heads/boards
Kyle Rankin efc49c7425
Add Root file hash feature
Currently Heads will check files in /boot for tampering before booting
into a system. It would be nice if you could use the trusted environment
within Heads and extend this to check files in / itself. This new script
adds that functionality, however due to the length of time it takes to
perform these kinds of checks, it doesn't run automatically (yet).

This feature can be configured from the config GUI - the root device/
directories to check can be set, and it can be configured to run during
boot.

To make this a bit easier to use, I added a feature to detect whether
the hash file exists and if not, to display a more limited menu to the
user guiding them to create the initial hash file. Otherwise it will
display the date the file was last modified, which can be useful to
determine how stale it is.
2023-06-21 13:26:37 -04:00
..
kgpe-d16_server boards/* : Add/uniformize missing CONFIG_BOARD_NAME for coreboot boards 2022-01-28 14:17:22 -05:00
kgpe-d16_server-whiptail boards/* : Add/uniformize missing CONFIG_BOARD_NAME for coreboot boards 2022-01-28 14:17:22 -05:00
kgpe-d16_workstation boards/* : Add/uniformize missing CONFIG_BOARD_NAME for coreboot boards 2022-01-28 14:17:22 -05:00
kgpe-d16_workstation-usb_keyboard boards/* : Add/uniformize missing CONFIG_BOARD_NAME for coreboot boards 2022-01-28 14:17:22 -05:00
leopard Introduce $(board_build) variable 2022-08-25 20:55:35 +03:00
librem_13v2 Add Root file hash feature 2023-06-21 13:26:37 -04:00
librem_13v4 Add Root file hash feature 2023-06-21 13:26:37 -04:00
librem_14 Add Root file hash feature 2023-06-21 13:26:37 -04:00
librem_15v3 Add Root file hash feature 2023-06-21 13:26:37 -04:00
librem_15v4 Add Root file hash feature 2023-06-21 13:26:37 -04:00
librem_l1um Add Root file hash feature 2023-06-21 13:26:37 -04:00
librem_mini Add Root file hash feature 2023-06-21 13:26:37 -04:00
librem_mini_v2 Add Root file hash feature 2023-06-21 13:26:37 -04:00
p8z77-m_pro-tpm1-hotp-maximized Add ASUS P8Z77-M Pro board 2023-03-30 10:28:40 +01:00
p8z77-m_pro-tpm1-maximized Incorporate COREBOOT_DIr mod and VSCC optioanl setting 2023-04-10 13:43:54 +01:00
qemu-coreboot modules/bash: Include bash in all builds, remove CONFIG_BASH 2023-03-08 12:45:52 -05:00
qemu-coreboot-fbwhiptail modules/bash: Include bash in all builds, remove CONFIG_BASH 2023-03-08 12:45:52 -05:00
qemu-coreboot-fbwhiptail-tpm1 modules/bash: Include bash in all builds, remove CONFIG_BASH 2023-03-08 12:45:52 -05:00
qemu-coreboot-fbwhiptail-tpm1-hotp Merge pull request #1312 from tlaurion/coreboot-4.13_coreboot-4.19_version_bump 2023-04-24 19:21:18 -04:00
qemu-coreboot-fbwhiptail-tpm2 qemu-coreboot-*whiptail-tpm2-* boards: move TPM2 debug PCAP variable to debug section for clarity 2023-04-04 09:36:31 -04:00
qemu-coreboot-fbwhiptail-tpm2-hotp qemu-coreboot-*whiptail-tpm2-* boards: move TPM2 debug PCAP variable to debug section for clarity 2023-04-04 09:36:31 -04:00
qemu-coreboot-whiptail-tpm1 Merge pull request #1312 from tlaurion/coreboot-4.13_coreboot-4.19_version_bump 2023-04-24 19:21:18 -04:00
qemu-coreboot-whiptail-tpm1-hotp modules/bash: Include bash in all builds, remove CONFIG_BASH 2023-03-08 12:45:52 -05:00
qemu-coreboot-whiptail-tpm2 qemu-coreboot-*whiptail-tpm2-* boards: move TPM2 debug PCAP variable to debug section for clarity 2023-04-04 09:36:31 -04:00
qemu-coreboot-whiptail-tpm2-hotp qemu-coreboot-*whiptail-tpm2-* boards: move TPM2 debug PCAP variable to debug section for clarity 2023-04-04 09:36:31 -04:00
qemu-linuxboot Introduce $(board_build) variable 2022-08-25 20:55:35 +03:00
r630 Support Multiple Kernel Options (#805) 2020-08-20 19:26:48 -04:00
s2600wf Support Multiple Kernel Options (#805) 2020-08-20 19:26:48 -04:00
t420 Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
t420-hotp-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
t420-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
t430-hotp-legacy Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
t430-hotp-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
t430-legacy Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
t430-legacy-flash Merge pull request #1312 from tlaurion/coreboot-4.13_coreboot-4.19_version_bump 2023-04-24 19:21:18 -04:00
t430-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
t440p-hotp-maximized Add Heads config for the T440p (maximized/hotp-maximized) 2023-01-18 15:27:45 -05:00
t440p-maximized Make T440p Coreboot build depend on blob files 2023-02-25 19:53:47 -05:00
t520-hotp-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
t520-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
t530-dgpu-hotp-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
t530-dgpu-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
t530-hotp-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
t530-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
talos-2 boards/talos-2/talos-2.config: enable powerpc-utils 2023-06-07 01:10:14 +03:00
tioga Introduce $(board_build) variable 2022-08-25 20:55:35 +03:00
w530-dgpu-K1000m-hotp-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
w530-dgpu-K1000m-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
w530-dgpu-K2000m-hotp-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
w530-dgpu-K2000m-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
w530-hotp-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
w530-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
winterfell Introduce $(board_build) variable 2022-08-25 20:55:35 +03:00
x220 Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
x220-hotp-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
x220-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
x230-hotp-legacy Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
x230-hotp-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
x230-hotp-maximized_usb-kb Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
x230-hotp-maximized-fhd_edp Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
x230-legacy Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
x230-legacy-flash Merge pull request #1312 from tlaurion/coreboot-4.13_coreboot-4.19_version_bump 2023-04-24 19:21:18 -04:00
x230-maximized Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00
x230-maximized-fhd_edp Pass all coreboot 4.13 boards to 4.19 2023-02-27 18:07:06 -05:00