[qubes-users] Coreboot: Security for external monitor

Hello friends,

Laptop w520 thinkpad corebooted.

I would like to be able to use an external monitor connected by the displayport.

This coreboot tutorial https://www.coreboot.org/Board:lenovo/w520
suggest to run the following command:

sudo ./util/nvramtool/nvramtool -w hybrid_graphics_mode=“Dual Graphics”

I tried it in dom0, but nvramtool is not installed, so this starts alarming. Looking for a way to install it found the following for Fedora:

sudo dnf copr enable starlabs/coreboot-configurator
sudo dnf install coreboot-configurator nvramtool

https://support.starlabs.systems/kb/guides/coreboot-configurator
https://starlabs.systems/

But here I doubt if it is worth going forward. First I do not know this Starlabs contributor. Do you know if they can be trusted? Second, even admitting to trust them how may I translate this “copr enable” into Qubes parlance, such as: something like:
sudo qubes-dom0-update copr enable starlabs/coreboot-configurator

Best
Franz

Aug 14, 2022, 7:46 PM by 169101@gmail.com:

Hello friends,

Laptop w520 thinkpad corebooted.

I would like to be able to use an external monitor connected by the displayport.

This coreboot tutorial > Board:lenovo/w520 - coreboot
suggest to run the following command:

sudo ./util/nvramtool/nvramtool -w hybrid_graphics_mode="Dual Graphics"

I tried it in dom0, but nvramtool is not installed, so this starts alarming. Looking for a way to install it found the following for Fedora:

You can get it from your coreboot build:
$ cd coreboot/util/nvramtool
$ make
then copy the resulting binary to dom0 in the usual way.