github.com/tlaurion/heads-ci-fedora30 commits

Add empty keyring detection, clean up main menu

To help with onboarding new users to Heads, this change will detect when
Heads does not have any...

7f8738d6d82f1f500f5efc74b6d38a8eff1a5fff authored about 6 years ago by Kyle Rankin <[email protected]>

cairo: restore reproducibility

libtool needs to be patched to not write rpath to targets

c559d71725d530355da5c61ff8a9e3b8231ceb0b authored about 6 years ago by Francis Lam <[email protected]>

Merge branch 'update_blob_script' of https://github.com/kylerankin/heads

760429601a3a01efe25f2c2bdf466957ec6c05d5 authored about 6 years ago by Trammell hudson <[email protected]>

Merge branch 'key-update' of https://github.com/flammit/heads

31a62849eaca4b4d50ffcad6b0cda096da36ce6f authored about 6 years ago by Trammell hudson <[email protected]>

fix install directory handling for git and builds

The install directly should basically behave like the "build" directory.
Since it's tracked by g...

371b65ff5827e1048511b91be1f9ce656040cb9d authored about 6 years ago by Martin Kepplinger <[email protected]>

update tails distro signing key

fd3d69cdac8b32bb6252bc670f9e20c08e5bb5ad authored about 6 years ago by Francis Lam <[email protected]>

Fix permissions on get_blobs.sh

e3343b5aff8f44fa3407529a8f662ccaa203a4c2 authored about 6 years ago by Kyle Rankin <[email protected]>

Update Librem get_blobs.sh script to point to proper upstream URLs

f20d45a42638b11d7ca046b0e379150e3e932cde authored about 6 years ago by Kyle Rankin <[email protected]>

Merge branch 'coreboot-4.8' of https://github.com/flammit/heads

d8a3be47af16a771781e852eb0a1efaeefd23a4d authored about 6 years ago by Trammell Hudson <[email protected]>

Merge branch 'fbwhiptail_url' of https://github.com/merge/heads

7f83a0a02881dc7a750fbe8dc2b0fabb081f1ef6 authored about 6 years ago by Trammell Hudson <[email protected]>

Merge branch 'patch-2' of https://github.com/tlaurion/heads

af81e34292ca92778b6953e66b68a17899be11bc authored about 6 years ago by Trammell Hudson <[email protected]>

Merge branch 'usb-scan_fix' of https://github.com/tlaurion/heads

6eb214a3f1836fa9d56709886fdd49103c5df4a2 authored about 6 years ago by Trammell Hudson <[email protected]>

Merge branch 'cryptsetup-reencrypt' of https://github.com/tlaurion/heads

8fec61f6e819bdd9907571a45717fb6b2efcbd58 authored about 6 years ago by Trammell Hudson <[email protected]>

Merge branch 'add_librem_key_support' of https://github.com/kylerankin/heads

3f53cfe05b1fdbca751f53372ca4c387d6238b7f authored about 6 years ago by Trammell Hudson <[email protected]>

Ignore PCR5 when sealing key when Librem Key is enabled

When the Librem Key is enabled, the kernel loads USB modules at boot,
this causes PCR5 to change...

79a09e7424c67fc3168fef95a0352292a9bcf8eb authored about 6 years ago by Kyle Rankin <[email protected]>

Make lvm and slang build reproducibly again

fe0f957bfc3db1f6113d908c608404ef5751bd3a authored about 6 years ago by Francis Lam <[email protected]>

Add patches to update coreboot crossgcc to v1.52

crossgcc is now using gcc 8.1.0 which will compile without issues
if your host system has gcc 8....

