Re: [Libreboot] x201 tablet attempts

[Алексей]

asylum ~ # dmesg  | grep X200
BIOS vendor: coreboot; Ver: CBET4000 4.0; Product Version: ThinkPad X200
[    1.289805] thinkpad_acpi: Lenovo ThinkPad X200, model 7459H2G
[    7.975561] hdaps: LENOVO ThinkPad X200 detected, setting orientation 7
asylum ~ # lspci 
00:00.0 Host bridge: Intel Corporation Mobile 4 Series Chipset Memory 
Controller Hub (rev 07)
00:02.0 VGA compatible controller: Intel Corporation Mobile 4 Series Chipset 
Integrated Graphics Controller (rev 07)
00:02.1 Display controller: Intel Corporation Mobile 4 Series Chipset 
Integrated Graphics Controller (rev 07)
00:19.0 Ethernet controller: Intel Corporation 82567LM Gigabit Network 
Connection (rev 03)
00:1a.0 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI 
Controller #4 (rev 03)
00:1a.1 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI 
Controller #5 (rev 03)
00:1a.2 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI 
Controller #6 (rev 03)
00:1a.7 USB controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI 
Controller #2 (rev 03)
00:1b.0 Audio device: Intel Corporation 82801I (ICH9 Family) HD Audio 
Controller (rev 03)
00:1c.0 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 1 
(rev 03)
00:1c.1 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 2 
(rev 03)
00:1c.2 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 3 
(rev 03)
00:1c.3 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 4 
(rev 03)
00:1d.0 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI 
Controller #1 (rev 03)
00:1d.1 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI 
Controller #2 (rev 03)
00:1d.2 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI 
Controller #3 (rev 03)
00:1d.7 USB controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI 
Controller #1 (rev 03)
00:1e.0 PCI bridge: Intel Corporation 82801 Mobile PCI Bridge (rev 93)
00:1f.0 ISA bridge: Intel Corporation ICH9M-E LPC Interface Controller (rev 03)
00:1f.2 SATA controller: Intel Corporation 82801IBM/IEM (ICH9M/ICH9M-E) 4 port 
SATA Controller [AHCI mode] (rev 03)
00:1f.3 SMBus: Intel Corporation 82801I (ICH9 Family) SMBus Controller (rev 03)
02:00.0 Network controller: Qualcomm Atheros AR9285 Wireless Network Adapter 
(PCI-Express) (rev 01)
03:00.0 Network controller: Qualcomm Atheros AR9287 Wireless Network Adapter 
(PCI-Express) (rev 01)

On Tue, Mar 10, 2015 at 04:16:18AM -0400, Charles Devereaux wrote:
>    Hello
>    The X201 is interesting: it is a close parent of the X200, but with a
>    nice multitouch trackpad. Also, it is at the moment the first thinkpad
>    model that can not be deblobbed: removing AMT apparently causes reboots
>    after 30 minutes.
>    Since the same issues prevents the liberation of any model after the
>    X200, I got myself a X201 tablet and attempted to work around the
>    problem in a "creative" way. My idea is the AMT chip might wait for
>    some minimal amount of code to disable the watchdog before receiving
>    the "real" AMT payload. If this minimal amount of code could be found,
>    it could be replicated without passing the AMT payload, to keep the AMT
>    chip happy so it won't reboot the machine, without allowing it to spy
>    on the user.
>    I started corrupting the AMT flash to see what exactly was needed to
>    remove AMT while fixing the reboot problems (first on the default
>    BIOS), to first have a working solution before extrapolating any
>    further.
>    At the moment, I have a X201 that works fine, does not reboot after 30
>    minutes (tested during 16 hours) while exhibiting all the symptoms of
>    AMT problems :
>     - long boot delay with the default BIOS
>     - AMT can't be found by non free operating systems with AMT drivers
>     - AMT can't be found, updated or reflashed using the non free Intel
>    tool ME6 "FWUpdLcl"
>     - the default BIOS hangs when attempting to go to the AMT config
>    (The only problem is the message "intel ips 0000:00:1f.6: ME failed to
>    update for more than 1s, likely hung", which will be investigated
>    later)
>    While this is a step in the right direction, I still have the device
>    showing up with lspci. It might be due to me still using the default
>    BIOS for my tests. I was trying to flash libreboot on a X200 tablet to
>    check lspci, but I couldn't find the flash chip on the motherboard
>    (it's a separate message)
>    Meanwhile, could someone please post a list of lspci on the libreboot
>    x200 to see if the AMT chip still shows up when invalidated?
>    If on the X201 I could invalidae AMT while preventing the reboot
>    problem, I will share the flash for further investigation. It might
>    help liberate the X201 and maybe the subsequent models (like the X220).
>    No promises - all that is highly experimental, a shot in the dark.