# SPDX-License-Identifier: GPL-2.0+
#
# Copyright 2018 Google LLC
#

config CHROMEOS_VBOOT
	bool "Enable Chromium OS verified boot support"
	imply BINMAN if !SYS_COREBOOT
	imply BLOBLIST
	imply CHROMEOS_SPI
	imply CROS_EC
	imply CROS_EC_LPC if X86
	imply CROS_FLAG
	imply CROS_FLAG_GPIO
	imply CROS_FLAG_CONST
	imply CROS_FLAG_KEY
	imply FWSTORE_SPI_FLASH
	imply LOG
	imply LZ4
	imply NVDATA_CMOS if X86
	imply NVDATA_CROS_EC if SANDBOX
	imply NVDATA_TPM
	imply SOUND
	imply SPL_LZ4
	imply TPM
	imply TPM_V2

if CHROMEOS_VBOOT

config VBOOT_DISABLE_DEV_ON_RECOVERY
	bool "Disable developer mode when going into recovery"
	depends on CHROMEOS

config VBOOT_DEBUG
	bool "Enable debugging for vboot"
	depends on CHROMEOS
	default y

config SPL_CHROMEOS
	bool "Enable Chromium OS verified boot support in SPL"
	depends on CHROMEOS
	select SUPPORT_SPL
	imply SPL
	imply SPL_BLOBLIST
	imply SPL_BOARD_INIT
	imply SPL_CROS_EC
	imply SPL_ENV_SUPPORT
	imply SPL_DM
	imply SPL_DRIVERS_MISC
	imply SPL_FWSTORE_SPI_FLASH
	imply SPL_GPIO
	imply SPL_LIBCOMMON_SUPPORT
	imply SPL_LIBGENERIC_SUPPORT
	imply SPL_LOG
	imply SPL_OF_CONTROL
	imply SPL_REGMAP
	imply SPL_SEPARATE_BSS
	imply SPL_SERIAL_SUPPORT
	imply SPL_SPI_FLASH_SUPPORT
	imply SPL_SPI_SUPPORT
	imply SPL_SYSCON
	imply SPL_TIMER

config TPL_CHROMEOS
	bool "Enable Chromium OS verified boot support in TPL"
	depends on CHROMEOS
	select SUPPORT_TPL
	imply TPL
	imply TPL_BLOBLIST
	imply TPL_BOARD_INIT
	imply TPL_CROS_EC
	imply TPL_DM
	imply TPL_DM_KEYBOARD
	imply TPL_DRIVERS_MISC
	imply TPL_GPIO
	imply TPL_HASH_SUPPORT
	imply TPL_INPUT
	imply TPL_LIBCOMMON_SUPPORT
	imply TPL_LIBGENERIC_SUPPORT
	imply TPL_LOG
	imply TPL_NVDATA_TPM
	imply TPL_OF_CONTROL
	imply TPL_REGMAP
	imply TPL_SERIAL_SUPPORT
	imply TPL_SYSCON
	imply TPL_SYS_MALLOC_SIMPLE
	imply TPL_TIMER
	imply TPL_TPM

config VPL_CHROMEOS
	bool "Enable Chromium OS verified boot support in VPL"
	depends on CHROMEOS
	select SUPPORT_VPL
	imply VPL
	imply VPL_BLOBLIST
	imply VPL_BOARD_INIT
	imply VPL_CROS_EC
	imply VPL_CROS_EC_LPC if X86
	imply VPL_DM
	imply VPL_DM_KEYBOARD
	imply VPL_DRIVERS_MISC
	imply VPL_ENV_SUPPORT
	imply VPL_FWSTORE_SPI_FLASH
	imply VPL_HASH_SUPPORT
	imply VPL_GPIO
	imply VPL_HANDOFF
	imply VPL_I2C_SUPPORT
	imply VPL_INPUT
	imply VPL_LIBCOMMON_SUPPORT
	imply VPL_LIBGENERIC_SUPPORT
	imply VPL_LOG
	imply VPL_NVDATA_CMOS if X86
	imply VPL_NVDATA_TPM
	imply VPL_OF_CONTROL
	imply VPL_PINCTRL
	imply VPL_REGMAP
	imply VPL_SERIAL_SUPPORT
	imply VPL_SPI_FLASH_SUPPORT
	imply VPL_SPI_SUPPORT
	imply VPL_SYS_MALLOC_SIMPLE
	imply VPL_SYSCON
	imply VPL_TIMER
	imply VPL_TPM

config TPL_CHROMEOS_VBOOT_A
	bool "Run vboot stage A (SPL selection) in TPL"
	default y if TPL && !VPL
	imply TPL_FWSTORE_SPI_FLASH
	imply TPL_NVDATA_TPM
	imply TPL_TPM

config VPL_CHROMEOS_VBOOT_A
	bool "Run vboot stage A (SPL selection) in VPL"
	default y if VPL
	imply VPL_FWSTORE_SPI_FLASH
	imply VPL_NVDATA_TPM
	imply VPL_TPM

config SPL_CHROMEOS_VBOOT_B
	bool "Run vboot stage B (U-Boot selection) in SPL"
	default y

config CHROMEOS_VBOOT_C
	bool "Run vboot stage C (kernel selection) in U-Boot proper"
	default y

choice
	prompt "Select TPM version to use for vboot library"
	help
	  The vboot library must be built for either TPM1 or TPM2. U-Boot may
	  support both, but U-Boot's TPM library is not actually used with
	  vboot, since it has its own library.

	  This affects the messages sent by the vboot library.

config CHROMEOS_TPM2
	bool "TPM2"
	help
	  Select this to use a version 2 TPM. This should be used for hardware
	  devices after about 2015, when Chrome OS switched over to using the
	  Cr50.

config CHROMEOS_TPM1
	bool "TPM1"
	help
	  Select this to use a version 1 TPM. This should be used for sandbox
	  since it currently has a better emulator for version 1 than version 2.
	  The sandbox emulator is tpm_tis_sandbox.c and it handles enough
	  messages to get through vboot successfully.

endchoice # "TPM version"

config CHROMEOS_COREBOOT
	bool "Allow booting from coreboot"
	help
	  In some cases it is desirable to boot U-Boot from coreboot and have
	  the verified boot flow continue. Enable this to provide access to CBFS
	  files and the vboot context, as used by coreboot.

config CHROMEOS_TEST
	bool "Enable Chromium OS tests"
	help
	  There are currently no tests specifically for the Chromium OS boot
	  flow, other than the large functional test of running it in sandbox.
	  This option currently does nothing, but the intention is that it will
	  enable building unit tests for each piece of functionality.

source "cros/cmd/Kconfig"
source "cros/flag/Kconfig"
source "cros/fwstore/Kconfig"
source "cros/nvdata/Kconfig"

endif # CHROMEOS_VBOOT