03a09a1e1a7dcf633ddb2736ff66e8129f1bef2f authored about 6 years ago by Youness Alaoui <[email protected]>

Fix DOTCONFIG in coreboot module and clean up configs

79c14346106818769df5befd7708d7b724a61fb0 authored about 6 years ago by Francis Lam <[email protected]>

Use defconfig for coreboot builds

0bb78d343f4ab0e72caa1e834bb818d6bb245b5a authored about 6 years ago by Trammell hudson <[email protected]>

Update coreboot patches condition on CONFIG_MEASURED_BOOT

0113ecc806b167d12d877e141d7d387af1a677e2 authored about 6 years ago by Francis Lam <[email protected]>

Remove duplicate measurements on librem components

also fix indentation issues

8601268a1f731a373ac8a33c315ec24018348696 authored about 6 years ago by Francis Lam <[email protected]>

Update patches for librem boards

dd3ae6ee069515bcd447f3c91b1d76ca979ab946 authored about 6 years ago by Francis Lam <[email protected]>

Start updating to coreboot 4.8.1

missing librem patches

c326ff62c7efe7198d503974f6aa142ad7bb11e2 authored about 6 years ago by Francis Lam <[email protected]>

qemu-linuxboot: enable cgroups for u-root

72c42fa5ea1e7831fd3250993879b4cda032e507 authored about 6 years ago by Trammell Hudson <[email protected]>

$TMP_MENU_FILE is an unknown variable. Replaced with /tmp/iso_menu.txt so usb-scan works.

3755ddb47a5aece00b02c186bc87850e8dc8ffd8 authored about 6 years ago by Thierry Laurion <[email protected]>

fix the fbwhiptail source URL

The current source URL is not available anymore.

kakaroto changed his copy of heads to point to...

255181c02f15354a8b1968dbc847321913eb4ea7 authored about 6 years ago by Martin Kepplinger <[email protected]>

Adding cryptsetup-reencrypt support

1d2fb0266812d97c969b6226a300280706f659ee authored about 6 years ago by Thierry Laurion <[email protected]>

Update .ash_history

mount-usb is better

c0aeb614ec3c00daf673b2a537ea8a470cb9a946 authored over 6 years ago by tlaurion <[email protected]>

coreboot must be extracted before the xgcc symlink

aeb59e1b4852aea6aeb7f771e96d94d0ea2e1c9b authored over 6 years ago by Trammell hudson <[email protected]>

fix config spacing and path to xgcc

6183d58ecc2923df97ee9fccf8282df1af1ee03a authored over 6 years ago by Trammell hudson <[email protected]>

use externally built coreboot compilers

9ab033aa06ebca1b5272ed8e334fb516f0d8e308 authored over 6 years ago by Trammell hudson <[email protected]>

rollback to 16.04?

866358d5c7c6297e8be627d0c8fcfa31f90f8636 authored over 6 years ago by Trammell hudson <[email protected]>

quiet hashing process slightly

66b51d3296569d55b174a7c7f4431f01d52321f7 authored over 6 years ago by Trammell hudson <[email protected]>

remove coreboot-gcc target (it will be built anyway) and add x230

fdb8268fc99dd09f1c637290b6aa580119e801e8 authored over 6 years ago by Trammell hudson <[email protected]>

fix missing ) in hashes

a5a11e82130643356583345187ab106a7659b2b0 authored over 6 years ago by Trammell hudson <[email protected]>

hash the kernel

54748c663adcad63b2ddeeeff588ab3dafa0213d authored over 6 years ago by Trammell hudson <[email protected]>

fix yaml

eafe001097687a19915610bb954d3dc365308806 authored over 6 years ago by Trammell hudson <[email protected]>

create hashes and store them in the circleci artifacts

7a39cc78f4140756cecb3d36783a0845e49d2889 authored over 6 years ago by Trammell hudson <[email protected]>

use a smaller image, maybe we will not run out of space

553964157b5bf6b2de9c65c0ed65f6abf89d538d authored over 6 years ago by Trammell hudson <[email protected]>

does tput cause the problem with circleci?

