Kyle Rankin 665754122d

Allow insecure boot mode to bypass kexec sig checks ...

There was a bug in the "force" boot mode where it would still fail if
signatures didn't match. This was because the check_config function
validates the signatures for kexec files. I've added a few conditionals
here so that in the case of a forced boot mode, we can bypass those
signature checks that would prevent boot and error out to a recovery
console.

2018-03-14 10:18:52 -07:00

..

flashrom-kgpe-d16-openbmc.sh

Board, linux and coreboot configs

2018-03-01 00:40:46 -05:00

flashrom-kgpe-d16.sh

Board, linux and coreboot configs

2018-03-01 00:40:46 -05:00

flashrom-x230.sh

copy file and compute sha256 before flashing

2017-04-12 06:50:18 -04:00

generic-init

Ensure recovery for failed default boot

2017-09-02 14:13:29 -04:00

gpgv

Enable gpg with card support (issue #32)

2017-04-05 17:59:49 -04:00

gui-init

Add a menu option to reset TPM for bootstrapping. Widen menus.

2018-03-08 16:36:56 -08:00

kexec-boot

kexec-boot patch so that xen can be booted from bootdir and referred xen.gz and not internal flash xen.gz

2018-03-08 00:58:50 -05:00

kexec-insert-key

Allow boot without unseal of TPM LUKS key

2017-09-02 14:13:29 -04:00

kexec-iso-init

Strip invalid leading/trailing '/' from script params

2017-09-02 14:13:29 -04:00

kexec-parse-boot

Strip invalid leading/trailing '/' from script params

2017-09-02 14:13:29 -04:00

kexec-save-default

Cleanup of init to support server and desktop

2018-02-25 11:51:19 -08:00

kexec-save-key

Allow TPM LUKS key to be set during default selection

2017-09-02 14:13:29 -04:00

kexec-seal-key

remove trailing / on the /boot device parameter

2017-07-17 12:43:14 -04:00

kexec-select-boot

Allow insecure boot mode to bypass kexec sig checks

2018-03-14 10:18:52 -07:00

kexec-sign-config

Add OHCI and UHCI drivers to initrd.

2018-02-15 22:59:22 +08:00

kexec-unseal-key

Allow boot without unseal of TPM LUKS key

2017-09-02 14:13:29 -04:00

mount-usb

Cleanup of init to support server and desktop

2018-02-25 11:51:19 -08:00

poweroff

Ensure recovery for failed default boot

2017-09-02 14:13:29 -04:00

qubes-measure-luks

qubes init script and improved TPM disk encryption with LUKS headers (issue #123 and #6)

2017-04-01 23:02:00 -04:00

reboot

Ensure recovery for failed default boot

2017-09-02 14:13:29 -04:00

seal-totp

import the seal/unseal totp scripts since they are very specialized to the heads install, skip owner password if not required (issue #151)

2017-04-12 06:49:39 -04:00

tpm-reset

helper to do a forcible TPM reset (issue #27)

2017-04-12 06:45:15 -04:00

unseal-totp

print and update the timestamp on the TOTP while waiting for disk unlock code

2017-04-12 08:28:31 -04:00

usb-init

Cleanup of init to support server and desktop

2018-02-25 11:51:19 -08:00

usb-scan

Allow TPM LUKS key to be set during default selection

2017-09-02 14:13:29 -04:00

wget-measure.sh

wget and measure files into the PCR

2017-03-27 18:03:29 -04:00

x230-flash.init

load usb-storage module in x230-flash.init

2017-04-16 17:37:14 -04:00