Matt DeVillier c14c09b602

flash-gui: clear boot signatures after flashing a cleaned ROM ...

If the user chooses to flash a "cleaned" ROM (not persisting settings
or GPG keys) then the signatures on /boot are no longer valid, so clear
them out. This allows for the OEM factory reset prompt to be shown on
the next boot.

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>

2019-11-18 11:17:35 -06:00

..

cbfs-init

Read and measure an EFI file into initrd during init

2018-04-29 19:58:44 -07:00

config-gui.sh

config-gui: mount new /boot after selection

2019-11-18 11:16:53 -06:00

flash-gui.sh

flash-gui: clear boot signatures after flashing a cleaned ROM

2019-11-18 11:17:35 -06:00

flash.sh

flash.sh: persist serial in cbfs

2019-08-05 11:06:46 -05:00

flashrom-kgpe-d16-openbmc.sh

Re-add the flashrom script for kgpe-d16-openbmc

2018-05-11 14:23:48 -07:00

generic-init

Use global /tmp/config that combines multiple config files

2018-12-06 15:24:28 -08:00

gpg-gui.sh

gpg-gui: remove OEM factory reset option

2019-08-21 17:10:24 -05:00

gpgv

Enable gpg with card support (issue #32)

2017-04-05 17:59:49 -04:00

gui-init

gui-init: add clean boot check

2019-08-21 17:10:25 -05:00

kexec-boot

Keep Xen cmdline arguments while appending Heads required ones. Fixes #536

2019-03-17 19:37:31 -04:00

kexec-insert-key

Allow boot without unseal of TPM LUKS key

2017-09-02 14:13:29 -04:00

kexec-iso-init

Use global /tmp/config that combines multiple config files

2018-12-06 15:24:28 -08:00

kexec-parse-bls

Parse grub config files for Fedora 29/30

2019-05-02 22:23:59 +01:00

kexec-parse-boot

Strip invalid leading/trailing '/' from script params

2017-09-02 14:13:29 -04:00

kexec-save-default

Use global /tmp/config that combines multiple config files

2018-12-06 15:24:28 -08:00

kexec-save-key

Allow TPM LUKS key to be set during default selection

2017-09-02 14:13:29 -04:00

kexec-seal-key

also shred LUKS sealed secret when done instead of rm it

2019-02-24 10:29:09 -05:00

kexec-select-boot

kecec_select_boot: default to Y when setting new boot option

2019-08-05 11:03:46 -05:00

kexec-sign-config

Use global /tmp/config that combines multiple config files

2018-12-06 15:24:28 -08:00

kexec-unseal-key

supress errors on console when files don't exist (equivalent of rm -f)

2019-02-24 10:28:57 -05:00

key-init

properly deal with trusting keys to supress UX confusion about trusted keys

2019-02-08 12:38:38 -05:00

mount-usb

Bugfixes to mount-usb

2019-04-16 12:55:00 -07:00

network-init-recovery

Add all supported network modules to network-init-recovery

2018-04-20 09:29:57 -07:00

oem-factory-reset

initrd/bin: add OEM Factory Reset

2019-08-21 17:10:23 -05:00

poweroff

Ensure recovery for failed default boot

2017-09-02 14:13:29 -04:00

qubes-measure-luks

qubes init script and improved TPM disk encryption with LUKS headers (issue #123 and #6)

2017-04-01 23:02:00 -04:00

reboot

Ensure recovery for failed default boot

2017-09-02 14:13:29 -04:00

seal-libremkey

seal-libremkey: add newlines for readability

2019-07-12 11:51:17 -05:00

seal-totp

shred TOTP_SECRET also when generation is successful

2019-02-24 11:11:00 -05:00

tpm-reset

helper to do a forcible TPM reset (issue #27)

2017-04-12 06:45:15 -04:00

uefi-init

Read and measure an EFI file into initrd during init

2018-04-29 19:58:44 -07:00

unseal-hotp

unseal-hotp: ensure /boot mounted before checking HOTP secret

2019-06-25 10:04:03 -05:00

unseal-totp

supress errors on console when files don't exist (equivalent of rm -f)

2019-02-24 10:28:57 -05:00

usb-init

Use global /tmp/config that combines multiple config files

2018-12-06 15:24:28 -08:00

usb-scan

Skip prompt to set default boot when booting from USB

2019-06-25 10:01:18 -05:00

wget-measure.sh

wget and measure files into the PCR

2017-03-27 18:03:29 -04:00

x230-flash.init

initrd: x230-flash: fix commandline instructions for flashing

2019-05-23 13:10:53 +02:00