github.com/tlaurion/heads-ci-fedora30 commits

Fix coreboot GCC7 build issue

This is fixed in coreboot master but backporting for Heads.

Closes #241

5f9567c3907696a81d7115bf0c915307155e0faf authored about 7 years ago by Francis Lam <[email protected]>

Merge branch 'coreboot-4.6'

61f6973c5cc4db9b40f3bbbd94e9d0745e33910d authored about 7 years ago by Francis Lam <[email protected]>

Update qubes xen version for QSB 36

For Qubes 3.2: version 4.6.6-35
For Qubes 4.0: version 4.8.2-11

491fe083fa76a77bd733e39016d3d402b826b785 authored about 7 years ago by Francis Lam <[email protected]>

Fix default target for NERF and edk2 dependency (issue #284)

c954ec19472defefe748613ec85c7c30b65812e1 authored about 7 years ago by Trammell hudson <[email protected]>

Update qubes xen version for QSB 34 and QSB 35

For Qubes 3.2: version 4.6.6-34
For Qubes 4.0: version 4.8.2-9

8d34bcc6bc45dae6dac5a78b6e1a3d6e0123621d authored about 7 years ago by Francis Lam <[email protected]>

restore alignment on files for faster flashes

b04294c2344d4529a7224b715110aaea005ab40f authored about 7 years ago by Trammell hudson <[email protected]>

enable serial debugging and moderate verbose output from dxe-core

3e5783a24fc309cb13cf9a65e16bcc55f82dba56 authored about 7 years ago by Trammell hudson <[email protected]>

Include edk2 EmuVariableRuntimeDxe to provide efi vars (issue #270)

Remove the patch to Linux efivar_init() since we now have efi vars
for it to use.

Also link in ...

87bd21111f80243dc77eafee1e1a522d9b87e088 authored about 7 years ago by Trammell hudson <[email protected]>

preliminary winterfell support for NERF

5176bfdd5845221317d7aff2d50e8780ddc7f48e authored about 7 years ago by Trammell hudson <[email protected]>

Changed to coreboot patch to not measure relocated modules

87251fd1b16400ddaf916a16b2c3479264d5983c authored about 7 years ago by Francis Lam <[email protected]>

Updated to coreboot 4.6

Also changed x220 and purism configs to use generic boot

1a34bd9d6f2bd6d3ce89421bfc461b268fef49aa authored about 7 years ago by Francis Lam <[email protected]>

Merge branch 'jgrip-x220' PR #235

32ebb70e764ff8299ea291bb7ad986d8d8a04818 authored about 7 years ago by Trammell hudson <[email protected]>

Merge branch 'x220' of https://github.com/jgrip/heads into jgrip-x220

5ebe5a119a8b9f6e556a8bc1802478b137de97e3 authored about 7 years ago by Trammell hudson <[email protected]>

Merge branch 'qubes-4.0' PR #210

076e246549b9a8c822e3cb28b17144aea4392ac6 authored about 7 years ago by Trammell hudson <[email protected]>

Merge branch 'qubes-4.0' of https://github.com/flammit/heads into qubes-4.0

645c7656fa9acba6d21d4360862fdba5aad29a3f authored about 7 years ago by Trammell hudson <[email protected]>

Merge branch 'generic-boot-cleanup' PR #230

48175f752837b400f6dcc79371a1cd96e5c53651 authored about 7 years ago by Trammell hudson <[email protected]>

ignore temporary files

2045c082dccace0c0881d949de77e3f95b70d58c authored over 7 years ago by Trammell hudson <[email protected]>

Initial support for the Lenovo x3550 m5 server, but it does not work yet

6046a01e9e33466d7748343c20934f911683d3e5 authored over 7 years ago by Trammell hudson <[email protected]>

Build multiple boards with the NERF firmware (issue #268)

This modifies the `Makefile.nerf` to create files based on the
$(BOARD) variable, which is neces...

