Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/tlaurion/heads-ci-fedora30


https://github.com/tlaurion/heads-ci-fedora30

Merge pull request #548 from kylerankin/add_dynamic_usb_detection

Detect USB disk dynamically

dac412a798954f2c85d930913d1916bd6a5dd8b4 authored over 5 years ago by tlaurion <[email protected]>
Merge pull request #457 from osresearch/make-4.2.1

Make 4.2.1, hashes, external coreboot crossgcc, circleci and other fixes

decffe8e15508ca0feb5b809d41f2e2147bde660 authored over 5 years ago by tlaurion <[email protected]>
Merge branch 'master' into make-4.2.1

64c830e65292eee967d479097726eaa4e414c260 authored over 5 years ago by tlaurion <[email protected]>
Merge pull request #549 from kylerankin/flash_script_ui

Improve flash GUI documentation

2ebf8e2c1ad3ccf4c4d645f018a4dfa11d3385d1 authored over 5 years ago by tlaurion <[email protected]>
Add dynamic USB device detection

Instead of relying on a hard-coded USB disk, it would be better if the
mount script attempted to...

553cf0958b1c8122c8415540e422aba224bbbdd3 authored over 5 years ago by Kyle Rankin <[email protected]>
Merge pull request #537 from tlaurion/xen_cmdline_appended_not_flushed

Keep Xen cmdline arguments while appending Heads required ones.

7a755a879ec241f59f30eabe88f6e99a2fdc80f0 authored over 5 years ago by Kyle Rankin <[email protected]>
Add a "Factory reset" GPG option

This mimics tlauion's OEM work in the sense that a user (or OEM) could
choose this option and it...

efd6b066a2b679899816fedf51c01b01638f0add authored over 5 years ago by Kyle Rankin <[email protected]>
Bugfixes to mount-usb

This change fixes some edge cases where a single usb disk was inserted
with multiple partitions ...

76a068935d59cef42398f6f106a9930ceb9380d7 authored over 5 years ago by Kyle Rankin <[email protected]>
Detect USB disk dynamically

Currently Heads relies on a hard-coded config value to determine which
USB disk to mount. This c...

152689d5d584dfa144b7a725dbd2727490871ef0 authored over 5 years ago by Kyle Rankin <[email protected]>
Add GPG smartcard keygen feature

This change updates the very basic GPG smartcard feature in the GPG GUI
so that it can properly ...

c028f7752e40b8f8f4f1ee8416c271a5565566da authored over 5 years ago by Kyle Rankin <[email protected]>
Keep Xen cmdline arguments while appending Heads required ones. Fixes #536

1fda1fffb03ee9091701902f30591a5ff485fd1b authored almost 6 years ago by Thierry Laurion <[email protected]>
Merge pull request #534 from MrChromebox/use_purism_blobs

get_blobs: extract blobs from precompiled Purism coreboot images

1d14f264dca10b1437435d7e05686eff9fe5acdf authored almost 6 years ago by Kyle Rankin <[email protected]>
get_blobs: extract blobs from precompiled Purism coreboot images

Rather than download large repositories of files from sources we
don't control and patch files a...

92fdb0392b7789cd47db8aeb7460bc0b161c24d5 authored almost 6 years ago by Matt DeVillier <[email protected]>
Merge pull request #496 from strugee/better-mirror-url

Improve mirror URLs

6612352a60d0d3a5f5db3dc2a79bba4b606e4652 authored almost 6 years ago by tlaurion <[email protected]>
Merge pull request #526 from tlaurion/shred_secrets

Use shred instead of rm on secret related files.

1acdb98cfe37d0754c2e151c1122000ab0e1d0db authored almost 6 years ago by tlaurion <[email protected]>
shred TOTP_SECRET also when generation is successful

2740317d67dfe3aa185ff501e6391ba3cf785d6f authored almost 6 years ago by Thierry Laurion <[email protected]>
also shred LUKS sealed secret when done instead of rm it

8310a3d62eb3aff2ce39f8c08e6a6e54f9219557 authored almost 6 years ago by Thierry Laurion <[email protected]>
also shred LUKS key when done instead of rm it

b3a6c285c8ac8596a654571023132bcbf5c754c9 authored almost 6 years ago by Thierry Laurion <[email protected]>
reverting shred on a file that is not a secret to be shredded

9fbfb41a71a9889c8c80ab3595e3f513ad613758 authored almost 6 years ago by Thierry Laurion <[email protected]>
supress errors on console when files don't exist (equivalent of rm -f)

14c76d062c199f17ff6369091a80d2885cb54914 authored almost 6 years ago by Thierry Laurion <[email protected]>
using shred instead of rm on secret related files.

