Thierry Laurion 696ecf54cd

initrd/bin/seal-hotpkey: fix regression of hotp_verification 1.7+ version bump output parsing for <nk3 ...

As tested working with old librem key fw 0.10: works
Log entry of additioanl 30 minutes for https://github.com/linuxboot/heads/pull/1875 (I cannot not fix with my time @jans23 https://github.com/linuxboot/heads/issues/1866, since nk3 is not the only dongle support by Heads)

Signed-off-by: Thierry Laurion <insurgo@riseup.net>

2024-12-21 13:22:38 -05:00

..

basic-autoboot.sh

Add PureBoot Basic Mode

2023-06-21 13:26:45 -04:00

cbfs-init

init: warn user that if CONFIG_QUIET_MODE was enabled in board config at build time but disabled through Configuration Settings applied override, early measurement output got suppressed

2024-12-21 13:21:28 -05:00

cbfs.sh

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

change-time.sh

change-time.sh: Remind of the system time when beginning

2024-08-06 14:01:49 -04:00

config-gui.sh

config-gui.sh: Combine quiet mode / debug output to one output setting

2024-12-21 13:22:03 -05:00

flash-gui.sh

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

flash.sh

Deprecate ash in favor of bash shell; /etc/ash_functions: move /etc/ash_functions under /etc/functions, replace TRACE calls by TRACE_FUNC, remove xx30-flash.init

2024-12-21 13:20:00 -05:00

flashprog-kgpe-d16-openbmc.sh

kgpe-d16 server: TODO AST1100 patch still missing @i-c-o-n https://github.com/linuxboot/heads/blob/master/patches/flashrom-b1f858f65b2abd276542650d8cb9e382da258967/0100-enable-kgpe-d16.patch

2024-10-29 08:58:09 -04:00

generic-init

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

gpg-gui.sh

WiP: staging changes

2024-12-21 13:19:07 -05:00

gpgv

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

gui-init

WiP: staging changes, refusing to fight against tools helping me, formatting changed. sign after tpm-reset now to work around primary handle issue.

2024-12-21 13:19:42 -05:00

gui-init-basic

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

inject_firmware.sh

codebase: silence dd output while capturing output in variables when needed

2024-12-21 13:13:31 -05:00

kexec-boot

codebase: CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE -> CONFIG_FINALIZE_PLATFORM_LOCKING

2024-10-31 10:23:06 -04:00

kexec-insert-key

WiP: staging changes including https://github.com/linuxboot/heads/pull/1850 https://github.com/Nitrokey/nitrokey-hotp-verification/pull/43 and https://github.com/Nitrokey/nitrokey-hotp-verification/pull/46

2024-12-21 13:18:55 -05:00

kexec-iso-init

kexec-iso-init: Always show kernel arguments suppressions/additions overrides

2024-10-16 18:33:02 -04:00

kexec-parse-bls

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

kexec-parse-boot

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

kexec-save-default

kexec-save-default kexec-select-boot: fix primary handle once more. Can't wait we get rid of this... file must exist and not be empty, and hash output to console must not be silenced

2024-12-21 13:20:53 -05:00

kexec-save-key

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

kexec-seal-key

WiP: staging changes

2024-12-21 13:19:07 -05:00

kexec-select-boot

initrd/bin/kexec-select-boot: clarify that TPM2 primary handle HASH is created upon setting default boot (was not clear)

2024-12-21 13:21:22 -05:00

kexec-sign-config

WiP: staging changes, refusing to fight against tools helping me, formatting changed. sign after tpm-reset now to work around primary handle issue.

2024-12-21 13:19:42 -05:00

kexec-unseal-key

kexec-insert-key: refactor tampering check for encrypted disk keys prior of TPM unsealing ops

2024-04-11 14:50:40 -04:00

key-init

key-init: If time resets, tell user to set it, but allow skipping

2024-09-06 09:27:37 -04:00

lock_chip

Deprecate ash in favor of bash shell; /etc/ash_functions: move /etc/ash_functions under /etc/functions, replace TRACE calls by TRACE_FUNC, remove xx30-flash.init

2024-12-21 13:20:00 -05:00

media-scan

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

mount-usb

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

network-init-recovery

initrd/bin/network-init-recovery: kill dropbear unconditionally prior of starting it

2024-02-23 12:17:47 -05:00

oem-factory-reset

oem-factory-reset: remove duplicate output 'Checking for USB Security dongle...'

2024-12-21 13:21:16 -05:00

oem-system-info-xx30

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

poweroff

Deprecate ash in favor of bash shell; /etc/ash_functions: move /etc/ash_functions under /etc/functions, replace TRACE calls by TRACE_FUNC, remove xx30-flash.init

2024-12-21 13:20:00 -05:00

qubes-measure-luks

initrd bin/* sbin/insmod + /etc/ash_functions: TPM extend operations now all passed to LOG (quiet mode doesn't show them and logs them to /tmp/debug.log)

2024-12-21 13:13:13 -05:00

reboot

Deprecate ash in favor of bash shell; /etc/ash_functions: move /etc/ash_functions under /etc/functions, replace TRACE calls by TRACE_FUNC, remove xx30-flash.init

2024-12-21 13:20:00 -05:00

root-hashes-gui.sh

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

seal-hotpkey

initrd/bin/seal-hotpkey: fix regression of hotp_verification 1.7+ version bump output parsing for <nk3

2024-12-21 13:22:38 -05:00

seal-totp

seal-totp: Print plain secret instead of URL for manual entry

2024-12-21 13:21:57 -05:00

setconsolefont.sh

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

talos-init

initrd/bin/talos-init: remove alias for cbmem and bump coreboot revision

2023-07-12 14:50:54 +02:00

tpm-reset

TPM2 DUK and TOTP/HOTP reseal fix, refactoring and ifferenciating tpm_password into tpm_owner_password and reusing correctly

2023-11-01 10:07:27 -04:00

tpmr

tpmr: check for CONFIG_TPM2_CAPTURE_PCAP=y to export TPM comms under /tmp/tpm0.pcap (not just check for existence of CONFIG_TPM2_CAPTURE_PCAP under env)

2024-12-21 13:22:32 -05:00

uefi-init

tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.

2023-03-08 12:45:46 -05:00

unpack_initramfs.sh

codebase: silence dd output while capturing output in variables when needed

2024-12-21 13:13:31 -05:00

unseal-hotp

Fix HOTP verification logic (and counter increment) in gui-init and oem-factory-reset scripts

2024-04-22 17:24:21 -04:00

unseal-totp

WiP: staging changes, warn loud and clear of weak security posture by using weak OEM defaults provisioned secrets

2024-12-21 13:19:36 -05:00

usb-autoboot.sh

Add USB autoboot feature to PureBoot Basic

2023-06-21 13:26:46 -04:00

usb-init

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

wget-measure.sh

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

wipe-totp

Implement Restricted Boot Mode

2023-06-21 13:26:45 -04:00