2438a0ea24bcdef75f1e8ef460999bf26ba209d7 authored over 7 years ago by Trammell hudson <[email protected]>

generate ACPI firmware volume and removed Linux ACPI table hacks (issue #266)

212b0306603bc012290a64f66000e35d278b5413 authored over 7 years ago by Trammell hudson <[email protected]>

LZ compressed version of the ACPI tables (hand generated) (issue #266)

86f90c894729d336e44445d9831d1654345d33c9 authored over 7 years ago by Trammell hudson <[email protected]>

Attempt to use the edk2 ACPI tables (issue #266)

This links in the AcpiTableDxe and AcpiPlatform executables from
the edk2 build tree and adds a ...

115573adc9fcb0531d633ff03b6dec0faddaec95 authored over 7 years ago by Trammell hudson <[email protected]>

make a hole in low memory for the trampoline (issue #246)

30c844661c56861f0ffcc146fd792c6c9b4e178c authored over 7 years ago by Trammell hudson <[email protected]>

use depex to wait for runtime services guid to be installed (issue #261)

ab87580b18362a7de94e22b6fb9779b473c45be9 authored over 7 years ago by Trammell hudson <[email protected]>

generate the r630 blobs from the input rom file

341f8ac1887e947df6b0b5013a25af761fc46368 authored over 7 years ago by Trammell hudson <[email protected]>

make coreboot an optional dependency (issue #265)

12cea9a8e949f26aaf873b9900fdd618e16209bd authored over 7 years ago by Trammell hudson <[email protected]>

make PERC/MegaRaid a module again (issue #253)

ae8aa669dca39a5ac8bf25b56bf5bdf5f4a154c9 authored over 7 years ago by Trammell hudson <[email protected]>

support XZ initrd, without forcing XZ on initramfs (issue #257)

90c231623c7268b701a02cdf1787db8d36b402a9 authored over 7 years ago by Trammell hudson <[email protected]>

Allow initrd.cpio to be a separate EFI firmware volume (issue #257)

Add a function to walk all firmware volumes looking for a well
known GUID that is the initrd.cpi...

0cc31132d324138e955a31eca5441db45642092b authored over 7 years ago by Trammell hudson <[email protected]>

generate 512-byte padded xz files

03d21da2681bf649fd71e070d35ea4dc6cda12aa authored over 7 years ago by Trammell hudson <[email protected]>

Make megaraid a module so that it does not delay normal boots (issue #253)

91ef9aeefa9ff2dfdd49b7ab5388ee5bc428c37e authored over 7 years ago by Trammell hudson <[email protected]>

Enable MegaRaid and XFS support (issue #253)

a1c9bbb9ff4bc64c7bc2000664b60d7afa107606 authored over 7 years ago by Trammell hudson <[email protected]>

quiet down the output to the vga, since it is so slow to update

0b7e5e60a0e2243939d8b6e0783af8c180bb4184 authored over 7 years ago by Trammell hudson <[email protected]>

Enable all flashrom devices (issue #249).

This allows flashrom to work on the r630 NERF server, but
also increases the size of the flashro...

f7de7d7388970f3e9b7ae7b78681d07c2939b913 authored over 7 years ago by Trammell hudson <[email protected]>

document how to extract and unlock regions from r630.rom (issue #259)

607868c0b5eb82ff59bb2ed91f6428d7151a1e58 authored over 7 years ago by Trammell hudson <[email protected]>

remove unneeded foo.vol.txt output from GenVol

ddbdcd4d4d7b15587042d2ce253ed4b7865a7dc2 authored over 7 years ago by Trammell hudson <[email protected]>

expand the NERF volume to fill all available space in the ROM (issue #242)

