d888 d8b d8888 Y8P 888 888 888 888 888 888 888d888 8888b. 888 88888b. 888 888 888 888 888 888P" "88b 888 888 "88b 888 Y88 88P 888 888 888 .d888888 888 888 888 888 Y8bd8P Y88b 888 888 888 888 888 888 888 8888888 Y88P "Y88888 888 "Y888888 888 888 888 888 Y8b d88P "Y88P"
Revision 5 (MD5:
Software-based "jailbreak" allowing all ivybridge-based xx30 thinkpads to softmod custom bios images.
This repo contains the main script and pre-compiled binary files used in the 1vyrain image to flash machines.
The main link to the ready to go live USB image can be found here.
Updates will be published here in the form of scripts that can be downloaded and run on the USB image.
Although 1vyrain has been very thoroughly tested and there were zero bricks during testing, there are some random quirks associated with bypassing normal flashing methods and things can always randomly go awry. There is no warranty or support guaranteed so please keep this in mind if you intend to use this software. I am not responsible for broken devices. Fortunately, it is impossible to permanently brick a device with this method. Worst case scenario, you can flash a backup or fresh BIOS using a hardware programmer.
- Read the long form FAQ before opening an issue.
- Search for prior issues with the problem you are having
- Only open issues related to 1vyrain, and IVprep
- Do not open version compatibility issues for already supported machines
- Automatic exploit chain unlocking bios region for flashing
- Model detection and automatic bios flashing
- Support for custom bios images (coreboot, skulls, heads)
BIOS Mod Features:
- Overclocking support (35xx, 37xx, 38xx, 39xx CPUs)
- Whitelist removal to use any WLAN/WWAN adapter
- Advanced menu (custom fan curve, TDP, etc)
- Intel ME "Soft Temporary Disable" via advanced menu
Please pay careful attention to this section. . Ensure you're on a compatible BIOS version before beginning (check compatibility here). Run IVprep if you are not or are unsure. Clear any BIOS passwords or settings prior to flashing, and do a BIOS setting reset if you can. Ensure your ThinkPad is charged and your adapter is plugged in. If you intend to use a custom binary, make sure you plug in ethernet prior to boot and that your binary is directly accessible via URL.
X330 machines are supported but not automatically detected. They are detected as normal X230 machines. The flashing menu has an additional option to flash a BIOS with the LVDS patch for machines detected as an X230. -i models of the above are also supported because of a shared firmware and motherboard
Supporting New Systems and Opening Issues
Please read the longform FAQ before asking about compatibility or reporting an issue to make sure it is not a duplicate.
- Burn the 1vyrain image onto a flash drive. Validated and recommended tools are:
Rufus (note you have to use DD mode)
- Boot in UEFI mode from the flash drive, with Secure Boot off.
- Follow the on-screen instructions.
- That's it!
Don't be alarmed if your ThinkPad/ThinkLight power cycles a few times after a flash, or you get a CRC Security error. That is normal and will go away after another restart!
NOTE: This will NOT modify your EC. You are safe to flash your EC with the battery or keyboard mod at any time as long as you are on a version compatible with the EC mod (check compatibility here). Both IVprep and 1vyrain will only modify the BIOS region! You can safely use this image to update to the latest modded BIOS without losing your EC mod!
By default, the image includes the latest BIOS versions for all models, but you can flash a custom image such as heads, skulls, or a coreboot build. Make sure you have wired ethernet attached on boot, and that your image is EXACTLY 4MB and uploaded somewhere that you can grab with a simple
wget command(http only, https currently not supported.). When asked what to flash, select "Flash a custom BIOS from URL" (option 2). Input the URL. That's it!
Don't worry, if your download screws up or the filesize was wrong, the flashing will simply fail. You won't brick.
Custom splash image
To get a custom splash image follow this procedure:
- Update with original Lenovo update tool following LOGO.txt instructions
- Read back the
biosregion with flashrom or FPTW
- Chop off first 8M of the rom
dd if=backup.rom of=4M.rom bs=1M skip=8
- Apply patches from patched-bios repo
- Downgrade with IVprep
- Write as a custom binary from liveUSB
To update from an older version of 1vyrain, to a newer version follow the follwing steps. Updates may include security bug fixes.
- Remove any BIOS passwords, including supervisor passwords
- It is suggested to reset BIOS to default settings, and save
- Take out any non-whitelisted devices because the FL1's are untouched
- Use IVprep to downgrade to a flashable stock BIOS version (very important, do not skip!)
- Obtain the latest 1vyrain image compatible with your machine.
- Follow the original installation steps above.
DO NOT SKIP the IVprep process at step 4. This is needed to safely reset to a stock BIOS version. This is different from using IVprep during installation to ensure you are using the proper image. Do not skip step 4 above, this is a crucial step.
The steps to upgrade are essentially the same for downgrading, or moving to any version. Ensure you obtain a compatible 1vyrain image for your machine, reset all passwords, reset to default, and use IVprep to downgrade. You would then go through the installation steps to install the desired 1vyrain version.
I retain all rights to the code found in this repo (excluding the BIOS roms and the patcher binary), and no one may reproduce, distribute, or create derivative works from this repo without including this README.md file in its entirety!
You are not permitted to share this project on the ThinkPad subreddit.
This was a monumental amount of work to put together and release, and took a lot of time.
Special thanks goes to the ThinkPad discord for their efforts testing, especially \x for helping create and finalize the BIOS patches, and digmorepaka for helping shrink the Linux image down significantly and continuing to maintain the repo.
Somehow we had ZERO bricks throughout the entire process! No hardware programmers were needed for recovery!
Please consider donating to the current maintainer if this helped you.
Tip digmorepaka (maintainer)
- BTC bc1qq795vlcjzutl2nc8cclepz50yhvj07esx6vvwy
- ETH 0x3883E27f38f0B7Cd450e56c1b8BD5B699174836d