorebootPayloadPkg), and Heads payloads
- Ethernet, m.2 2230 Wi-Fi
- System firmware updates via flashrom
- M.2 storage (NVMe, SATA III)
- Built-in audio (speakers, microphone)
- SMBus (reading SPD from DIMMs)
- Initialization with FSP 2.0 (CometLake1)
- S3 Suspend/Resume
- Booting PureOS 10.x, Debian 11.x, Qubes 4.0.4, Windows 10 20H2
Not working / untested¶