heads/qubes/boot.sh.asc

Move Qubes startup script to /boot/boot.sh This also adds a set of files in the qubes/ directory that are meant to be copied to the /boot partition. Issue #154: for ease of upgrading Qubes, the script should live on /boot instead of in the ROM. This requires a GPG signature on the startup script to avoid attacks by modifying the boot script. Issue #123: this streamlines the boot process for Qubes, although the disk password is still not passed in correctly to the initrd (issue #29). This does not address issues #110 of how to find the root device. The best approach is probably disk labels, which will require special installation instructions. 2017-04-03 02:21:49 +00:00			`-----BEGIN PGP SIGNATURE-----`

TPM disk encryption keys for Qubes. Issue #123: This streamline Qubes startup experience by making it possible to have a single-password decryption. Issue #29: The disk keys in `/secret.key` are passed to the systemd in initramfs through `/etc/crypttab`, which is generated on each boot. This is slow; need to look at alternate ways. Issue #110: By using LVM instead of partitions it is now possible to find the root filesystem in a consistent way. Issue #80: LVM is now included in the ROM. 2017-04-03 21:18:11 +00:00			`iQEUAwUAWOK7zw+UgFLd7L5oAQJ/vwf4yf9zRGeKC2pwDJcMoBww1A4E8LbxW8FF`
			`jdbojg8r5uvfuPeF0V7+BjnE5RItr1UiaClxryXpSwElSXNLoyQPdKbUaYr+w5R1`
			`jmwZpXxPkoCkUPpzsFl2JAvHe00d4isOU3rLOH6SJjN1VZDeOFGBkAeH5rr0kBpt`
			`A0WaMW1Qe9RIFDHbyx6sxWXTzMTwHxvskqd5oJojJRiRFlgsOhPY7FGCop0ajEAA`
			`PlYpupMtJQhJGpF4d/vF6nPTC2Trm5FSfK8lgrLwryxI4nSmPpPfXCfdscoid+2L`
			`bJuThLvSdV/0DE1rsNcxxMZmhrPK4AnKK6tvTXA/CK3nwEkNQhgn`
			`=OWVi`
Move Qubes startup script to /boot/boot.sh This also adds a set of files in the qubes/ directory that are meant to be copied to the /boot partition. Issue #154: for ease of upgrading Qubes, the script should live on /boot instead of in the ROM. This requires a GPG signature on the startup script to avoid attacks by modifying the boot script. Issue #123: this streamlines the boot process for Qubes, although the disk password is still not passed in correctly to the initrd (issue #29). This does not address issues #110 of how to find the root device. The best approach is probably disk labels, which will require special installation instructions. 2017-04-03 02:21:49 +00:00			`-----END PGP SIGNATURE-----`