[coreboot-gerrit] Change in coreboot[master]: lib/cbfs: Add fallback to RO region to cbfs_boot_locate

[Patrick Rudolph (Code Review)]

Patrick Rudolph has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/36545 )

Change subject: lib/cbfs: Add fallback to RO region to cbfs_boot_locate
......................................................................

Patch Set 1:

If you don't want to lock RO (make it read-only), you can achieve the same by simply not having a RW partitions at all.
All components would reside in RO, you can still use the measured boot, have enough space for payloads and don't need to duplicate stages.
The good thing is that is already supported by coreboot.

I would expect a minimum amount of items in the RO partition and all of them in RW to have them updated.

While technically correct I fear that without proper documentation (maybe even with proper documentation) it will be hard for the customer to figure out a reliable update scheme, as files are scattered all over the firmware image.