HardenedVault 8a60930c6b Make the path to crypttab within initramfs overridable ... Not all distro put crypttab under /etc/ within initramfs, but finding it at runtime needs unpacking, which may be hard to do, so it is made overridable with a file at /boot/kexec_initrd_crypttab_path.txt, whose content could be obtained with $ cpio -t < ${uncompressed_initrd} | grep crypttab . The "target" field of the record within the crypttab stored in the root file system for the luks container which is going to be unlocked via kexec-insert-key should be modified into the same "luks-$uuid" format, otherwise the boot sequence will get stuck when OS is trying to unlock them again, in order to map them according to "target" fields written in the crypttab stored in the root fs.		2023-01-27 12:56:32 -05:00
..
cbfs-init	Read and measure an EFI file into initrd during init	2018-04-29 19:58:44 -07:00
cbfs.sh	Add cbfs wrapper script to handle PNOR	2022-11-11 00:59:12 +02:00
config-gui.sh	whiptail: no more whiptail reseting console on call (--clear)	2022-11-15 15:11:58 -05:00
flash-gui.sh	whiptail: no more whiptail reseting console on call (--clear)	2022-11-15 15:11:58 -05:00
flash.sh	talos II: die when tgz archive is corrupt	2022-11-14 18:05:32 -05:00
flashrom-kgpe-d16-openbmc.sh	Re-add the flashrom script for kgpe-d16-openbmc	2018-05-11 14:23:48 -07:00
generic-init	Use global /tmp/config that combines multiple config files	2018-12-06 15:24:28 -08:00
gpg-gui.sh	whiptail: no more whiptail reseting console on call (--clear)	2022-11-15 15:11:58 -05:00
gpgv	Enable gpg with card support (issue #32)	2017-04-05 17:59:49 -04:00
gui-init	gui-init: warn the user when sealing measurements through TOTP/HOTP requires TPM reset	2023-01-19 14:59:45 -05:00
kexec-boot	kexec-boot: Streamline cmdline remove filtering	2021-10-15 13:40:24 -05:00
kexec-insert-key	Make the path to crypttab within initramfs overridable	2023-01-27 12:56:32 -05:00
kexec-iso-init	bin/kexec-iso-init: Add support for Arch iso support requirements (found at https://mbusb.aguslr.com/howto.html)	2022-03-07 19:02:29 -05:00
kexec-parse-bls	kexec-parse-boot/bls: Strip boot dir from front of grub entries (#804)	2020-08-24 16:42:33 -04:00
kexec-parse-boot	kexec-parse-boot: Refactor common parts of echo_entry()	2022-11-10 11:30:38 -05:00
kexec-save-default	kexec-save-default: do /boot operation in subshell	2023-01-13 14:54:14 -05:00
kexec-save-key	Change hash files only if gpg card is present	2020-10-15 17:05:12 +02:00
kexec-seal-key	Replace libremkey_htop_* by hotp_*	2020-06-25 15:35:47 +02:00
kexec-select-boot	initrd: speed up non-GUI booting	2023-01-14 10:02:49 +01:00
kexec-sign-config	initrd: call assert_signable earlier	2023-01-14 10:07:31 +01:00
kexec-unseal-key	supress errors on console when files don't exist (equivalent of rm -f)	2019-02-24 10:28:57 -05:00
key-init	properly deal with trusting keys to supress UX confusion about trusted keys	2019-02-08 12:38:38 -05:00
mount-usb	whiptail: no more whiptail reseting console on call (--clear)	2022-11-15 15:11:58 -05:00
network-init-recovery	bin/network-init-recovery: generate random MAC and set it to eth0	2022-04-29 10:26:12 -04:00
oem-factory-reset	initrd: work around a bug in busybox sha256sum	2023-01-14 10:02:49 +01:00
oem-system-info-xx30	whiptail: fixate width to 80 characters and have height dynamic to all whiptail/fbwhiptail prompts	2022-11-09 11:51:27 -05:00
poweroff	Ensure recovery for failed default boot	2017-09-02 14:13:29 -04:00
qubes-measure-luks	Use luksHeaderBackup rather than luksDump to measure luks headers.	2022-01-19 10:12:37 -05:00
reboot	Ensure recovery for failed default boot	2017-09-02 14:13:29 -04:00
seal-hotpkey	seal-hotp: Fix HOTP key identification	2020-07-24 12:45:44 -05:00
seal-totp	Display TOTP secret as text	2021-08-07 17:40:13 +00:00
t430-flash.init	Add T430 board support	2020-05-15 18:52:11 +01:00
tpm-reset	helper to do a forcible TPM reset (issue #27)	2017-04-12 06:45:15 -04:00
uefi-init	Read and measure an EFI file into initrd during init	2018-04-29 19:58:44 -07:00
unseal-hotp	unseal-hotp: ensure /boot mounted before checking HOTP secret	2019-11-18 21:52:48 -06:00
unseal-totp	supress errors on console when files don't exist (equivalent of rm -f)	2019-02-24 10:28:57 -05:00
usb-init	Use global /tmp/config that combines multiple config files	2018-12-06 15:24:28 -08:00
usb-scan	whiptail: no more whiptail reseting console on call (--clear)	2022-11-15 15:11:58 -05:00
wget-measure.sh	wget and measure files into the PCR	2017-03-27 18:03:29 -04:00
x230-flash.init	initrd: x230-flash: fix commandline instructions for flashing	2019-05-23 13:10:53 +02:00