0722d42d659ee99006f06e6e2b5d091f9b017dbe authored almost 6 years ago by Thierry Laurion <[email protected]>
Merge pull request #530 from cawilliamson/master

Add support for EXT2 (via the EXT4 driver)

c341609488da662eb1a00b0fc568f3c4e892ee4b authored almost 6 years ago by tlaurion <[email protected]>
Merge pull request #528 from tlaurion/qemu-gui-init_optional

qemu-coreboot board: switch back to generic init in non-FBWhiptail mode

This is following a d...

405f4dd00ca4c4d171361a7e59f33af80296dff4 authored almost 6 years ago by tlaurion <[email protected]>
Merge pull request #522 from kylerankin/add_gpg_gui

It makes more logical sense for GPG functions to be split out into their
own menu instead of be...

c6619818ffe69be07b041246650a44961ed24125 authored almost 6 years ago by tlaurion <[email protected]>
Disable EXT2 standard driver (replaced by EXT4 driver)

70f809187bc66cc3bb5d7bbff146461425b57de8 authored almost 6 years ago by Christopher A. Williamson <[email protected]>
Merge branch 'add_gpg_gui' of github.com:kylerankin/heads into add_gpg_gui

ccdef58982a9df5a643068c5e340a8f99ecc3d5f authored almost 6 years ago by Kyle Rankin <[email protected]>
Revert "Remove "pipefail" so unmatched greps don't cause script to exit"

This reverts commit 9279d60a1a7685a18b819811d864d195fba2e1fd.

07cf7d757703ec5fefe429520dd01e9df753d0a2 authored almost 6 years ago by Kyle Rankin <[email protected]>
Remove "pipefail" so unmatched greps don't cause script to exit

9279d60a1a7685a18b819811d864d195fba2e1fd authored almost 6 years ago by Kyle Rankin <[email protected]>
Add GPG GUI

It makes more logical sense for GPG functions to be split out into their
own menu instead of bei...

cfddb4ed2e6fa481737fb44081f780643e354050 authored almost 6 years ago by Kyle Rankin <[email protected]>
Add support for EXT2 (via the EXT4 driver)

6794e9cdb5b1ea1aa8941297993e315b15628b19 authored almost 6 years ago by Christopher A. Williamson <[email protected]>
qemu-coreboot board: switch back to generic init in non-FBWhiptail mode

1bb8184143d5240843e7fe994282d824bf1b8360 authored almost 6 years ago by Thierry Laurion <[email protected]>
Merge pull request #527 from flammit/qemu-gui-init

qemu-coreboot: change configs to enable gui-init testing

50172f21e5b8284d397f464396aac8a134fbaa56 authored almost 6 years ago by tlaurion <[email protected]>
Merge pull request #525 from MrChromebox/librem_iommu

Fix Purism Librem IOMMU support

ee3d96b4b0b4a1d0cd5792935bf15a441b177a32 authored almost 6 years ago by tlaurion <[email protected]>
Remove "pipefail" so unmatched greps don't cause script to exit

cd5d0a0c4bb90feb2b7e8bccc1efdc5e356d6a68 authored almost 6 years ago by Kyle Rankin <[email protected]>
boards/librem*: replace iommu=pt with intel_iommu=on

With addition of IOMMU/RMRR patches, passthru is no longer needed
for proper IOMMU functionality...

90ec5e9e2afd492af465f9b4bd21fa7d60e5bc03 authored almost 6 years ago by Matt DeVillier <[email protected]>
configs/coreboot/librem*: remove iommu=pt from linux cmd line

No longer needed with addition of IOMMU/RMRR patches

Signed-off-by: Matt DeVillier <matt.devill...

988724c39d04928f7b397f72ff21564e68945753 authored almost 6 years ago by Matt DeVillier <[email protected]>
patches/coreboot: add proper IOMMU/RMRR support

These two patches add the capability for coreboot to generate
the RMRR ACPI tables needed for pr...

f5355815d920f7c77421a5c392d49fcc4d89ec7e authored almost 6 years ago by Matt DeVillier <[email protected]>
Merge pull request #524 from MrChromebox/librem_v4

Add Purism Librem v4 support

a6e978911a032b494a0d9db75636e67c99f664c9 authored almost 6 years ago by Kyle Rankin <[email protected]>
heads/config: add librem 13v4/15v4 as clones of 13v2/15v3

Signed-off-by: Matt DeVillier <[email protected]>

398f75f19f2c5fe9d3d2132fadd7e6d9c6f1075e authored almost 6 years ago by Matt DeVillier <[email protected]>
coreboot/config: add librem 13v4/15v4 as clones of 13v2/15v3

Adjust blobs paths for kbl vs skl, adjust board names

Signed-off-by: Matt DeVillier <matt.devil...

