Thierry Laurion 94b77e8704

WiP: staging changes ...

Insights:
- We should use oem generated pubkey naming to distinguish between oem/user generated keys and try to use default PINs also for GPG User to sign with default PIN and warn even if it works/doesn't, urging users to do reownership
- Point is that oem factory reset does in the direction of using randomized PINs, while continuing to use those for a user should be strongly discouraged

Signed-off-by: Thierry Laurion <insurgo@riseup.net>

2024-12-21 13:19:07 -05:00

..

basic-autoboot.sh

Add PureBoot Basic Mode

2023-06-21 13:26:45 -04:00

cbfs-init

initrd bin/* sbin/insmod + /etc/ash_functions: TPM extend operations now all passed to LOG (quiet mode doesn't show them and logs them to /tmp/debug.log)

2024-12-21 13:13:13 -05:00

cbfs.sh

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

change-time.sh

change-time.sh: Remind of the system time when beginning

2024-08-06 14:01:49 -04:00

config-gui.sh

Merge remote-tracking branch 'osresearch/master' into pr0_skylake_and_more_recent

2024-11-28 11:53:48 -05:00

flash-gui.sh

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

flash.sh

flash.sh: remove last references in code to flashrom, use more generic FLASH_OPTIONS instead, might cchange in the future.

2024-10-29 08:58:09 -04:00

flashprog-kgpe-d16-openbmc.sh

kgpe-d16 server: TODO AST1100 patch still missing @i-c-o-n https://github.com/linuxboot/heads/blob/master/patches/flashrom-b1f858f65b2abd276542650d8cb9e382da258967/0100-enable-kgpe-d16.patch

2024-10-29 08:58:09 -04:00

generic-init

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

gpg-gui.sh

WiP: staging changes

2024-12-21 13:19:07 -05:00

gpgv

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

gui-init

WiP: staging changes including https://github.com/linuxboot/heads/pull/1850 https://github.com/Nitrokey/nitrokey-hotp-verification/pull/43 and https://github.com/Nitrokey/nitrokey-hotp-verification/pull/46

2024-12-21 13:18:55 -05:00

gui-init-basic

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

inject_firmware.sh

codebase: silence dd output while capturing output in variables when needed

2024-12-21 13:13:31 -05:00

kexec-boot

codebase: CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE -> CONFIG_FINALIZE_PLATFORM_LOCKING

2024-10-31 10:23:06 -04:00

kexec-insert-key

WiP: staging changes including https://github.com/linuxboot/heads/pull/1850 https://github.com/Nitrokey/nitrokey-hotp-verification/pull/43 and https://github.com/Nitrokey/nitrokey-hotp-verification/pull/46

2024-12-21 13:18:55 -05:00

kexec-iso-init

kexec-iso-init: Always show kernel arguments suppressions/additions overrides

2024-10-16 18:33:02 -04:00

kexec-parse-bls

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

kexec-parse-boot

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

kexec-save-default

cryptsetup2 toolstack version bump and script fixes to support multi-LUKS containers (BTRFS QubesOS 4.2)

2024-10-30 14:18:20 -04:00

kexec-save-key

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

kexec-seal-key

WiP: staging changes

2024-12-21 13:19:07 -05:00

kexec-select-boot

WiP: staging changes (TPM1 regression fixes for LOG/DEBUG on quiet mode)

2024-12-21 13:19:01 -05:00

kexec-sign-config

kexec-sign-config: mount rw, write things to /boot, mount ro after

2024-12-21 13:15:22 -05:00

kexec-unseal-key

kexec-insert-key: refactor tampering check for encrypted disk keys prior of TPM unsealing ops

2024-04-11 14:50:40 -04:00

key-init

key-init: If time resets, tell user to set it, but allow skipping

2024-09-06 09:27:37 -04:00

lock_chip

codebase: CONFIG_FINALIZE_PLATFORM_LOCKING_PRESKYLAKE -> CONFIG_FINALIZE_PLATFORM_LOCKING

2024-10-31 10:23:06 -04:00

media-scan

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

mount-usb

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

network-init-recovery

initrd/bin/network-init-recovery: kill dropbear unconditionally prior of starting it

2024-02-23 12:17:47 -05:00

oem-factory-reset

WiP: staging changes

2024-12-21 13:19:07 -05:00

oem-system-info-xx30

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

poweroff

nitropad-nx: use standard shutdown/reboot commands

2024-06-20 18:27:05 +02:00

qubes-measure-luks

initrd bin/* sbin/insmod + /etc/ash_functions: TPM extend operations now all passed to LOG (quiet mode doesn't show them and logs them to /tmp/debug.log)

2024-12-21 13:13:13 -05:00

reboot

nitropad-nx: use standard shutdown/reboot commands

2024-06-20 18:27:05 +02:00

root-hashes-gui.sh

Add functions to handle normal, warning, and error for whiptail and fbwhiptail.

2024-06-25 17:26:14 +00:00

seal-hotpkey

WiP: staging changes

2024-12-21 13:19:07 -05:00

seal-totp

seal-totp: add missing PCR7 DEBUG call for CBFS measured content, add DEBUG for TOTP secret/qrcode output to console

2024-10-30 14:18:20 -04:00

setconsolefont.sh

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

talos-init

initrd/bin/talos-init: remove alias for cbmem and bump coreboot revision

2023-07-12 14:50:54 +02:00

tpm-reset

TPM2 DUK and TOTP/HOTP reseal fix, refactoring and ifferenciating tpm_password into tpm_owner_password and reusing correctly

2023-11-01 10:07:27 -04:00

tpmr

WiP: staging changes

2024-12-21 13:19:07 -05:00

uefi-init

tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.

2023-03-08 12:45:46 -05:00

unpack_initramfs.sh

codebase: silence dd output while capturing output in variables when needed

2024-12-21 13:13:31 -05:00

unseal-hotp

Fix HOTP verification logic (and counter increment) in gui-init and oem-factory-reset scripts

2024-04-22 17:24:21 -04:00

unseal-totp

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

usb-autoboot.sh

Add USB autoboot feature to PureBoot Basic

2023-06-21 13:26:46 -04:00

usb-init

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

wget-measure.sh

all scripts: replace TRACE manual strings with dynamic tracing by bash debug

2024-02-01 15:48:27 -05:00

wipe-totp

Implement Restricted Boot Mode

2023-06-21 13:26:45 -04:00

xx30-flash.init

Combine t430-flash.init, x23-flash.init, fix insmod

2023-03-13 13:23:29 -04:00