Lenovo ThinkPad T430 / Nitrokey NitroPad T430

Thanks for the tip! I tried it and had some issues, this is what I used:

# Heads T430 build

distrobox-create Coreboot -i docker.io/library/debian:stable

distrobox-enter Debian

sudo apt install nala

sudo nala install build-essential zlib1g-dev uuid-dev libdigest-sha-perl libelf-dev bc bzip2 bison flex git gnupg iasl m4 nasm patch python3 wget gnat cpio ccache pkg-config cmake libusb-1.0-0-dev autoconf texinfo ncurses-dev doxygen graphviz udev libudev1 libudev-dev automake libtool rsync innoextract

mkdir Download

git clone https://github.com/osresearch/heads

wget https://raw.githubusercontent.com/corna/me_cleaner/master/me_cleaner.py

wget https://download.lenovo.com/pccbbs/mobiles/g1rg24ww.exe

sha256sum me_cleaner.py
sha256sum g1rg24ww.exe

#f60e1990e2da2b7efa58a645502d22d50afd97b53a092781beee9b0322b61153 g1rg24ww.exe
#28e9c1904690a39d9bbb913ddfde38f6f6a6428654105be3ca911fd53866b27a me_cleaner.py

innoextract g1rg24ww.exe -d heads/blobs/xx30

python3 me_cleaner.py -r -t -O heads/blobs/xx30/me.bin heads/blobs/xx30/app/ME8_5M_Production.bin

cd heads

make BOARD=t430-maximized CPUS=$(nproc)

cd ..

python3 me_cleaner.py -s heads/build/t430-maximized/heads-t430-maximized-*-bottom.rom

# flashing
sudo flashrom --programmer ch341a_spi -c "MX25L6406E/MX25L6408E" -r t430-8mb.rom

sudo flashrom --programmer ch341a_spi -c "MX25L6406E/MX25L6408E" -w heads-t430-hotp-maximized-v0.2.0-1150-g0670bcd-bottom.rom

sudo flashrom --programmer ch341a_spi -c "MX25L3206E/MX25L3208E" -r t430-4mb.rom

sudo flashrom --programmer ch341a_spi -c "MX25L3206E/MX25L3208E" -w heads-t430-hotp-maximized-v0.2.0-1150-g0670bcd-top.rom

I want to convert this to a script that fails when one thing in the chain fails. For that it would be great to also have the test with reading the bios image and comparing the diff or some hashsums like sha256.

Also, there is no python python2 in debian, as well as no python command, at least for me. I used python3 instead and it worked.

Now when trying to build the image I get the error:

Makefile:170: *** "t430-maximized: neither CONFIG_COREBOOT nor CONFIG_LINUXBOOT is set?".  Stop.

How and what config would I use here?