ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2024-12-21 22:07:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
1,310 Commits 27 Branches 6 Tags 21 MiB
5b898e369c
Commit Graph

1310 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
alex-nitrokey
92b1826537
/boot needs to get mounted first 2020-06-24 17:36:53 +02:00
alex-nitrokey
aab2c327e3
Fix warning box title 2020-06-24 17:25:39 +02:00
alex-nitrokey
38ba257063
Include upstream updates of hotp_verification 2020-06-24 16:31:22 +02:00
alex-nitrokey
407778eb9a
Remove unintented paranthesis 2020-06-24 16:16:03 +02:00
alex-nitrokey
53b67d27a4
Prepare usage of /boot/kexec_hotp_key as branding 2020-06-24 16:11:41 +02:00
alex-nitrokey
c07f3b7f7c
Add systeminfo menu option 2020-06-24 10:07:36 +02:00
alex-nitrokey
6d29ab71f9
dd partition Label to menu list 2020-06-24 09:44:50 +02:00
alex-nitrokey
2763711083
Add option to export pubkey 2020-06-23 15:32:51 +02:00
Thierry Laurion
9798cf9c66
x230-htop-verification: coreboot CBFS_SIZE changed to 0x710000 
as per https://github.com/osresearch/heads/pull/748/files#diff-540d604c350e8fd52c25559b642795fbR5
 2020-06-20 11:04:32 -04:00
tlaurion
05c854753c
Merge pull request #625 from MrChromebox/tpm_luks 
kexec-save-default: guard TPM LUKS usage with config option
 2020-06-18 23:08:54 -04:00
tlaurion
fab603153b
Merge pull request #646 from alex-nitrokey/custom-userinfo 
Add option to choose GnuPG userinfo during OEM reset
 2020-06-17 14:00:31 -04:00
alex-nitrokey
28735a8c84
Add CONFIG_HOTP_BRANDING 2020-06-11 17:04:03 +02:00
alex-nitrokey
4069619ead
Rename libremkey-hotp-verification module 2020-06-11 15:54:10 +02:00
alex-nitrokey
fc8c7b0e64
Merge branch 'hotp-verification-update' into hotp-neutral 2020-06-11 15:44:53 +02:00
alex-nitrokey
342431746d
Quick fix to build 2020-06-11 15:39:12 +02:00
alex-nitrokey
1ba73ac1d5
Rename CONFIG_LIBREMKEY to CONFIG_HOTPKEY 2020-06-11 15:29:51 +02:00
Matt DeVillier
cbad9b6637
oem-factory-reset: Handle non-TPM case 
Guard TPM-related bits by checking CONFIG_TPM = y

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
 2020-06-09 12:45:39 -05:00
alex-nitrokey
0e349c565e
Update hotp-verification 2020-06-09 18:42:55 +02:00
Matt DeVillier
0cae2d7805
kexec-save-default: guard TPM LUKS usage with config option 
Add CONFIG_TPM_NO_LUKS_DISK_UNLOCK to allow Librem boards to opt
out of using TPM to store LUKS key, and use it to guard the user
option to add the disk encryption key to the TPM.

Select this option for all Librem boards; all other boards which
select CONFIG_TPM=y will have no change in functionality.

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
 2020-06-08 11:40:55 -05:00
tlaurion
3dbf1f5f39
Merge pull request #744 from tlaurion/CIs_reusable_cache_typo_fix 
CircleCI: fix save_cache (save and restore were not identical)
 2020-06-08 09:43:35 -04:00
tlaurion
53071ce183
CircleCI: fix typos (save_cache and restore_cache not identical) 2020-06-08 09:42:01 -04:00
tlaurion
872ac38fbb
Merge pull request #743 from tlaurion/CIs_reusable_cache_fix 
CircleCI: fix save_cache
 2020-06-07 21:57:20 -04:00
tlaurion
7941dac328
CIs: Replace cache fingerprints so cache is reusable between builds (fix save_cache) 2020-06-07 21:55:45 -04:00
tlaurion
27fe438261
Merge pull request #742 from tlaurion/CIs_reusable_cache 
CIs: Replace cache fingerprints so cache is reusable between builds
 2020-06-07 17:00:24 -04:00
Thierry Laurion
11a0fdc061
CIs: Replace cache fingerprint with username of the user launching the build to make it reusable between PRs 2020-06-07 16:39:38 -04:00
tlaurion
9311eec4f4
Merge pull request #738 from tlaurion/CIs_add_t430 
CIs: add t430 and t430-flash boards to CircleCi and GitlabCI
 2020-06-07 13:52:22 -04:00
Thierry Laurion
dcbeb26e03
CIs: move qemu-coreboot to be built last, add t430 and t430-flash boards to CIs 2020-06-06 12:35:13 -04:00
tlaurion
f095ab0fcb
Merge pull request #736 from tlaurion/libpng_download_from_github 
Libpng download from GitHub
 2020-06-03 16:52:19 -04:00
Thierry Laurion
9090f1a1f9
libpng : moving archive download from sourceforge to github 
Fixes #735
 2020-06-03 16:51:18 -04:00
tlaurion
78053b9ec1
Merge pull request #729 from tlaurion/CIs-cache_restriction-artifacts_cleanup 
CIs: restrict cache, clean past build artifacts.
 2020-05-24 23:21:03 -04:00
Thierry Laurion
7600ce4bff
GitlabCI: restrict cache, store cleaned build artifacts for x230* and qemu-coreboot 2020-05-24 22:16:19 -04:00
tlaurion
488d6529e4
Merge pull request #670 from flawedworld/patch-1 
Add ability to change CMOS values for X230
 2020-05-24 13:58:49 -04:00
tlaurion
3895318749
Merge pull request #728 from tlaurion/add_gitlabci_ci_integration 
Add Fedora 30 gitlab-ci CI configuration building x230-hotp-verification
 2020-05-24 13:47:15 -04:00
tlaurion
c66fed1bac
Merge branch 'master' into add_gitlabci_ci_integration 2020-05-24 13:45:15 -04:00
tlaurion
b1840e8b73
Merge pull request #727 from tlaurion/add_gitlabci_ci_integration 
Add gitlabci ci integration
 2020-05-24 12:32:53 -04:00
tlaurion
4245aec857
Merge pull request #706 from tlaurion/network-init-recovery_dhcp-ntp 
network-init-recovery script: Request IP from DHCP, NTP time
 2020-05-24 11:33:23 -04:00
Thierry Laurion
b88daa7710
Add Fedora 30 gitlab-ci CI configuration building x230-hotp-verification 2020-05-24 10:04:16 -04:00
tlaurion
f1f92a0fec
Merge pull request #726 from tlaurion/gawk_test_over_latest_debian_redo 
upgrade gpg toolstack to latest versions
 2020-05-22 15:17:09 -04:00
Thierry Laurion
972c25de7d
upgrade gpg toolstack to latest versions 
- Remove unrecognized configure options
- fixes gawk issue #668 by upgrading to libgpg-error 1.37 instead of patching 1.32 for regex change (fixed upstream)
- move patches so they match new versions for libassuan, gpg and libgcrypt (no change)

