ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2024-12-18 20:47:55 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.
48 Commits 27 Branches 6 Tags 21 MiB
Makefile 83.6%
Shell 14%
Python 2%
Perl 0.2%
Nix 0.2%
d85d72a0d7
Go to file
Trammell Hudson d85d72a0d7
enable a few more busybox tools
2016-08-06 17:14:56 -04:00
build porting Makefile to use a modular build system for each package 2016-08-02 19:25:47 -04:00
config enable a few more busybox tools 2016-08-06 17:14:56 -04:00
initrd extract and verify gpg signature on the boot script 2016-08-06 17:13:22 -04:00
modules allow linux 4.7 to be selected 2016-08-05 12:24:16 -04:00
packages ignore fetched files 2016-08-02 21:24:15 -04:00
patches total hack patch to allow Linux 4.7 to boot with coreboot 2016-08-05 12:26:12 -04:00
.gitignore ignore generate script files 2016-08-05 12:26:35 -04:00
Makefile extract and verify gpg signature on the boot script 2016-08-06 17:13:22 -04:00
populate-lib warn on missing libraries 2016-08-06 17:14:07 -04:00
README.md Build and bundle the patched xen 4.6.3 kernel 2016-08-03 18:10:44 -04:00
verity-sign shell script to setup dmverity device 2016-08-05 23:28:20 -04:00

README.md

Heads boot ROM motd

Heads: the other side of TAILS

Heads is a configuration for laptops that tries to bring more security to commodity hardware. Among its goals are:

  • Use free software on the boot path
  • Move the root of trust into hardware (or at least the ROM bootblock)
  • Measure and attest to the state of the firmware
  • Measure and verify all filesystems

Flashing Heads into the boot ROM

NOTE: It is a work in progress and not yet ready for users. If you're interested in contributing, please get in touch. Installation requires disassembly of your laptop or server, external SPI flash programmers, possible risk of destruction and significant frustration.

Components:

  • CoreBoot
  • Linux
  • busybox
  • kexec
  • tpmtotp
  • QubesOS (Xen)

Notes:

  • Building coreboot's cross compilers can take a while.
  • Currently only tested in Qemu and on a Thinkpad x230
  • Booting Qubes requires patching Xen's real mode startup code; see patches/xen-4.6.3.patch and add no-real-mode to start of the Xen command line.