9aaa25c882369bbe30f56d63cef8d49feac1bb13 authored almost 6 years ago by Matt DeVillier <[email protected]>
patches/coreboot: add support for librem 13v4/15v4 boards

Signed-off-by: Matt DeVillier <[email protected]>

da2d2672208992f3e323d2c8a3a21598cad3fc84 authored almost 6 years ago by Matt DeVillier <[email protected]>
blobs/librem_kbl: clone from librem_skl, adjust for v4

Librem 13v4/15v4 use Kabylake SoC, have different set of blobs
required from Skylake-based v3 bo...

81bf58d96d404954663a28e9a354b525b3606436 authored almost 6 years ago by Matt DeVillier <[email protected]>
librem_skl/readme: remove reference to 15v4

15v4 isn't a skylake-based device

Signed-off-by: Matt DeVillier <[email protected]>

428561c11e303f0a0c3a2b1014801033de069a5e authored almost 6 years ago by Matt DeVillier <[email protected]>
Add GPG GUI

It makes more logical sense for GPG functions to be split out into their
own menu instead of bei...

c31421218ae52563bfe39dbd6e877d8a111ce177 authored almost 6 years ago by Kyle Rankin <[email protected]>
Merge pull request #518 from tlaurion/gpg2_missing_sed

GPG2 branch required sed

f0067d4b5c6dc91802daf15871085bb3ce30f5c9 authored almost 6 years ago by tlaurion <[email protected]>
GPG2 branch required sed

sed is required to import owner trust information in trustdb when keys are imported into pub...

be12506d7c6e9aab48afc445228b81c340d61f40 authored almost 6 years ago by Thierry Laurion <[email protected]>
Merge pull request #490 from kylerankin/add_empty_keyring_detection

Add empty keyring detection, clean up main menu

564f3ee201e25e3b797a7f84a60df19635be21da authored almost 6 years ago by tlaurion <[email protected]>
Merge pull request #465 from merge/x230-gui

x230: use fbwhiptail and gui-init instead of generic-init

98598e7f2f27eeb831a66eeb3f50d598c9ff50d0 authored almost 6 years ago by tlaurion <[email protected]>
Merge pull request #510 from tlaurion/gpg2

Gpg2 with all fixes included

eafb47065fc65e1e232394f50aacb605b089c97d authored almost 6 years ago by tlaurion <[email protected]>
Merge branch 'master' into gpg2

695993b5938d0b96a545e6901c76ceec81150864 authored almost 6 years ago by tlaurion <[email protected]>
Merge pull request #494 from kylerankin/add_config_gui

Add GUI to change /etc/config configuration options

aef5753373bf38854f24f0c88c6e42c627987ab5 authored almost 6 years ago by tlaurion <[email protected]>
Touch /tmp/config when entering recovery mode

181c621c843e7c0c3f6ebcf91d127fb77cb60639 authored almost 6 years ago by Kyle Rankin <[email protected]>
Merge pull request #424 from merge/master

x230: remove 4M and 8M split-images from the build

0cc827cea42d195f008aa1dda611e70e18667da6 authored almost 6 years ago by tlaurion <[email protected]>
Merge pull request #486 from flammit/cairo-repro

cairo: restore build reproducibility

71b919cc06dba74a140293504a5c54cd635722e7 authored almost 6 years ago by tlaurion <[email protected]>
properly deal with trusting keys to supress UX confusion about trusted keys

key-init makes sure trustdb is updated at run time and user and distro keys are ultimately trust...

005a19eeda7267d8a731fffe3a91ee0696a0df9a authored almost 6 years ago by Thierry Laurion <[email protected]>
x230: use fbwhiptail and gui-init instead of generic-init

This changes Heads' bootscript for the x230 to gui-init and adds config
options needed for it. T...

ae408922058194077a1d4c890bbdd0eb4d3b23ac authored almost 6 years ago by Martin Kepplinger <[email protected]>
module/pinentry: disable-pinentry-qt instead of qt5

else:
make[4]: Entering directory '/home/user/heads/build/pinentry-1.1.0/qt'
g++ -DHAVE_CONFIG_H...