8148c970fbb6ba31e93423406383bf828cdc3b9f authored over 7 years ago by Trammell hudson <[email protected]>

make edk2 a dep for building the DXE images

9596e73dfce6ed324e0d764f26bbb98f90308fdc authored over 7 years ago by Trammell hudson <[email protected]>

build appears to produce a NERFed r630 firmware image

796ea2870af3eaf02fd32bf1dbebeae02412d6ef authored over 7 years ago by Trammell hudson <[email protected]>

initial tools to build the nerf EFI volume that goes into the firmware

998736fc50d7558464362a39ab8a3da0d2ee9cb3 authored over 7 years ago by Trammell hudson <[email protected]>

unquiet it for now

3a8710cf492f44ab5ee4becd394cc80ec468a7a0 authored over 7 years ago by Trammell hudson <[email protected]>

ignore edk2 generated files

04a108912ffa0f5e264d4a927167fb694f0f287a authored over 7 years ago by Trammell hudson <[email protected]>

build edk2 as a module for the r630 NERF firmware

81a7f18b8635c16247731265032257820fdcd635 authored over 7 years ago by Trammell hudson <[email protected]>

fix patches to have the correct -p level

bda821dbb93663ff5f5c8771899190ba2d33dc63 authored over 7 years ago by Trammell hudson <[email protected]>

allow extra options to git via the repo variable

8194f2f47791d597171b96c0e5d96ba408666026 authored over 7 years ago by Trammell hudson <[email protected]>

ACPI tables for the r630 NERF firmware

33c1c9147e1ba794796f0a7367a11c939bea57c9 authored over 7 years ago by Trammell hudson <[email protected]>

Build the Heads/NERF firmware for the Dell R630 server.

This development branch builds a NERF firmware for the Dell R630
server. It does not use corebo...

a4d7654b1eee65a104053c0a2b2b882fa1ec9e44 authored over 7 years ago by Trammell hudson <[email protected]>

Added configurable xen version for Qubes 4 support

also addresses issue #238

41f49237c636bf6ff12938253641b317a932fa09 authored over 7 years ago by Francis Lam <[email protected]>

Updated to match latest qubes 3.2 xen 4.6.6-30 (issue #238)

ec1a54c6b61b10b9dbdc7e7791c0bd75ba93cb11 authored over 7 years ago by Francis Lam <[email protected]>

enable i915 native support (needed for Librem 13v2)

498105c9796f6b32fa4f96c34517a63dbdec1e74 authored over 7 years ago by Trammell hudson <[email protected]>

Moved kernel command line parameters to config

472ffd35c0a5d8b9d4d678a3ab5117722cccf2ae authored over 7 years ago by Francis Lam <[email protected]>

Allow boot without unseal of TPM LUKS key

Closes issue #226

Also changed to procedure to show LVM volume groups and block
device ids to a...

7cec25542d45b7a2251c395a2e6ffc5ac16cf3ba authored over 7 years ago by Francis Lam <[email protected]>

Allow TPM LUKS key to be set during default selection

Closes #222

26b2d498977f793c8092226ab9f0be93231dbb54 authored over 7 years ago by Francis Lam <[email protected]>

Ensure recovery for failed default boot

Should close #223

Added reboot and poweroff scripts using /proc/sysrq-trigger

Also cleaned up ...

0897a20b845c387d8c297bf2d006568f2ca88db9 authored over 7 years ago by Francis Lam <[email protected]>

Strip invalid leading/trailing '/' from script params

e8f3d206c557169c60918f436f65c62d37d6f394 authored over 7 years ago by Francis Lam <[email protected]>

Updated to match latest qubes 3.2 xen 4.6.6-29 (issue #238)

821e48446a19c53a1afdd433ff79e9d74068c5b1 authored over 7 years ago by Francis Lam <[email protected]>

Update X220 to do generic image instead of qubes.

Also added a script to extract the necessary blobs from a bios
dump image.