d3bf7aab64b6c75b56433b4bf2d39ceced1fae69 authored over 6 years ago by Trammell hudson <[email protected]>

coreboot-gcc target

606600586c3a3ab18d2debf501cd6899fa369cec authored over 6 years ago by Trammell hudson <[email protected]>

move limits.h dependency into modules/linux

f712d7aefeb6bd4c87abc4883ed0a18b3add3bc2 authored over 6 years ago by Trammell hudson <[email protected]>

use osresearch/heads-builder docker image with pre-built compilers

e03f375bfdaa392c29a6cc23dfd4bdfe85ca9fcd authored over 6 years ago by Trammell hudson <[email protected]>

fix wget and allow packages to be overridden

c494d0a5fdd33e22c1e0e9f95e8b71b9319783fd authored over 6 years ago by Trammell hudson <[email protected]>

circleci needs to use the new 4.2.1 make

5555e9e8ac605905b927a9f7d2c3e34657e03f43 authored over 6 years ago by Trammell hudson <[email protected]>

patch for __alloca missing on ubuntu 18.04 (#352)

292a8bec81219e5edab19187e3550605a0ce82b5 authored over 6 years ago by Trammell hudson <[email protected]>

verbose builds to avoid quiet timeouts

bec3335cf62f2a1ae008061e85eed0e19486c7b7 authored over 6 years ago by Trammell hudson <[email protected]>

ensure there is output from the musl-cross bild

e3ac9b59f38214f0ff05ced1a97d64876215e3e9 authored over 6 years ago by Trammell hudson <[email protected]>

do dependencies before checkout

f96cceb6214d6d46312de53aee459ca68e3b98e6 authored over 6 years ago by Trammell hudson <[email protected]>

bootstrap and parallelize build

081cda2dd4dee098ce4ff019a9c041adb8b7eb51 authored over 6 years ago by Trammell hudson <[email protected]>

switch back to 16.04 just to avoid make-4.2 error

cdd061e06380e376a888b67a453424e93b3efe4b authored over 6 years ago by Trammell hudson <[email protected]>

try apt-update before apt-install

607381fec21571310ba10bb880246317ac304082 authored over 6 years ago by Trammell hudson <[email protected]>

tweak yaml

b826e4c705def40e58caa7fadaf5524cf88ec2ae authored over 6 years ago by Trammell hudson <[email protected]>

checkout dependencies

265ed9d043142cef9927e9e46fc38ad26214cfbc authored over 6 years ago by Trammell hudson <[email protected]>

try ubuntu 18.04 build

96ea6b69ba843905babc33e557496590249cf388 authored over 6 years ago by Trammell hudson <[email protected]>

try ubuntu 18.04 build

32cd59d4f6f9b5aba7c9d9fb4a640de983796f07 authored over 6 years ago by Trammell hudson <[email protected]>

try enabling circleci builder

2e1dd829929f26386cc608479509f93c7d11cd78 authored over 6 years ago by Trammell hudson <[email protected]>

Typo correction in .ash_history

95748a82d775636f2f6d97df4f4f5e4b6331a768 authored over 6 years ago by tlaurion <[email protected]>

Merge branch 'master' of https://github.com/Akendo/heads

1d27c93a500e3c284464671a238f0801f5906bfc authored over 6 years ago by Trammell Hudson <[email protected]>

Merge branch 'fix-spelling-mistakes' of https://github.com/paulmenzel/heads

070461ad058e87056840364e69024d8cb1f3027b authored over 6 years ago by Trammell Hudson <[email protected]>

Merge branch 'linux-4.14-update'

2be492d7fdb6a2422f2101f9251264cf9cb81492 authored over 6 years ago by Trammell Hudson <[email protected]>

bds-pr is on the main branch now

fb37c5dcc82f2e715fe472fa842a5314e0aa2c39 authored over 6 years ago by Trammell Hudson <[email protected]>

