Trammell Hudson
2a53c60453
use the mega TPM binary instead of the individual ones
2016-12-26 09:52:40 -05:00
Trammell Hudson
ccea67e8b4
shell scripts to help rewrite Qubes initrd /etc/crypttab (issue #29 )
2016-12-13 15:10:47 -05:00
Trammell Hudson
8ce1309102
Merge branch 'master' of ssh://github.com/osresearch/heads
2016-12-13 14:59:13 -05:00
Trammell Hudson
45ba75949b
kernel 4.9 setup with framebuffer for x230 (issue #64 )
2016-12-13 14:58:23 -05:00
Trammell Hudson
bf3b5a44be
Merge branch 'paulmenzel-remove-trailing-whitespace'
2016-12-13 13:25:50 -05:00
Paul Menzel
92b20bdfb6
Strip trailing whitespace
2016-12-13 19:10:21 +01:00
Trammell Hudson
6040851d36
Merge branch 'paulmenzel-spell-coreboot-lowercase'
2016-12-13 13:07:09 -05:00
Paul Menzel
aa3375f5ef
Spell coreboot all lowercase
...
[coreboot](https://www.coreboot.org/ ) is officially spelled all
lowercase.
2016-12-13 18:02:35 +01:00
Trammell Hudson
a6520772dc
Update Heads to use the 4.9 Linux LTS kernel.
...
No patches are required to boot 4.9 as a coreboot payload,
unlike the 4.7 kernel that required a head_64.S patch.
The new kernel is about 40 KB larger than the 4.7; the
config might be shrinkable.
Close issue #61 .
2016-12-12 11:01:18 -05:00
Trammell Hudson
ff5639a542
Build cryptsetup and install it into the initrd
2016-12-01 14:03:55 -05:00
Trammell Hudson
0aae22d67c
increase CBFS size for qemu builds to allow easier experimentation
2016-12-01 14:02:57 -05:00
Trammell Hudson
c98a392508
enable EPOLL for plymouth
2016-12-01 14:02:26 -05:00
Trammell Hudson
3b0509758a
parse the Firmware Interface Table (FIT) on a ROM image
2016-12-01 13:57:35 -05:00
Trammell Hudson
0b20cb297c
Merge pull request #56 from zaolin/strip
...
Update cryptsetup and strip down.
2016-11-29 14:32:59 -05:00
Trammell Hudson
05056aefc0
include chmod ( fix #30 )
2016-11-29 14:29:38 -05:00
Philipp Deppenwiese
5fd61f3e52
Update cryptsetup module and strip it down
...
Signed-off-by: Philipp Deppenwiese <zaolin@das-labor.org>
2016-11-29 20:24:01 +01:00
zaolin
ba01c24f46
Merge pull request #2 from osresearch/master
...
Merge
2016-11-29 19:48:56 +01:00
Trammell Hudson
e55a6a4df4
Rework Makefile a bit.
...
rename TARGET to BOARD (fix #55 )
use .INTERMEDIATE trick to avoid building multiple times (fix #52 )
Don't touch build/*/.config if we don't have to (fix #51 )
2016-11-29 11:28:05 -05:00
Trammell Hudson
4a83273744
disable ACPI on qemu boots, this fixes #53
2016-11-29 11:22:47 -05:00
Trammell Hudson
11b52e9a86
merge; start-xen had been relocated
2016-11-28 13:53:19 -05:00
zaolin
c51a73aa05
Merge pull request #1 from osresearch/master
...
check PGP signatures on xen, kernel and initrd (partial fix for #43 )
2016-11-24 03:57:01 +01:00
Trammell Hudson
4fbd6ca58b
Make coreboot building modular to support multiple boards.
...
This touches most of the module configurations since the
coreboot build process had to add a few new features.
The Linux kernel could make use of it as well if we need
separate x230/chell/qemu kernels, for instance.
2016-11-23 12:11:08 -05:00
Trammell Hudson
cc1c198810
ignore modified .config files
2016-11-23 12:10:40 -05:00
Trammell Hudson
638329709e
include find and compression tools
2016-11-23 10:47:04 -05:00
Trammell Hudson
3f444efe8c
formatting
2016-11-23 10:46:32 -05:00
Trammell Hudson
1414023e6e
include cryptsetup in build, will break 4M ROM images
2016-11-23 10:46:04 -05:00
Trammell Hudson
da2a6580ce
allow key file to be specified on command line
2016-11-23 10:45:39 -05:00
Trammell Hudson
9fb998bef0
check PGP signatures on xen, kernel and initrd (partial fix for #43 )
2016-11-03 16:45:50 -04:00
Trammell Hudson
e9e6d661d3
wrappers to seal/unseal drive encryption keys from the TPM
2016-10-28 04:59:51 -04:00
Trammell Hudson
eda28b5800
move start-xen so that it is in the path
2016-10-28 04:59:21 -04:00
Trammell Hudson
a281d6b8a5
fix default location for trusted keys
2016-10-28 04:58:57 -04:00
Trammell Hudson
5a5e7047c7
fix default location for trusted keys
2016-10-28 04:58:39 -04:00
Trammell Hudson
f65fe75823
simplify startup arguments for qubes r3.2
2016-10-28 04:57:11 -04:00
Trammell Hudson
9311428082
add /sbin paths
2016-10-26 15:11:12 -04:00
Trammell Hudson
16bad1abd4
enable aes-xts in Heads kernel (issue #44 )
2016-10-26 15:10:53 -04:00
Trammell Hudson
279d384885
check signatures on kernel, initramfs and xen (issue #43 )
2016-10-25 14:42:36 -04:00
Trammell Hudson
b818986cb2
ignore vdso fake library on fedora
2016-09-28 11:13:27 -04:00
Trammell Hudson
b30846379d
some frequently asked questions, with draft answers
2016-09-27 19:53:28 -04:00
Trammell Hudson
24ef1e1a0a
Created initrd/bin and initrd/lib directories (fix issue #33 )
2016-09-26 14:55:48 -04:00
Trammell Hudson
2663fc464b
updated for receent merge of coreboot master
2016-09-26 14:10:32 -04:00
Trammell Hudson
4d20bc3e13
preload the recovery shell command line history
2016-09-26 13:51:10 -04:00
Trammell Hudson
c66167b9e5
remove unused binary sealtotp/unsealtotp programs
2016-09-11 00:07:56 -04:00
Trammell Hudson
4b2064f193
improve library/binary handling in building initrd (issue #21 )
2016-09-10 17:36:36 -04:00
Trammell Hudson
ab5fb03475
enable unicode on vt so that qrenc works
2016-09-09 18:32:44 -04:00
Trammell Hudson
9a85bc22d9
use the new tpmtotp shell scripts
2016-09-09 17:24:52 -04:00
Trammell Hudson
0e16afe17a
update config after recent coreboot/coreboot merge
2016-09-09 13:27:20 -04:00
Trammell Hudson
05d1c66d8d
extreme compression
2016-09-09 13:26:52 -04:00
Trammell Hudson
e342aa3f18
checkout tpmtotp from github, install various tpm utilities
2016-08-19 17:25:44 -04:00
Trammell Hudson
a707cab403
correct path and patch for xen-4.6.3 files
2016-08-19 14:51:45 -04:00
Trammell Hudson
47ad314798
enable CONFIG_USE_BLOBS to checkout non-free binary blobs submodule
2016-08-19 14:41:32 -04:00
