heads/patches
Thierry Laurion 37f04e2855
Fix key to card failing with invalid time when moving keys to smartcard on master (Opt: Authenticated Heads)
- Revert gnupg toolstack version bump to prior of #1661 merge (2.4.2 -> 2.4.0). Version bump not needed for reproducibility.
  - Investigation and upstream discussions will take their time resolving invalid time issue introduced by between 2.4.0 and latest gnupg, fix regression first under master)

- oem-factory-reset
  - Adding DO_WITH_DEBUG to oem-factory-reset for all its gpg calls. If failing in debug mode, /tmp/debug.txt contains calls and errors
  - Wipe keyrings only (*.gpg, *.kbx)  not conf files under gpg homedir (keep initrd/.gnupg/*.conf)

- flake.nix
  - switch build derivative from qemu and qemu_kvm to qemu_full to have qemu-img tool which was missing to run qemu boards (v0.1.8 docker)
  - add gnupg so that qemu boards can call inject_gpg to inject public key in absence of flashrom+pflash support for internal flashing

- flake.lock: Updated nix pinned package list under flake.lock with 'nix flake update' so qemu_full builds

- README.md: have consistent docker testing + release (push) notes

- .circleci/config.yml: depend on docker v0.1.8 (qemu_full built with canokey-qemu lib support, diffoscopeMinimal and gnupg for proper qemu testing)

TODO:
- some fd2 instead of fd1?!
- oem-factory-resest has whiptail_or_die which sets whiptail box to HEIGHT 0. This doesn't show a scrolling window on gpg errors which is problematic with fbwhiptail, not whiptail

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
2024-05-17 09:27:29 -04:00
..
coreboot-4.11 modules/coreboot: Cache coreboot toolchain archives and use mirrors 2024-01-08 15:10:56 -05:00
coreboot-4.19 coreboot configs: changeset needed to use efifb 2023-08-16 09:39:09 -04:00
coreboot-4.22.01 patches/coreboot-4.22.01/0001-x230-fhd-variant.patch: adapt patch for Makefile.inc (Makefile.mk doesn't exist under 4.22) 2024-03-25 15:15:58 -04:00
coreboot-dasharo-unreleased patches/coreboot-dasharo-unreleased : keep track of patches per upsream dasharo+heads unreleased patches to apply on top of last release 2024-05-14 12:09:22 -04:00
coreboot-talos_2 coreboot-talos_2: Patch acpi-unix2 mirror to Intel 2023-07-11 15:03:36 -04:00
flashrom-b1f858f65b2abd276542650d8cb9e382da258967 Makefile: replace patch with git apply 2022-08-21 14:28:30 -04:00
linux-4.14.62 backport upstream patch for 4.14.62. Allows building on debian 12 2023-05-02 20:49:34 +01:00
linux-4.19.139 Support Multiple Kernel Options (#805) 2020-08-20 19:26:48 -04:00
linux-5.4.69 modules/linux: add support for building with kernel 5.4.69 (#854) 2020-10-25 01:26:08 -04:00
linux-5.5-openpower Remove hard coded paths in shebang lines 2024-05-02 13:00:22 -04:00
linux-5.10.5 Remove hard coded paths in shebang lines 2024-05-02 13:00:22 -04:00
linux-6.1.8 modules/linux: Support building with Linux 6.1.8. 2023-06-21 13:26:49 -04:00
slang-2.3.3 modules/patches slang: bump to version 2.3.3 so we can disable termcap without hacking around 2024-05-02 13:02:55 -04:00
bash-5.1.16.patch patches/bash-5.1.16.patch: Do not increment build number 2023-04-27 11:49:22 -06:00
busybox-1.36.1.patch Add external/usb disk encryption (adds exfatprogs and e2fsprogs) 2023-08-28 16:23:48 -04:00
cryptsetup2-2.3.3.patch make cryptsetup1/cryptsetup2 optional 2021-01-30 07:28:28 +02:00
cryptsetup-1.7.3.patch make cryptsetup1/cryptsetup2 optional 2021-01-30 07:28:28 +02:00
dropbear-2016.74.patch fix patches to have the correct -p level 2017-09-20 14:26:07 -04:00
gpg2-2.4.0.patch Fix key to card failing with invalid time when moving keys to smartcard on master (Opt: Authenticated Heads) 2024-05-17 09:27:29 -04:00
gpg-1.4.21.patch force cross_compile=yes for gnupg (issue #299) 2018-01-20 16:56:53 -05:00
kexec-2.0.26.patch kexec-2.0.26.patch: report to user in non-debug context that unsupported fb/drm driver is needed on OS initrd 2023-07-07 15:33:02 -04:00
libassuan-2.5.5.patch Fix key to card failing with invalid time when moving keys to smartcard on master (Opt: Authenticated Heads) 2024-05-17 09:27:29 -04:00
libgcrypt-1.8.3.patch Fix key to card failing with invalid time when moving keys to smartcard on master (Opt: Authenticated Heads) 2024-05-17 09:27:29 -04:00
libgcrypt-1.10.1.patch libgcrypt: disconnect tests from the build 2023-06-27 11:39:56 -04:00
libgcrypt-1.10.2.patch modules/gpg2: Bump version 2.4.0 -> 2.4.2 2024-05-02 13:00:37 -04:00
libgpg-error-1.46.patch Fix key to card failing with invalid time when moving keys to smartcard on master (Opt: Authenticated Heads) 2024-05-17 09:27:29 -04:00
libksba-1.3.5.patch modules: maintain reproducibility by removing rpath 2020-01-16 09:36:42 -08:00
libksba-1.6.3.patch Fix key to card failing with invalid time when moving keys to smartcard on master (Opt: Authenticated Heads) 2024-05-17 09:27:29 -04:00
lvm2-2.02.168.patch lvm2: turn off buffering, which prevents segfault with new musl (#651) 2020-01-09 13:27:09 +01:00
newt-0.52.20.patch newt(whiptail): fix code that was doing toupper of input 2023-10-11 15:47:53 -04:00
openssl-3.0.8.patch OpenSSL (libcrypto): patch so that crypto/buildinfo.h generated by perl script contains reproducible date and fake compiler_flags 2024-04-03 13:48:47 -04:00
pciutils-3.5.4.patch build the superiotool, which requires a hack on the pciutils lib/types.h file 2018-03-02 09:37:31 -05:00
powerpc-utils-1.3.5.patch modules/powerpc-utils: add 2023-06-07 01:10:13 +03:00
tpm2-tools-5.6.patch modules-tpm2-tools: bump from 5.2->5.6 (removes need to hack around PACKAGE_VERSION string which configure.ac points to ./VERSION already 2024-04-03 13:48:52 -04:00
tpm2-tss-3.2.2.patch modules/tpm2-tss: sed configure script to remove hardcoding of libs, move patch 3.2.0->3.2.2 2024-04-03 13:48:58 -04:00
util-linux-2.29.2.patch patches/util-linux: patch configure script so that all hardcode_into_libs=yes -> hardcode_into_libs=no 2023-03-07 11:02:17 -05:00