Coreboot: Security for external monitor

[Franz]

Hello friends,

Laptop w520 thinkpad corebooted.

I would like to be able to use an external monitor connected by the displayport.

This coreboot tutorial https://www.coreboot.org/Board:lenovo/w520

suggest to run the following command:

sudo ./util/nvramtool/nvramtool -w hybrid_graphics_mode="Dual Graphics"

I tried it in dom0, but nvramtool is not installed, so this starts alarming. Looking for a way to install it found the following for Fedora:

sudo dnf copr enable starlabs/coreboot-configurator
sudo dnf install coreboot-configurator nvramtool

https://support.starlabs.systems/kb/guides/coreboot-configurator

https://starlabs.systems/

But here I doubt if it is worth going forward. First I do not know this Starlabs contributor. Do you know if they can be trusted? Second, even admitting to trust them how may I translate this "copr enable" into Qubes parlance, such as: something like:

sudo qubes-dom0-update copr enable starlabs/coreboot-configurator

Best

Franz

[airele...@tutanota.com]

Aug 14, 2022, 7:46 PM by 169...@gmail.com:

> Hello friends,
>
> Laptop w520 thinkpad corebooted.
>
> I would like to be able to use an external monitor connected by the displayport.
>
> This coreboot tutorial > https://www.coreboot.org/Board:lenovo/w520
> suggest to run the following command:
>
> sudo ./util/nvramtool/nvramtool -w hybrid_graphics_mode="Dual Graphics"
>
> I tried it in dom0, but nvramtool is not installed, so this starts alarming. Looking for a way to install it found the following for Fedora:
>

You can get it from your coreboot build:
$ cd coreboot/util/nvramtool
$ make
then copy the resulting binary to dom0 in the usual way.