Comprehensive Guide to Installing Libreboot on Dell OptiPlex 9020 SFF

This guide provides detailed, step-by-step instructions for installing Libreboot on a Dell OptiPlex 9020 SFF. It covers building Libreboot from source, utilizing me_cleaner and ifdtool to prepare the ROM, and flashing the final libreboot.rom using flashrom. Additionally, it includes instructions on integrating the modified stock.rom back into the Libreboot build for a complete setup.

Prerequisites

Before beginning the installation process, ensure you have the following hardware and software prerequisites:

• Hardware Requirements:
  • Dell OptiPlex 9020 SFF
  • SPI programmer (USB programmer recommended as a backup)
  • Necessary tools to open the device casing
• Software Requirements:
  • A Linux distribution (e.g., Ubuntu, Arch Linux)
  • Git
  • flashrom
  • me_cleaner
  • ifdtool

Step 1: Backup the Current Firmware

Before making any modifications, it is crucial to back up your existing BIOS firmware to prevent potential bricking of your device.

1. Install Flashrom: Ensure flashrom is installed on your system. bash sudo apt update sudo apt install flashrom

2. Dump Current BIOS: Use flashrom to read and backup your current BIOS. bash sudo flashrom -p internal -r stock_backup.rom

3. Verify Backup: Check the integrity of the backup using sha1sum. bash sha1sum stock_backup.rom Compare the output with the expected checksum if available.

Step 2: Prepare the Environment

Set up your Linux environment with all necessary tools and dependencies.

1. Install Essential Packages: bash sudo apt update sudo apt install git build-essential gcc g++ make libtool autoconf automake \ flashrom ifdtool me_cleaner

2. Clone Necessary Repositories: bash git clone https://github.com/corna/me_cleaner.git cd me_cleaner make sudo make install cd ..

Step 3: Clean the Intel Management Engine (ME)

The Intel Management Engine (ME) can pose security and privacy concerns. Cleaning it is essential for a Libreboot setup.

1. Run me_cleaner: Execute me_cleaner to strip the ME from the BIOS ROM. bash me_cleaner --flashrom stock_backup.rom cleaned_me.rom This command generates a cleaned ROM with the ME firmware removed.

2. Verify Cleaning: Ensure that the ME has been successfully removed. bash flashrom -p internal -i Review the output to confirm that the ME section is stripped.

Step 4: Process the BIOS with ifdtool

ifdtool is used to manipulate the Intel Firmware Descriptor, which is necessary for Libreboot compatibility.

1. Extract IFD: Use ifdtool to extract the IFD sections. bash ifdtool --extract-ifd cleaned_me.rom This will create necessary IFD files required for the Libreboot build.

2. Verify IFD Extraction: Ensure that the IFD files are correctly extracted. bash ls | grep ifd You should see files related to the firmware descriptor.

Step 5: Clone and Configure the Libreboot Repository

1. Clone Libreboot: bash git clone https://git.libreboot.org/libreboot/libreboot.git cd libreboot

2. Configure the Build: Launch the configuration menu to select the appropriate target. bash make menuconfig

   • Select the mainboard similar to Dell OptiPlex 9020 SFF.
   • Enable necessary features such as IOMMU if required.

Step 6: Integrate the Cleaned BIOS into Libreboot

1. Copy Cleaned ROM: Place the cleaned_me.rom into the Libreboot build directory. bash cp ../cleaned_me.rom build/

2. Insert IFD Sections: Move the extracted IFD files into the appropriate Libreboot directories. bash cp ../ifd_* build/

Step 7: Build Libreboot from Source

1. Start the Build Process: bash make This command will compile the Libreboot source and generate the libreboot.rom file.

2. Handle Build Errors: If any errors occur during the build, review the error messages, ensure all dependencies are installed, and verify the configuration settings.

Step 8: Add Modified Stock ROM to Libreboot Build

Integrating the modified stock.rom ensures that all vendor-specific files are included in the final build.

1. Insert Vendor Files: Manually add any missing vendor files to the Libreboot build process. bash cp ../stock_backup.rom build/

2. Update Build Configuration: Edit the Libreboot configuration to reference the modified stock.rom. bash nano build/libreboot.cfg Update the configuration settings as necessary to include the vendor files.

3. Rebuild Libreboot: After adding the vendor files, initiate the build process again to incorporate the changes. bash make clean make

Step 9: Flash the Libreboot ROM

With the libreboot.rom file ready, proceed to flash it onto your Dell OptiPlex 9020 SFF using flashrom.

1. Verify the ROM: Ensure that the libreboot.rom is correctly built and compatible. bash flashrom -p internal -l libreboot.rom This command lists the contents of the ROM file for verification.

2. Flash the ROM: Execute the flashing process. bash sudo flashrom -p internal -w libreboot.rom Warning: Ensure that the libreboot.rom is compatible. Flashing an incorrect ROM can permanently damage your device.

3. Confirm Success: After flashing, reboot your system to verify that Libreboot is functioning correctly.

Step 10: Post-Installation Configuration

1. BIOS Settings: Upon first boot, enter BIOS settings to configure any necessary options such as boot order or enabling/disabling peripherals.

2. System Testing: Test all hardware components to ensure they are functioning correctly under Libreboot. Pay special attention to network interfaces, storage devices, and USB ports.

3. Backup Libreboot ROM: Once confirmed, create a backup of the newly flashed libreboot.rom for future recovery. bash sudo flashrom -p internal -r libreboot_backup.rom

Important Considerations

• Compatibility: The Dell OptiPlex 9020 SFF may not be officially supported by Libreboot. Proceed with caution and ensure you have a recovery method in place.
• Risk of Bricking: Incorrect flashing can render your device inoperable. Always verify the ROM file and follow instructions meticulously.
• Warranty Void: Modifying firmware typically voids manufacturer warranties.
• Backup: Always maintain backups of original firmware and configurations.

Additional Resources

libreboot.org

Libreboot Documentation

libreboot.org

Supported Mainboards

github.com

me_cleaner Repository

github.com

ifdtool Repository

flashrom.org

Flashrom Documentation

By following this comprehensive guide, you should be able to install Libreboot on your Dell OptiPlex 9020 SFF successfully. Always refer to the latest Libreboot documentation for updates and additional support.