Thierry Laurion 37f04e2855 Fix key to card failing with invalid time when moving keys to smartcard on master (Opt: Authenticated Heads) ... - Revert gnupg toolstack version bump to prior of #1661 merge (2.4.2 -> 2.4.0). Version bump not needed for reproducibility. - Investigation and upstream discussions will take their time resolving invalid time issue introduced by between 2.4.0 and latest gnupg, fix regression first under master) - oem-factory-reset - Adding DO_WITH_DEBUG to oem-factory-reset for all its gpg calls. If failing in debug mode, /tmp/debug.txt contains calls and errors - Wipe keyrings only (*.gpg, *.kbx) not conf files under gpg homedir (keep initrd/.gnupg/*.conf) - flake.nix - switch build derivative from qemu and qemu_kvm to qemu_full to have qemu-img tool which was missing to run qemu boards (v0.1.8 docker) - add gnupg so that qemu boards can call inject_gpg to inject public key in absence of flashrom+pflash support for internal flashing - flake.lock: Updated nix pinned package list under flake.lock with 'nix flake update' so qemu_full builds - README.md: have consistent docker testing + release (push) notes - .circleci/config.yml: depend on docker v0.1.8 (qemu_full built with canokey-qemu lib support, diffoscopeMinimal and gnupg for proper qemu testing) TODO: - some fd2 instead of fd1?! - oem-factory-resest has whiptail_or_die which sets whiptail box to HEIGHT 0. This doesn't show a scrolling window on gpg errors which is problematic with fbwhiptail, not whiptail Signed-off-by: Thierry Laurion <insurgo@riseup.net>		2024-05-17 09:27:29 -04:00
..
basic-autoboot.sh	Add PureBoot Basic Mode	2023-06-21 13:26:45 -04:00
cbfs-init	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
cbfs.sh	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
config-gui.sh	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
flash-gui.sh	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
flash.sh	Talos-2 fixes to comply with hashing file standard. Bypass flash-gui.sh prompt when talos-2 ato validate hashes against hashes provided under tgz through flash.sh validation (still offer zip and tgz, which tgz might change to zip later but only tgz offered through builds)	2023-11-16 08:44:39 -05:00
flashrom-kgpe-d16-openbmc.sh	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
generic-init	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
gpg-gui.sh	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
gpgv	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
gui-init	Fix HOTP verification logic (and counter increment) in gui-init and oem-factory-reset scripts	2024-04-22 17:24:21 -04:00
gui-init-basic	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
inject_firmware.sh	initrd/bin/inject_firmware.sh: Fix warning command	2024-01-19 09:53:53 -05:00
kexec-boot	kexec-boot: Only capture kexec -d output to log, not console/kmsg	2024-04-19 14:14:54 -04:00
kexec-insert-key	Merge pull request #1625 from tlaurion:LUKS_header_change_validation_upon_sealing_and_unsealing	2024-04-25 16:39:41 -04:00
kexec-iso-init	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
kexec-parse-bls	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
kexec-parse-boot	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
kexec-save-default	Change disk encryption -> LUKS Disk Key and other relative/relative verbiage, remove irrelevant DEBUG trace under kexec-unseal-key	2024-04-11 14:44:13 -04:00
kexec-save-key	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
kexec-seal-key	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
kexec-select-boot	Change disk encryption -> LUKS Disk Key and other relative/relative verbiage, remove irrelevant DEBUG trace under kexec-unseal-key	2024-04-11 14:44:13 -04:00
kexec-sign-config	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
kexec-unseal-key	kexec-insert-key: refactor tampering check for encrypted disk keys prior of TPM unsealing ops	2024-04-11 14:50:40 -04:00
key-init	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
lock_chip	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
media-scan	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
mount-usb	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
network-init-recovery	initrd/bin/network-init-recovery: kill dropbear unconditionally prior of starting it	2024-02-23 12:17:47 -05:00
nitropad-shutdown.sh	add nitropad-shutdown.sh for EC based poweroff	2023-09-05 17:13:56 +02:00
oem-factory-reset	Fix key to card failing with invalid time when moving keys to smartcard on master (Opt: Authenticated Heads)	2024-05-17 09:27:29 -04:00
oem-system-info-xx30	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
poweroff	nitropad-nx: fix EC-based poweroff/reboot	2023-12-22 15:37:29 +01:00
qubes-measure-luks	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
reboot	nitropad-nx: fix EC-based poweroff/reboot	2023-12-22 15:37:29 +01:00
root-hashes-gui.sh	functions: Improve detect_boot_device to silence exFAT errors	2024-02-02 17:14:33 -05:00
seal-hotpkey	oem-factory-reset + seal-hotpkey: Give debug output to underatand in what state is the USB Security dongle	2024-04-19 14:30:55 -04:00
seal-totp	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
setconsolefont.sh	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
talos-init	initrd/bin/talos-init: remove alias for cbmem and bump coreboot revision	2023-07-12 14:50:54 +02:00
tpm-reset	TPM2 DUK and TOTP/HOTP reseal fix, refactoring and ifferenciating tpm_password into tpm_owner_password and reusing correctly	2023-11-01 10:07:27 -04:00
tpmr	tpmr: remove warning "Warn: check public portion of the tpmkey manually"	2024-04-26 11:14:14 -04:00
uefi-init	tpm2-tools: Change sense of CONFIG_TPM to mean any TPM, not just TPM1.	2023-03-08 12:45:46 -05:00
unpack_initramfs.sh	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
unseal-hotp	Fix HOTP verification logic (and counter increment) in gui-init and oem-factory-reset scripts	2024-04-22 17:24:21 -04:00
unseal-totp	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
usb-autoboot.sh	Add USB autoboot feature to PureBoot Basic	2023-06-21 13:26:46 -04:00
usb-init	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
wget-measure.sh	all scripts: replace TRACE manual strings with dynamic tracing by bash debug	2024-02-01 15:48:27 -05:00
wipe-totp	Implement Restricted Boot Mode	2023-06-21 13:26:45 -04:00
xx30-flash.init	Combine t430-flash.init, x23-flash.init, fix insmod	2023-03-13 13:23:29 -04:00