heads/boards/librem13v2/librem13v2.config

# Configuration for a librem13v2
CONFIG_LINUX_CONFIG=config/linux-librem13v2.config
CONFIG_COREBOOT_CONFIG=config/coreboot-librem13v2.config

export CONFIG_COREBOOT=y
CONFIG_CRYPTSETUP=y
CONFIG_FLASHROM=y
CONFIG_FLASHTOOLS=y
CONFIG_GPG=y
CONFIG_KEXEC=y
CONFIG_UTIL_LINUX=y
CONFIG_LVM2=y
CONFIG_MBEDTLS=y
CONFIG_PCIUTILS=y
CONFIG_POPT=y
CONFIG_QRENCODE=y
CONFIG_TPMTOTP=y

#CONFIG_SLANG=y
#CONFIG_NEWT=y
CONFIG_CAIRO=y
CONFIG_FBWHIPTAIL=y
CONFIG_LIBREMKEY=y

CONFIG_LINUX_USB=y

export CONFIG_TPM=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
export CONFIG_BOOT_KERNEL_ADD="iommu=pt"
export CONFIG_BOOT_KERNEL_REMOVE=""
export CONFIG_BOOT_DEV="/dev/sda1"
export CONFIG_BOOT_GUI_MENU_NAME="Purism Librem 13v2 Heads Boot Menu"
export CONFIG_USB_BOOT_DEV="/dev/sdb1"
export CONFIG_WARNING_BG_COLOR="--background-gradient 0 0 0 150 125 0"
export CONFIG_ERROR_BG_COLOR="--background-gradient 0 0 0 150 0 0"
Add board and Linux kernel config for Purism Librem 13v2 2018-02-14 19:44:18 +00:00			`# Configuration for a librem13v2`
			`CONFIG_LINUX_CONFIG=config/linux-librem13v2.config`
Merge branch 'librem13v2_blobs_config' of https://github.com/kakaroto/heads 2018-03-12 17:56:11 +00:00			`CONFIG_COREBOOT_CONFIG=config/coreboot-librem13v2.config`
Add board and Linux kernel config for Purism Librem 13v2 2018-02-14 19:44:18 +00:00
Read and measure CBFS files into initrd during init 2018-03-12 01:27:19 +00:00			`export CONFIG_COREBOOT=y`
Add board and Linux kernel config for Purism Librem 13v2 2018-02-14 19:44:18 +00:00			`CONFIG_CRYPTSETUP=y`
			`CONFIG_FLASHROM=y`
Add flashtool to all coreboot-based boards 2018-04-22 01:29:52 +00:00			`CONFIG_FLASHTOOLS=y`
Add board and Linux kernel config for Purism Librem 13v2 2018-02-14 19:44:18 +00:00			`CONFIG_GPG=y`
			`CONFIG_KEXEC=y`
			`CONFIG_UTIL_LINUX=y`
			`CONFIG_LVM2=y`
			`CONFIG_MBEDTLS=y`
			`CONFIG_PCIUTILS=y`
			`CONFIG_POPT=y`
			`CONFIG_QRENCODE=y`
			`CONFIG_TPMTOTP=y`

Add Cairo/FBWhiptail to the build process Enable it by default for the Librem 13 v2 2018-03-06 19:57:00 +00:00			`#CONFIG_SLANG=y`
			`#CONFIG_NEWT=y`
			`CONFIG_CAIRO=y`
			`CONFIG_FBWHIPTAIL=y`
Add Librem Key support to Heads The Librem Key is a custom device USB-based security token Nitrokey is producing for Purism and among other things it has custom firmware created for use with Heads. In particular, when a board is configured with CONFIG_LIBREMKEY, this custom firmware allows Heads to use the sealed TOTP secret to also send an HOTP authentication to the Librem Key. If the HOTP code is successful, the Librem Key will blink a green LED, if unsuccessful it will blink red, thereby informing the user that Heads has been tampered with without requiring them to use a phone to validate the TOTP secret. Heads will still use and show the TOTP secret, in case the user wants to validate both codes (in case the Librem Key was lost or is no longer trusted). It will also show the result of the HOTP verification (but not the code itself), even though the user should trust only what the Librem Key displays, so the user can confirm that both the device and Heads are in sync. If HOTP is enabled, Heads will maintain a new TPM counter separate from the Heads TPM counter that will increment each time HOTP codes are checked. This change also modifies the routines that update TOTP so that if the Librem Key executables are present it will also update HOTP codes and synchronize them with a Librem Key. 2018-06-19 19:27:27 +00:00			`CONFIG_LIBREMKEY=y`
Add Cairo/FBWhiptail to the build process Enable it by default for the Librem 13 v2 2018-03-06 19:57:00 +00:00
Add board and Linux kernel config for Purism Librem 13v2 2018-02-14 19:44:18 +00:00			`CONFIG_LINUX_USB=y`

generate /etc/config from exported configuration variables 2018-02-28 19:57:46 +00:00			`export CONFIG_TPM=y`
Merge branch 'add_gui_init' of https://github.com/kylerankin/heads into kylerankin-add_gui_init 2018-02-28 20:06:06 +00:00			`export CONFIG_BOOTSCRIPT=/bin/gui-init`
generate /etc/config from exported configuration variables 2018-02-28 19:57:46 +00:00			`export CONFIG_BOOT_REQ_HASH=n`
			`export CONFIG_BOOT_REQ_ROLLBACK=n`
Librem13v2: Enable IOMMU and Pass-through mode By enabling Pass-through iommu, it fixes the GPU glitching issues we've had with IOMMU, and it also allows us to boot a target kernel without having to give it intel_iommu=igfx_off as argument. 2018-04-03 22:04:03 +00:00			`export CONFIG_BOOT_KERNEL_ADD="iommu=pt"`
			`export CONFIG_BOOT_KERNEL_REMOVE=""`
generate /etc/config from exported configuration variables 2018-02-28 19:57:46 +00:00			`export CONFIG_BOOT_DEV="/dev/sda1"`
Merge branch 'add_gui_init' of https://github.com/kylerankin/heads into kylerankin-add_gui_init 2018-02-28 20:06:06 +00:00			`export CONFIG_BOOT_GUI_MENU_NAME="Purism Librem 13v2 Heads Boot Menu"`
generate /etc/config from exported configuration variables 2018-02-28 19:57:46 +00:00			`export CONFIG_USB_BOOT_DEV="/dev/sdb1"`
Colorize warning and error messages in fbwhiptail Since fbwhiptail allows us to customize the background colors, we should colorize warnings and error messages to provide a user with an additional subtle cue that there might be a problem. I have added two additional configuration options: CONFIG_WARNING_BG_COLOR CONFIG_ERROR_BG_COLOR and in the librem13v2.config file you can see an example for how to set them to be yellow and red gradients, respectively. I've also updated the main two scripts that use whiptail to include those background colors. If you decide to use regular whiptail, just don't set these config options and it should behave as expected. 2018-04-25 20:21:56 +00:00			`export CONFIG_WARNING_BG_COLOR="--background-gradient 0 0 0 150 125 0"`
			`export CONFIG_ERROR_BG_COLOR="--background-gradient 0 0 0 150 0 0"`