mirror of
https://github.com/linuxboot/heads.git
synced 2024-12-21 22:07:52 +00:00
8152e8c796
The point of this change is to provide a failsafe (failunsafe?) mode for less technically-savvy users who will ultimately be using Heads by default on Librem laptops. There are some scenarios where an end user might forget to update hashes in /boot after an initrd change or might have some other hash mismatch. Currently that user would then be stuck in a recovery console in Heads not knowing what to do within that limited shell environment to fix the situation. This change adds a 'force' mode to kexec-select-boot that goes straight into a boot menu and bypasses the hash checks so the user could more easily get back into their system to attempt to repair it. It adds appropriate warnings about why this is a risky option and moves it down toward the bottom of the menu. The goal would be to just have this be an emergency option our support could guide a user to if they ended up in this situation. |
||
|---|---|---|
| .. | ||
| flashrom-x230.sh | ||
| generic-init | ||
| gpgv | ||
| gui-init | ||
| kexec-boot | ||
| kexec-insert-key | ||
| kexec-iso-init | ||
| kexec-parse-boot | ||
| kexec-save-default | ||
| kexec-save-key | ||
| kexec-seal-key | ||
| kexec-select-boot | ||
| kexec-sign-config | ||
| kexec-unseal-key | ||
| mount-usb | ||
| poweroff | ||
| qubes-measure-luks | ||
| reboot | ||
| seal-totp | ||
| tpm-reset | ||
| unseal-totp | ||
| usb-init | ||
| usb-scan | ||
| wget-measure.sh | ||
| x230-flash.init | ||