Trammell Hudson 353a0efe6f

Rework /init and qubes setup scripts (issue #27, #155, #32, #29, #110) ...

This adds support for seamless booting of Qubes with a TPM disk key,
as well as signing of qubes files in /boot with a Yubikey.

The signed hashes also includes a TPM counter, which is incremented
when new hashes are signed.  This prevents rollback attacks against
the /boot filesystem.

The TPMTOTP value is presented to the user at the time of entering
the disk encryption keys.  Hitting enter will generate a new code.

The LUKS headers are included in the TPM sealing of the disk
encryption keys.

2017-04-12 06:57:58 -04:00

..

.gnupg

gpg uses pubring.gpg instead of trustedkeys.gpg

2017-04-05 18:43:58 -04:00

bin

Rework /init and qubes setup scripts (issue #27, #155, #32, #29, #110)

2017-04-12 06:57:58 -04:00

etc

common recovery shell functions (issue #161)

2017-04-12 06:48:38 -04:00

lib

musl-libc patches to build a successfull qemu image

2017-01-04 10:31:27 -05:00

sbin

"$@" does not expand correctly in test expressions, use "$*" instead (issue #181)

2017-04-11 06:31:25 -04:00

.ash_history

preload the recovery shell command line history

2016-09-26 13:51:10 -04:00

init

Rework /init and qubes setup scripts (issue #27, #155, #32, #29, #110)

2017-04-12 06:57:58 -04:00

mount-boot

extract and verify gpg signature on the boot script

2016-08-06 17:13:22 -04:00