6f48c14d0c9b24148d60025c50355bb9bb6d439f authored over 7 years ago by Johan Grip <[email protected]>

fix typo and format with markdown (issue #206)

9d9af31e58a40e6e679be2397391128bbd05f318 authored over 7 years ago by Trammell Hudson <[email protected]>

bump Linux kernel to 4.9.38 (issue #224)

314ce7b350acbbf7c94c33f91c6e036586cf6c0c authored over 7 years ago by Trammell Hudson <[email protected]>

include version number in verify target (issue #228)

fcc99eca9349cf0202befe927c41854b6e436927 authored over 7 years ago by Trammell Hudson <[email protected]>

rework startup scripts to combine totp prompt with boot mode selection (issue #221)

b550a7f967edbdff34d18369fe633194bdfc9680 authored over 7 years ago by Trammell Hudson <[email protected]>

tweaks to make qemu run through the /bin/generic-init process

3e48f1c5e829431d9c5f8160166ade275d4c4072 authored over 7 years ago by Trammell Hudson <[email protected]>

disable i915 for now, since it causes screen glitches in Xen/Qubes (issue #219)

36e3172c8e2edd3e3d660139a6d1335cfd988a88 authored over 7 years ago by Trammell Hudson <[email protected]>

remove no longer required vga patch from xen (issue #227)

3c8adf2cf10a5be7294aa60e85d4e077602ef43c authored over 7 years ago by Trammell Hudson <[email protected]>

add support for i915 and render mode setting (issue #219)

7aec9a228860c1f59508ad1ddad1980d5829fbd0 authored over 7 years ago by Trammell Hudson <[email protected]>

add support for fractional second timeouts in busybox read (issue #221)

39ade211ce73cf6baf59044dba06837a39548768 authored over 7 years ago by Trammell Hudson <[email protected]>

Merge branch 'flammit-usb-boot' pull request #200

f0913e96705804f9d9ddc8a228f747a5ed1a341e authored over 7 years ago by Trammell Hudson <[email protected]>

remove trailing / on the /boot device parameter

af3170ebf71d610765f724be9e7b4907155efb21 authored over 7 years ago by Trammell Hudson <[email protected]>

remove older qubes-specific files, no longer required in generic boot env

831dca51243228edc7d2d50f423de9ee84e84893 authored over 7 years ago by Trammell Hudson <[email protected]>

default to mounting USB device on /media

22282da905d6deabd81aa753845ff4af381f343d authored over 7 years ago by Trammell Hudson <[email protected]>

add /boot and /media to /etc/fstab on startup (issue #220)

86f3e9f5dc13e69a847ed8105557d8f0e384cd7d authored over 7 years ago by Trammell Hudson <[email protected]>

Merge branch 'usb-boot' of https://github.com/flammit/heads into flammit-usb-boot

ba98d5dda66c7d1de4668089bbc131729ddb949e authored over 7 years ago by Trammell Hudson <[email protected]>

Fixed edge case in kernel argument injection

Debian 9 installer doesn't have kernel arguments so the iommu fix
wasn't being applied properly.

11aca354e9b4c7e50c95f7b7209eeddbfb535e02 authored over 7 years ago by Francis Lam <[email protected]>

Fixed regression on kexec-save-key

2a9ca6fdba3e5fd41153c59caf1b652d369623d8 authored over 7 years ago by Francis Lam <[email protected]>

Added TPM secret management to generic boot

Also cleaned up error handling and boot parsing edge cases

22a52ec4b82411198c1032caa6a722395b557d62 authored over 7 years ago by Francis Lam <[email protected]>

Added rollback protection to generic boot

Changed the checking of required hashes or required rollback state
to be right before boot, allo...

d67360a24b215a65974253da6e8f18acd46a42bf authored over 7 years ago by Francis Lam <[email protected]>

Added the ability to persist a default boot option

Similar to qubes-update, it will save then verify the hashes of
the kexec files. Once TOTP is ve...

8004b5df2a4dd626a01f6c8b7b67abe222ebb134 authored over 7 years ago by Francis Lam <[email protected]>

Minor tweaks to signing params and boot options

Also split out usb-scan to allow manual initiation of scan from
the recovery shell

ce4b91cad98f11f696bd320a4d6990cf831f1e3a authored over 7 years ago by Francis Lam <[email protected]>

Added a generic boot config and persistent params

Refactored boot parsing code and applied that in local-init to
scan /boot for grub options and a...

3614044fffbf702c49e79e48e12dcd9988a8cbc3 authored over 7 years ago by Francis Lam <[email protected]>

Tweaks to allow qubes install w/o custom script

usb-boot automatically uses internal xen binary / command line
when multiboot is detected.

also...