8dd1082808f8479f5b9eb5c9827deca53e6b4164 authored almost 6 years ago by Thierry Laurion <[email protected]>
GPG2 required changes for key and trustdb generation and inclusion in rom

.ash_history: add examples to generate keys and otrust in rom
flash-gui: export otrust and import...

5eee5aa296ce388dd6ccc9c856af2a0b45584520 authored almost 6 years ago by Thierry Laurion <[email protected]>
Removing CONFIG_GPG in librem boards

4f75da7ea79f2fb3ea73f215a062388a29f476a7 authored almost 6 years ago by Thierry Laurion <[email protected]>
Disabled libsecret support in the pinentry module

3bc79495bb078ff1d9d83171ba40abcb8311d6f9 authored almost 6 years ago by Itay Grudev <[email protected]>
Enabled GPG2 in the Librem board config

92c547c0d41294acb1fd3d90b7dd27a677d8bf81 authored almost 6 years ago by Itay Grudev <[email protected]>
Set GPG_TTY before calling gpg in key-init

gpg2 needs GPG_TTY set to function properly. We set it in /init so it
is inherited by all child...

ca3a5fd2eb57090dbce1d94a67ace3258c0b829f authored almost 6 years ago by Jason Andryuk <[email protected]>
Port gpg1 patch to gpg2 to force crosscompiling and output to stderr.

75c11481f689c51c2dbf07beb4715bfb5989241b authored almost 6 years ago by Thierry Laurion <[email protected]>
instruct gpg to use gpg-agent.

46ddc20f74b84d20b3d87c2b0d64bfe7bc0cfff4 authored almost 6 years ago by Thierry Laurion <[email protected]>
GPG_TTY is forced to /dev/console under init. Ash console is never called; trying to get console tty from the tty returns "no console". NEEDs BETTER FIX.

fb3e2066b8ee33b29c3fbc387a1b707956c646f3 authored almost 6 years ago by Thierry Laurion <[email protected]>
Merge pull request #512 from kylerankin/update_blob_links

Update ME repository links/filenames/hashes

7b68b1ea9ddcbfbdbcedcdcccffa3291cd193524 authored almost 6 years ago by tlaurion <[email protected]>
Update ME repository links/filenames/hashes

The current links to the ME blob have expired. This updates the links
along with the resulting f...

c77b560300b196b9dee8c1c72333bb4ddb9b5ee0 authored almost 6 years ago by Kyle Rankin <[email protected]>
Merge pull request #508 from shamen123/patch-1

remove CONFIG_GPG=y

edb9cd615bc3bba2a9ca46f127bea21d0f6589c6 authored almost 6 years ago by tlaurion <[email protected]>
pinentry-tty path needs to be known from gpg-agent

44d566a72ac51d25692928ad3f35c9b553848056 authored almost 6 years ago by Thierry Laurion <[email protected]>
gpg2 pubring extension change from gpg to kbx

6335ece90244452bb26c477556c34bdb2d96eee2 authored almost 6 years ago by Thierry Laurion <[email protected]>
use /bin for libexecdir and disable curses pinentry

e5a739e54cdda3c2fcc805a971b8ab3eea131c27 authored almost 6 years ago by Trammell Hudson <[email protected]>
required changes to apply on top of osresearch/gpg2 for gpg2 to actually work, tools and libs updated to latest versions

8ba3c3340287d3e501418e91a98a579ca559ed83 authored almost 6 years ago by Thierry Laurion <[email protected]>
typo on pinentry

82701fb10fb88bb48827dd783448d426f234e4b6 authored almost 6 years ago by Trammell hudson <[email protected]>
gpg2 pinentry program is required for passwords or PINs

c261907ee67575f026d89bad594352be219b7aca authored almost 6 years ago by Trammell hudson <[email protected]>
gpg2 library fixes

49269f2bb4a5c6668606e087418b1477d985c386 authored almost 6 years ago by tlaurion <[email protected]>
enable Unix Domain sockets for gpg-agent

b89ed83af67e1ee7edc973ecbe217ad2da44cd56 authored almost 6 years ago by Trammell hudson <[email protected]>
use full version names on output libraries

b1736d7cb3f37a64f1575b4aa62f9de49489f6ba authored almost 6 years ago by Trammell hudson <[email protected]>
switch to gpg2 for qemu targets

d61587c17985248ea8dc6a6385658539fcf3b44a authored almost 6 years ago by Trammell hudson <[email protected]>
copy gpg2 executables and pass in the libusb include path

c1c615e6775588a9ab039fc19a6cd9c412f251cc authored almost 6 years ago by Trammell hudson <[email protected]>
Preliminary support for GnuPG2

7f1288b89c4765bc8ce86ca213bcdbc7535f2084 authored almost 6 years ago by Duncan Guthrie <[email protected]>
remove CONFIG_GPG=y

Building make BOARD=x230-flash fails due to size. Removal of CONFIG_GPG fixes this. For further ...

e274a2c396b008dcdf9dc0ad8edf9680a839a39f authored almost 6 years ago by shamen123 <[email protected]>
Switch popt mirror to Launchpad

Launchpad offers HTTPS downloads, whereas other more obvious mirrors
(like the one used original...