Version change:
- gpg 2.2.10 -> 2.2.20
- libassuan 2.5.1 -> 2.5.3
- libgcrypt 1.8.3 -> 1.8.5
- libgpg-error 1.32 -> 1.37

Size changes:
- gpg                   886.5 -> 911.3 kB
- gpg-agent:            371.9 -> 376.0 kB
- scdaemon:             399.5 -> 407.8 kB
- libgpg-error.so.0     125.9 -> 130.0 kB

Unrecognized options on gpg2 toolstack:
- disable-nls and disable-asm disable-keyserver-helpers disable-hkp disable-finger disable-dns-srv disable-dns-cert and disable-wks-server
 2020-05-22 15:13:06 -04:00
tlaurion
183007e16e
Merge pull request #725 from osresearch/revert-714-gawk_test_over_latest_debian 
Revert "GPG toolstack upgrade to latest available versions (Fixes Gawk issue)"
 2020-05-22 14:57:02 -04:00
tlaurion
0cd1a0d04c
Revert "GPG toolstack upgrade to latest available versions (Fixes Gawk issue)" 2020-05-22 14:55:41 -04:00
tlaurion
69c7b207ba
Merge pull request #714 from tlaurion/gawk_test_over_latest_debian 
GPG toolstack upgrade to latest available versions (Fixes Gawk issue)
 2020-05-22 14:55:04 -04:00
Thierry Laurion
83f2a20cbc
Merge branch 'master' of https://github.com/osresearch/heads into add_gitlabci_ci_integration 2020-05-22 14:47:15 -04:00
Thierry Laurion
fdbac6637f
Add gitlab-ci CI configuration which builds for x230-hotp-verification for the moment 2020-05-22 14:46:24 -04:00
tlaurion
69160699a3
Merge pull request #724 from szszszsz/repro-gitlab-circleci-pr-upstream 
Make hotp-verification build reproducible across CIs
 2020-05-22 14:35:27 -04:00
tlaurion
577fd806d7
Merge pull request #722 from tlaurion/x230-hotp-verification 
board: x230-hotp-verification (includes libremkey-hotp-verification)
 2020-05-22 13:34:16 -04:00
Szczepan Zalega
2d50e01071
Make hotp-verification hashes same across two CIs 
Move from CMake build system to GNU Make for hotp-verification
Change version to one supporting Makefile build

Fixes https://github.com/osresearch/heads/pull/724
Connected:
- https://github.com/Nitrokey/nitrokey-hotp-verification/issues/13
- https://github.com/osresearch/heads/pull/722
 2020-05-22 15:17:04 +02:00
Thierry Laurion
d5083f410c
x230-hotp-verification: Add x230-hotp-verification board to have a HOTP supported remote attestation for Nitrokey Pro 2, Nitrokey Storage 2 and Librem Key 2020-05-21 18:06:19 -04:00
Thierry Laurion
241b0bc680
upgrade gpg toolstack to latest versions 
- Remove unrecognized configure options
- fixes gawk issue #668 by upgrading to libgpg-error 1.37 instead of patching 1.32 for regex change (fixed upstream)
- move patches so they match new versions for libassuan, gpg and libgcrypt (no change)

Version change:
- gpg 2.2.10 -> 2.2.20
- libassuan 2.5.1 -> 2.5.3
- libgcrypt 1.8.3 -> 1.8.5
- libgpg-error 1.32 -> 1.37

Size changes:
- gpg 			886.5 -> 911.3 kB
- gpg-agent:		371.9 -> 376.0 kB
- scdaemon:		399.5 -> 407.8 kB
- libgpg-error.so.0	125.9 -> 130.0 kB

Unrecognized options on gpg2 toolstack:
- disable-nls and disable-asm disable-keyserver-helpers disable-hkp disable-finger disable-dns-srv disable-dns-cert and disable-wks-server
 2020-05-20 13:19:51 -04:00
tlaurion
fa35b3c557
Merge pull request #715 from tlaurion/circle_ci_based_on_debian_bullseye_with_x230-flash_and_reproducibility_troubleshooting_helpers 
CIs: pass CircleCI to debian:bullseye docker image
 2020-05-15 19:20:04 -04:00