76a20288a33085d041f8396068528e413506e61a authored over 7 years ago by Francis Lam <[email protected]>

fix Xen reproducibility by not using figlet #207

7e5c9bf5f846bf6e8c5d885670ba011706949342 authored over 7 years ago by Trammell Hudson <[email protected]>

Reverted submodule name back to xen

7f6f365afe74115172b1d473a8db12aa6a47c624 authored over 7 years ago by Francis Lam <[email protected]>

Fixes the patched qubes-vmm-xen Makefile

Prevents subsequent builds from trying to unpack/repatch

e1e654696b0f360df054cf9fa65391825c758d8f authored over 7 years ago by Francis Lam <[email protected]>

Changed xen submodule to track Qubes Xen

Closes #159

c2ec62bfcd41f4b8409cf59d85c2cd83f43b1d1b authored over 7 years ago by Francis Lam <[email protected]>

do not enable libkmod (issue #164)

265424b101fc5f7fd1a614cc0c8dbad18b3eb913 authored over 7 years ago by Trammell Hudson <[email protected]>

use SHA256 digest on signatures to avoid SHA1 collision attacks (issue #120)

a5d4c6553317d9e5a25c47e9417f2ba5baabab41 authored over 7 years ago by Trammell Hudson <[email protected]>

typo in comment

2b2c00e594431accc1656f10e6d5af926023a438 authored over 7 years ago by Trammell Hudson <[email protected]>

Added blob directory for non-free blobs Also basic documentation for the binaries needed for the X220 and how the get to them

8b3ed5fd7a1a7b77ed2c404f7b1d23b1f0966232 authored over 7 years ago by Johan Grip <[email protected]>

Also enable the correct flash chip for x220

dea6cb60d3d9e311fa8646b4807183c0590d6f14 authored over 7 years ago by Johan Grip <[email protected]>

Re-enabled x220 components in flashrom.

ceb81944a1be0da9fec5688026f6ae21abef37dc authored over 7 years ago by Johan Grip <[email protected]>

Inital test of a lenovo x220 port. Uses hardcoded paths for the blobs required. Uses a stripped ME blob.

186b641385209ec5c5e26ef1241f291f63635b45 authored over 7 years ago by Johan Grip <[email protected]>

make the ME a module (issue #194)

2cad84a76861652352091ec43e14230e2b1746d6 authored over 7 years ago by Trammell Hudson <[email protected]>

minor tweaks to config parsing

1f8eaa696e792694f8fb866b6b3a0cb86a46a9e4 authored over 7 years ago by Francis Lam <[email protected]>

adds a USB boot option with basic parsing to kexec

Supports booting from USB media using either the root device or
a signed ISO as the boot device....

efd662c63a18192b1c82597b17822c61dc28c00d authored over 7 years ago by Francis Lam <[email protected]>

pass -ic option to tpm extend (issue #198)

7f600072ade503c6e57cd40b4316264f1a3a0ed2 authored over 7 years ago by Trammell Hudson <[email protected]>

cherry pick Linux config from zfs branch with multi-user set

448d0731a9756d7a9a1a09cdec866354b6cbb62e authored over 7 years ago by Trammell Hudson <[email protected]>

Use kernel headers from our Linux kernel tree (issue #188)

964b967c9e07c7108d785b168304ef6e3b1e5715 authored over 7 years ago by Trammell Hudson <[email protected]>

load usb-storage module in x230-flash.init

ad732939c339506b4b15a6aa9516f2a5fc8ce6c1 authored over 7 years ago by Francis Lam <[email protected]>

cbmem was not being built

a71f84c08f57a8a134cf6413a34d13ff2115a3d1 authored over 7 years ago by Trammell Hudson <[email protected]>

hardware token key

8f4455bc5724215287f56339cb0679e561d94b60 authored over 7 years ago by Trammell Hudson <[email protected]>

Ecosyste.ms: OpenCollective

github.com/tlaurion/heads-ci-fedora30