8b28e4945966b7cad52c712e6c1615df666dd1cf authored about 6 years ago by AJ Jordan <[email protected]>
Download most resource from HTTPS

As much as possible.

6303fbcacc68426a9987706466e0fc7b00b3b678 authored about 6 years ago by AJ Jordan <[email protected]>
Use a better GNU mirror URL

The new URL automatically redirects to a nearby, current GNU mirror.

Also, the fact that it's H...

b38e720440b44d8e1161a278121cd8f2c5687e87 authored about 6 years ago by AJ Jordan <[email protected]>
Fix column width for error output

a809c72f7d82540aaf954d6fd4ea84d5e4f410ca authored about 6 years ago by Kyle Rankin <[email protected]>
Remove any duplicate config options from config.user

6ebabc5b94cea6cb94669bdfcbaa6e08ce19dc04 authored about 6 years ago by Kyle Rankin <[email protected]>
Show the last setting for a config option if more than one exist

43a858e25ce325407b63260d0da9ab5420a532e3 authored about 6 years ago by Kyle Rankin <[email protected]>
Move custom configs below recovery shell

For safety it would be better if we source any custom configs after the
recovery shell in init. ...

ab0f9dd32e1847d784d1cba265d8303ea90ddb7d authored about 6 years ago by Kyle Rankin <[email protected]>
Do not sort config options, just cat to preserve precedence

If we sort | uniq config options, then the lowest in the sort will get
precedence, when what we ...

8b8be510a26f6b15bb0f5abfc7150a8ecad5ccdf authored about 6 years ago by Kyle Rankin <[email protected]>
Load cbfs before combining configs and building fstab

64484206ed950b51eed77b74dc491733e97f9443 authored about 6 years ago by Kyle Rankin <[email protected]>
Handle the case where grep operates on an empty file

There are cases when grepping for an option in the config file where
grep will not find it, whic...

1e9491f98d33b05be030add26359dfbcb75fa0ed authored about 6 years ago by Kyle Rankin <[email protected]>
Just load usb-storage module, not mount, bugfix in replace_config

We need to handle the case where the specific config file doesn't exist,
or else grep fails, so ...

dd3f650b81c93f8848c081af1a04d0773b5e9ea7 authored about 6 years ago by Kyle Rankin <[email protected]>
Use global /tmp/config that combines multiple config files

As part of the config gui we want to be able to have the system define
new config options withou...

3eb62eed1a18caae4161ecb956c20b1f203212c3 authored about 6 years ago by Kyle Rankin <[email protected]>
Fix formatting on the default config GUI menu text

49a131fa4b523a33779920a65331169168bdce9d authored about 6 years ago by Kyle Rankin <[email protected]>
Use mount-usb instead of enable_usb to find USB drives

f47df1edd688ef862564d417064402ab52ad59d0 authored about 6 years ago by Kyle Rankin <[email protected]>
Load USB modules before scanning for USB devices

de18c706dcdb3bc6d7b4fa7c53403713356a684c authored about 6 years ago by Kyle Rankin <[email protected]>
Add a configuration GUI script

This change will add a new GUI script that will allow users to change
their running configuratio...

2f9c201f3e9f20c93e432326c0ddfdb19229b02a authored about 6 years ago by Kyle Rankin <[email protected]>
Update version #s for Librem coreboot, add Librem Key detection dialog

The Librem coreboot is labeled with the current version and is visible
from dmidecode and is sup...

57b487c38cbc014bbe2e3d6a477b9a5651967b46 authored about 6 years ago by Kyle Rankin <[email protected]>
Move GPG check outside TPM failure

We want to catch the missing GPG keyring error regardless of TPM failure
or even in the case of ...

2195977c23a72b0136724e423eec609fdf5e5732 authored about 6 years ago by Kyle Rankin <[email protected]>
qemu-coreboot: change configs to enable gui-init testing

a14a4fb4191cae7093be5337cd3165606125de3a authored about 6 years ago by Francis Lam <[email protected]>