You may be able to disable the ME to some extent, although I believe the functionality that needs to be retained on newer versions is larger.
You will however still need the Intel FSP blob, which is a huge chunk of proprietary binary code. On anything below Skylake you still need at least an MRC blob.
I haven’t taken a dump on a T480 chip, yet, so you tell me what that’s like.
What I meant by grub was the init payload that gets loaded after BUP. Libreboot uses SeaBIOS first now, which is bad because anybody can start anything and you can’t set a password. This is before systemd or any OS.
Not wanting to knock you, but Libreboot on a T480 is fake. There’s nothing “libre” about it.
Only until Ivy Bridge are you able to remove FSP, MRC and most of the Intel ME code.
They also don’t have grub-only builds anymore, so security went to shit.
Might aswell just build coreboot at that point.
https://libreboot.org/docs/install/t480.html
It’s a significant improvement to me that it’s open source and that - according to the above description - Intel ME is indeed removed.
Have you flashed Libreboot on a T480, then taken a dump of the chip and confirmed that Intel code is still on there?
I also don’t understand why I would need grub when I use systemd’s bootloader. I only want to replace the BIOS.
You may be able to disable the ME to some extent, although I believe the functionality that needs to be retained on newer versions is larger.
You will however still need the Intel FSP blob, which is a huge chunk of proprietary binary code. On anything below Skylake you still need at least an MRC blob.
I haven’t taken a dump on a T480 chip, yet, so you tell me what that’s like.
What I meant by grub was the init payload that gets loaded after BUP. Libreboot uses SeaBIOS first now, which is bad because anybody can start anything and you can’t set a password. This is before systemd or any OS.