ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2024-12-24 23:26:44 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

WiP: further removal of unecessary debug messages

Browse Source 
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
This commit is contained in:
Thierry Laurion 2023-10-20 16:39:23 -04:00
parent 1f28c71447
commit 2697a6ad1f
No known key found for this signature in database
GPG Key ID: E7B4A71658E36A93
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
initrd/etc/ash_functions
View File

@ -103,7 +103,7 @@ confirm_gpg_card() {
warn "Please select encrypted LUKS on GPG key material backup thumb drive (not public labeled one)" warn "Please select encrypted LUKS on GPG key material backup thumb drive (not public labeled one)"
mount-usb --pass "$gpg_admin_pin" || die "Unable to mount USB with GPG Admin PIN" mount-usb --pass "$gpg_admin_pin" || die "Unable to mount USB with GPG Admin PIN"
echo "++++ Testing detach-sign operation and verifiying against fused public key in ROM" echo "++++ Testing detach-sign operation and verifiying against fused public key in ROM"
gpg --pinentry-mode=loopback --passphrase-file <(echo -n "${gpg_admin_pin}") --import /media/subkeys.sec || gpg --pinentry-mode=loopback --passphrase-file <(echo -n "${gpg_admin_pin}") --import /media/subkeys.sec >/dev/null 2>&1 ||
die "Unable to import GPG private subkeys" die "Unable to import GPG private subkeys"
#Do a detach signature to ensure gpg material is usable and cache passphrase to sign /boot from caller functions #Do a detach signature to ensure gpg material is usable and cache passphrase to sign /boot from caller functions
dd if=/dev/urandom of="$CR_NONCE" bs=20 count=1 >/dev/null 2>&1 || dd if=/dev/urandom of="$CR_NONCE" bs=20 count=1 >/dev/null 2>&1 ||