5 Commits

Author	SHA1	Message	Date
Trammell Hudson	b550a7f967	rework startup scripts to combine totp prompt with boot mode selection (issue #221)	2017-07-18 13:44:02 -04:00
Francis Lam	d67360a24b	Added rollback protection to generic boot ... Changed the checking of required hashes or required rollback state to be right before boot, allowing the user to sign/set defaults in interactive mode. Also cleaned up usages of recovery and fixed iso parameter regression.	2017-07-08 16:59:37 -04:00
Francis Lam	8004b5df2a	Added the ability to persist a default boot option ... Similar to qubes-update, it will save then verify the hashes of the kexec files. Once TOTP is verified, a normal boot will verify that the file hashes and all the kexec params match and if successful, boot directly to OS. Also added a config option to require hash verification for non-recovery boots, failing to recovery not met.	2017-07-04 19:49:14 -04:00
Francis Lam	efd662c63a	adds a USB boot option with basic parsing to kexec ... Supports booting from USB media using either the root device or a signed ISO as the boot device. Boot options are parsed with quick/dirty shell scripts to infer kexec params. Closes #195 and begins to address #196	2017-04-29 13:40:34 -04:00
Trammell Hudson	c5c47c6b1c	common recovery shell functions (issue #161)	2017-04-12 06:48:38 -04:00