heads

basic-autoboot.sh

2023-06-21 13:26:45 -04:00

cbfs-init

init+cbfs-init: refactor and explain why quiet mode cannot suppress measurements of cbfs-init extracted+measured TPM stuff if not in board config

2024-12-21 13:20:06 -05:00

cbfs.sh

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

change-time.sh

change-time.sh: Remind of the system time when beginning

2024-08-06 14:01:49 -04:00

config-gui.sh

config-gui.sh: Add quiet mode toggle, which turns off debug+tracing if enabled, and where enabling debug+tracing disables Quiet mode

2024-12-21 13:19:54 -05:00

flash-gui.sh

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

flash.sh

Deprecate ash in favor of bash shell; /etc/ash_functions: move /etc/ash_functions under /etc/functions, replace TRACE calls by TRACE_FUNC, remove xx30-flash.init

2024-12-21 13:20:00 -05:00

flashprog-kgpe-d16-openbmc.sh

kgpe-d16 server: TODO AST1100 patch still missing @i-c-o-n https://github.com/linuxboot/heads/blob/master/patches/flashrom-b1f858f65b2abd276542650d8cb9e382da258967/0100-enable-kgpe-d16.patch

2024-10-29 08:58:09 -04:00

generic-init

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

gpg-gui.sh

WiP: staging changes

2024-12-21 13:19:07 -05:00

gpgv

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

gui-init

WiP: staging changes, refusing to fight against tools helping me, formatting changed. sign after tpm-reset now to work around primary handle issue.

2024-12-21 13:19:42 -05:00

gui-init-basic

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

inject_firmware.sh

codebase: silence dd output while capturing output in variables when needed

2024-12-21 13:13:31 -05:00

kexec-boot

codebase: CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE -> CONFIG_FINALIZE_PLATFORM_LOCKING

2024-10-31 10:23:06 -04:00

kexec-insert-key

WiP: staging changes including https://github.com/linuxboot/heads/pull/1850 https://github.com/Nitrokey/nitrokey-hotp-verification/pull/43 and https://github.com/Nitrokey/nitrokey-hotp-verification/pull/46

2024-12-21 13:18:55 -05:00

kexec-iso-init

kexec-iso-init: Always show kernel arguments suppressions/additions overrides

2024-10-16 18:33:02 -04:00

kexec-parse-bls

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

kexec-parse-boot

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

kexec-save-default

TPM2 primary handle debugging once more. Can't wait we get rid of this...

2024-12-21 13:20:47 -05:00

kexec-save-key

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

kexec-seal-key

WiP: staging changes

2024-12-21 13:19:07 -05:00

kexec-select-boot

TPM2 primary handle debugging once more. Can't wait we get rid of this...

2024-12-21 13:20:47 -05:00

kexec-sign-config

WiP: staging changes, refusing to fight against tools helping me, formatting changed. sign after tpm-reset now to work around primary handle issue.

2024-12-21 13:19:42 -05:00

kexec-unseal-key

kexec-insert-key: refactor tampering check for encrypted disk keys prior of TPM unsealing ops

2024-04-11 14:50:40 -04:00

key-init

key-init: If time resets, tell user to set it, but allow skipping

2024-09-06 09:27:37 -04:00

lock_chip

Deprecate ash in favor of bash shell; /etc/ash_functions: move /etc/ash_functions under /etc/functions, replace TRACE calls by TRACE_FUNC, remove xx30-flash.init

2024-12-21 13:20:00 -05:00

media-scan

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

mount-usb

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

network-init-recovery

initrd/bin/network-init-recovery: kill dropbear unconditionally prior of starting it

2024-02-23 12:17:47 -05:00

oem-factory-reset

WiP: staging changes, refusing to fight against tools helping me, formatting changed. sign after tpm-reset now to work around primary handle issue.

2024-12-21 13:19:42 -05:00

oem-system-info-xx30

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

poweroff

Deprecate ash in favor of bash shell; /etc/ash_functions: move /etc/ash_functions under /etc/functions, replace TRACE calls by TRACE_FUNC, remove xx30-flash.init

2024-12-21 13:20:00 -05:00

qubes-measure-luks

initrd bin/* sbin/insmod + /etc/ash_functions: TPM extend operations now all passed to LOG (quiet mode doesn't show them and logs them to /tmp/debug.log)

2024-12-21 13:13:13 -05:00

reboot

Deprecate ash in favor of bash shell; /etc/ash_functions: move /etc/ash_functions under /etc/functions, replace TRACE calls by TRACE_FUNC, remove xx30-flash.init

2024-12-21 13:20:00 -05:00

root-hashes-gui.sh

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

seal-hotpkey

WiP: staging changes, refusing to fight against tools helping me, formatting changed. sign after tpm-reset now to work around primary handle issue.

2024-12-21 13:19:42 -05:00

seal-totp

seal-totp: contextualize qr code output for manual input of those without qr scanner app in mobile phone

2024-12-21 13:20:23 -05:00

setconsolefont.sh

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

talos-init

initrd/bin/talos-init: remove alias for cbmem and bump coreboot revision

2023-07-12 14:50:54 +02:00

tpm-reset

TPM2 DUK and TOTP/HOTP reseal fix, refactoring and ifferenciating tpm_password into tpm_owner_password and reusing correctly

2023-11-01 10:07:27 -04:00

tpmr

WiP: staging changes, refusing to fight against tools helping me, formatting changed. sign after tpm-reset now to work around primary handle issue.

2024-12-21 13:19:42 -05:00

uefi-init

tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.

2023-03-08 12:45:46 -05:00

unpack_initramfs.sh

codebase: silence dd output while capturing output in variables when needed

2024-12-21 13:13:31 -05:00

unseal-hotp

Fix HOTP verification logic (and counter increment) in gui-init and oem-factory-reset scripts

2024-04-22 17:24:21 -04:00

unseal-totp

WiP: staging changes, warn loud and clear of weak security posture by using weak OEM defaults provisioned secrets

2024-12-21 13:19:36 -05:00

usb-autoboot.sh

Add USB autoboot feature to PureBoot Basic

2023-06-21 13:26:46 -04:00

usb-init

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

wget-measure.sh

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

wipe-totp

Implement Restricted Boot Mode

2023-06-21 13:26:45 -04:00