heads/initrd/bin
MrChromebox 85d7e29d18
Add new board: Purism Librem Server L1UM (#858)
* modules/coreboot: add option to use coreboot 4.11

Port patches from coreboot 4.8.1 to 4.11:
* 0000-measure-boot -> 0001
* 0010-cross-compiler-support

All other patches for coreboot 4.8.1 have either already been
integrated, or are for platforms which do not need to be migrated
to coreboot 4.11 (they will move to 4.12 or newer).

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>

* patches/coreboot-4.11: Add Broadwell-DE platform patch

Add a patch for FSP Broadwell-DE to make use of Heads' measured boot.

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>

* patches/coreboot-4.11: Add patch to read serial # from CBFS

Will be used by multiple Librem boards.

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>

* patches/coreboot-4.11: add board support for Librem Server L1UM

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>

* Librem Server L1UM: add new board

Add board config, coreboot config, kernel config files.
Add conditional purism-blobs dependency to coreboot-4.11 module.

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>

* flash.sh: add special handling for librem_l1um board

Add support for persisting PCIe config via PCHSTRP9 in flash descriptor.
This is needed to support multiple variants of the L1UM server which
use the same firmware but differ in PCIe lane configuration via the
PCH straps configuration in the flash descriptor.

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>

* patches/coreboot-4.11: Add 'Use PRIxPTR to print uintptr_t' patch

Cherry-picked from upstream coreboot (post-4.11), fixes compilation issue.

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>

* CircleCI: add target to build board librem_l1um

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2020-10-18 14:48:25 -04:00
..
cbfs-init Read and measure an EFI file into initrd during init 2018-04-29 19:58:44 -07:00
config-gui.sh config-gui: clean up boot device selection 2020-08-03 18:49:26 -05:00
flash-gui.sh flash-gui: Improve readability of prompts 2020-07-21 09:47:46 -05:00
flash.sh Add new board: Purism Librem Server L1UM (#858) 2020-10-18 14:48:25 -04:00
flashrom-kgpe-d16-openbmc.sh Re-add the flashrom script for kgpe-d16-openbmc 2018-05-11 14:23:48 -07:00
generic-init Use global /tmp/config that combines multiple config files 2018-12-06 15:24:28 -08:00
gpg-gui.sh *gui.sh: move common ops to gui_functions 2020-07-10 17:37:07 -05:00
gpgv Enable gpg with card support (issue #32) 2017-04-05 17:59:49 -04:00
gui-init gui-init: remove double-prompt for checksum update 2020-08-03 18:48:38 -05:00
kexec-boot Keep Xen cmdline arguments while appending Heads required ones. Fixes #536 2019-03-17 19:37:31 -04:00
kexec-insert-key Allow boot without unseal of TPM LUKS key 2017-09-02 14:13:29 -04:00
kexec-iso-init Use global /tmp/config that combines multiple config files 2018-12-06 15:24:28 -08:00
kexec-parse-bls kexec-parse-boot/bls: Strip boot dir from front of grub entries (#804) 2020-08-24 16:42:33 -04:00
kexec-parse-boot kexec-parse-boot/bls: Strip boot dir from front of grub entries (#804) 2020-08-24 16:42:33 -04:00
kexec-save-default Change hash files only if gpg card is present 2020-10-15 17:05:12 +02:00
kexec-save-key Change hash files only if gpg card is present 2020-10-15 17:05:12 +02:00
kexec-seal-key Replace libremkey_htop_* by hotp_* 2020-06-25 15:35:47 +02:00
kexec-select-boot Fix check for valid boot options 2020-07-29 00:24:11 -05:00
kexec-sign-config fix: update chesksums of filenames with spaces (#847) 2020-10-18 14:46:57 -04:00
kexec-unseal-key supress errors on console when files don't exist (equivalent of rm -f) 2019-02-24 10:28:57 -05:00
key-init properly deal with trusting keys to supress UX confusion about trusted keys 2019-02-08 12:38:38 -05:00
mount-usb Merge pull request #778 from MrChromebox/usb_gui_tweaks 2020-07-30 13:54:25 -04:00
network-init-recovery network-init-recovery: do DHCP, then ask NTP from DNS server before attempting sync on internet 2020-04-22 15:00:48 -04:00
oem-factory-reset fix: update chesksums of filenames with spaces (#847) 2020-10-18 14:46:57 -04:00
poweroff Ensure recovery for failed default boot 2017-09-02 14:13:29 -04:00
qubes-measure-luks qubes init script and improved TPM disk encryption with LUKS headers (issue #123 and #6) 2017-04-01 23:02:00 -04:00
reboot Ensure recovery for failed default boot 2017-09-02 14:13:29 -04:00
seal-hotpkey seal-hotp: Fix HOTP key identification 2020-07-24 12:45:44 -05:00
seal-totp shred TOTP_SECRET also when generation is successful 2019-02-24 11:11:00 -05:00
t430-flash.init Add T430 board support 2020-05-15 18:52:11 +01:00
tpm-reset helper to do a forcible TPM reset (issue #27) 2017-04-12 06:45:15 -04:00
uefi-init Read and measure an EFI file into initrd during init 2018-04-29 19:58:44 -07:00
unseal-hotp unseal-hotp: ensure /boot mounted before checking HOTP secret 2019-11-18 21:52:48 -06:00
unseal-totp supress errors on console when files don't exist (equivalent of rm -f) 2019-02-24 10:28:57 -05:00
usb-init Use global /tmp/config that combines multiple config files 2018-12-06 15:24:28 -08:00
usb-scan usb-scan/mount: Improve USB handling 2020-07-21 09:46:59 -05:00
wget-measure.sh wget and measure files into the PCR 2017-03-27 18:03:29 -04:00
x230-flash.init initrd: x230-flash: fix commandline instructions for flashing 2019-05-23 13:10:53 +02:00