FAQ: Fix spelling of *convenience*

e594598a28b1712f7b63fdcc434b48e1ad027ca6 authored over 6 years ago by Paul Menzel <[email protected]>

blobs/x220: Start *Lenovo* with capital letter

11d30bd6350c9d90e02a22e8efb2b7b2b9913a63 authored over 6 years ago by Paul Menzel <[email protected]>

README: Spell *Chromebook* with capital letter in beginning

6c9ff68a87b6b21e10f1ea737096ea1be87acb6d authored over 6 years ago by Paul Menzel <[email protected]>

convert all active board Linux kernel config files into defconfig format

4016cd96ab440b03e246d1764b4f980ccb587383 authored over 6 years ago by Trammell Hudson <[email protected]>

Use Linux kernel defconfig format (issue #416)

This reduces the amount of noise in the Linux kernel config files
by only storing the difference...

f4e25dd2168ac414398bbc9e57bb5c7138432173 authored over 6 years ago by Trammell Hudson <[email protected]>

ensure that the dxe modules will be built with the Heads cross compiler

c7c4b9919c130f5e21d308287ec2d7463230dc89 authored over 6 years ago by Trammell Hudson <[email protected]>

update to 4.14.62 and use the linuxboot.efi BDS

c98bfe158fb95bef78a3c98893b268d446ca71c8 authored over 6 years ago by Trammell Hudson <[email protected]>

Commenting out DROPBEAR support; not fitting into 4MB image with GPG integrated.

cc4976b3dadbdc131b1cc0d9aed281d776ea4159 authored over 6 years ago by Thierry Laurion <[email protected]>

Merge branch 'master' of github.com:Akendo/heads

09b3e7b1dc8666b8998df1ab0117cd5e5d939914 authored over 6 years ago by Akendo <[email protected]>

Add missing paraemter for the correct board.

Without this parameter the qemu board is selected by default. Leading to errors
Signed-off-by: A...

1b0fdefb5fa32c8f624258529b7626edf617b6dd authored over 6 years ago by Akendo <[email protected]>

Update the path within the readme.md from the x220

The path was incorrect for the configuration file of the x220. Leading to some
confusion. Adjust...

e830737e9b7a03ed709151bf3e129287756683fc authored over 6 years ago by Akendo <[email protected]>

remove orphaned x200 config (merge pr #387)

1d2dfd4affdc773329550e694c274cff8e71639b authored over 6 years ago by Trammell Hudson <[email protected]>

Merge branch 'patch-failure-pr' of https://github.com/osresearch/heads

6170b4cd06892738387fb9adae07dbb75e584aad authored over 6 years ago by Trammell Hudson <[email protected]>

Merge branch 'x230-flash' of https://github.com/tlaurion/heads

770c6961176bee48bebbd1faed2f3676ab5e3e39 authored over 6 years ago by Trammell Hudson <[email protected]>

enable coreboot console support

d876776ed774c596b5f98217309817fbb5305700 authored over 6 years ago by Trammell Hudson <[email protected]>

increase CBMEM log level

a75d8a0c92a331f708d45446b577d06c27a05247 authored over 6 years ago by Trammell Hudson <[email protected]>

update qemu-coreboot Linux config to 4.14.56, enable the CBMEM console

977c1c3987533ce82baf78893736c7ba10f88ec3 authored over 6 years ago by Trammell Hudson <[email protected]>

update paths for Linux 4.14.56 (issue #423)

d400c4dd4d2d3a5ed637f44f04b48db426c5aa80 authored over 6 years ago by Trammell Hudson <[email protected]>

Exit if patch fails to apply (issue #429)

6033015454a9f4008bc37de83eb979df12d732dd authored over 6 years ago by Trammell Hudson <[email protected]>

Exit if patch fails to apply (issue #429)

22b124147598fa11ac9b6ca47b3eaee79635eda7 authored over 6 years ago by Trammell Hudson <[email protected]>

Improve status messages for Librem Key HOTP output

fd99d160e83550518b754fd1eb7f9b4925c08ae0 authored over 6 years ago by Kyle Rankin <[email protected]>

