Trammell Hudson 353a0efe6f

Rework /init and qubes setup scripts (issue #27, #155, #32, #29, #110) ...

This adds support for seamless booting of Qubes with a TPM disk key,
as well as signing of qubes files in /boot with a Yubikey.

The signed hashes also includes a TPM counter, which is incremented
when new hashes are signed.  This prevents rollback attacks against
the /boot filesystem.

The TPMTOTP value is presented to the user at the time of entering
the disk encryption keys.  Hitting enter will generate a new code.

The LUKS headers are included in the TPM sealing of the disk
encryption keys.

2017-04-12 06:57:58 -04:00

..

flashrom-x230.sh

copy file and compute sha256 before flashing

2017-04-12 06:50:18 -04:00

generate-crypttab

shell scripts to help rewrite Qubes initrd /etc/crypttab (issue #29)

2016-12-13 15:10:47 -05:00

gpgv

Enable gpg with card support (issue #32)

2017-04-05 17:59:49 -04:00

mount-usb

move usb-storage into a kernel module (issue #160)

2017-04-05 19:20:53 -04:00

qubes-boot

Rework /init and qubes setup scripts (issue #27, #155, #32, #29, #110)

2017-04-12 06:57:58 -04:00

qubes-init

Rework /init and qubes setup scripts (issue #27, #155, #32, #29, #110)

2017-04-12 06:57:58 -04:00

qubes-install

helper to install qubes from the recovery shell (issue #27)

2017-04-12 06:55:22 -04:00

qubes-measure-luks

qubes init script and improved TPM disk encryption with LUKS headers (issue #123 and #6)

2017-04-01 23:02:00 -04:00

qubes-update

Rework /init and qubes setup scripts (issue #27, #155, #32, #29, #110)

2017-04-12 06:57:58 -04:00

seal-key

try creating NVRAM entry before prompting for owner password (issue #151)

2017-04-12 06:53:54 -04:00

seal-totp

import the seal/unseal totp scripts since they are very specialized to the heads install, skip owner password if not required (issue #151)

2017-04-12 06:49:39 -04:00

start-xen

formatting

2016-11-23 10:46:32 -05:00

tpm-reset

helper to do a forcible TPM reset (issue #27)

2017-04-12 06:45:15 -04:00

unseal-key

Rework /init and qubes setup scripts (issue #27, #155, #32, #29, #110)

2017-04-12 06:57:58 -04:00

unseal-totp

import the seal/unseal totp scripts since they are very specialized to the heads install, skip owner password if not required (issue #151)

2017-04-12 06:49:39 -04:00

wget-measure.sh

wget and measure files into the PCR

2017-03-27 18:03:29 -04:00

wrap-cpio

shell scripts to help rewrite Qubes initrd /etc/crypttab (issue #29)

2016-12-13 15:10:47 -05:00

x230-flash.init

use the external functions (issue #161)

2017-04-12 06:57:26 -04:00