Show warning bg color in main menu when HOTP key not found

acb2b34873e641dfc5d94c6de6ee62422ae8809a authored over 6 years ago by Kyle Rankin <[email protected]>

Show red background when HOTP code is invalid

Granted the user should really be using the Librem Key/phone to check
for tampering (since an at...

be665ac4f9f9c4054b9cbbdf55d124e5aee4f002 authored over 6 years ago by Kyle Rankin <[email protected]>

Shorten timeout for Librem Key

Currently the Librem Key tests will time out after 40 seconds, which
adds to the boot time signi...

ec3248dbc948ded7ea115fd2d24599d9ad852043 authored over 6 years ago by Kyle Rankin <[email protected]>

Store HOTP counter directly in /boot instead of TPM

The HOTP counter isn't a secret but is just used to prevent replay
attacks (the time-based count...

fe34aba719073ef3710b25627b0acbbb5236815d authored over 6 years ago by Kyle Rankin <[email protected]>

Revert "Use HOTP TPM counter instead of Heads when signing, if present"

This reverts commit c42084406d47409ccce5ac6ddd717b576b693eb3.

7dde5c2aca74c19195a71338324743bf3bf4d952 authored over 6 years ago by Kyle Rankin <[email protected]>

Use HOTP TPM counter instead of Heads when signing, if present

TPM v1.2 has a limitation in that only a single monotonic counter can be
incremented between reb...

c42084406d47409ccce5ac6ddd717b576b693eb3 authored over 6 years ago by Kyle Rankin <[email protected]>

Add back TPM config counter section to gui-init

The section in gui-init that modifies the Heads TPM counter when signing
config was accidentally...

2cacb1572971b50923c9844e19e48bcc9e139a15 authored over 6 years ago by Kyle Rankin <[email protected]>

Add Librem Key support to Heads

The Librem Key is a custom device USB-based security token Nitrokey is
producing for Purism and ...

31cf85b7074a6e9a9da93faf0d5c4d1beaacb97e authored over 6 years ago by Kyle Rankin <[email protected]>

Modify flash command to use generic flash.sh

85eebd0487cfc6dff5a898363de7fec6d5a339ba authored over 6 years ago by tlaurion <[email protected]>

x230: remove 4M and 8M split-images from the build

The bios regions of the 12M coreboot image is 7M: 4M and 3 of the 8M split
image. The rest of th...

4ea175838f336cb86017db998aed49caba9312c0 authored over 6 years ago by Martin Kepplinger <[email protected]>

Merge branch 'generic_flashrom_script' of https://github.com/kylerankin/heads

584c07042ef4898de52ba4981997211c646b75fd authored over 6 years ago by Trammell hudson <[email protected]>

Merge branch 'gpg' of https://github.com/flammit/heads

1d366546f165236438717d3b6ef14da276a5bc9f authored over 6 years ago by Trammell hudson <[email protected]>

Merge branch 'librem_vbt' of https://github.com/kakaroto/heads

4b264fba70ed236fae2f55df16e2dfb5a151c50d authored over 6 years ago by Trammell hudson <[email protected]>

use tpmtotp git and add hotp command

d88cc4fe3cf8dae97c7334b7b8f75177a47b4cf3 authored over 6 years ago by Trammell hudson <[email protected]>

update URL for popt since rpm5.or gis down (issue #421)

c7bad87e4238be48207f71e81521705d5a4f376e authored over 6 years ago by Trammell hudson <[email protected]>

Merge branch 'master' of ssh://github.com/osresearch/heads

2c44800c6509b98cd3d00b3d253fc8f07bd5eccc authored over 6 years ago by Trammell hudson <[email protected]>

do not create empty file if wget fails (issue #422)

29f0f914c504a5d3daf1d471c520fb72856d785c authored over 6 years ago by Trammell hudson <[email protected]>

Ecosyste.ms: OpenCollective

github.com/tlaurion/heads-ci-fedora30