1045 Commits
Author SHA1 Message Date
Trammell hudson 58e133ab50 circleci: try just qemu-coreboot 2020-01-07 23:34:17 +01:00
Trammell hudson a991fbcfc0 circleci: add pkg-config, remove V=1 2020-01-07 22:16:29 +01:00
Trammell hudson b8dd8381b0 circleci: use their ubuntu 18.04
Signed-off-by: Trammell hudson <hudson@trmm.net>
2020-01-07 21:12:55 +01:00
Trammell hudson 724998421e circleci: use their ubuntu 18.04
Signed-off-by: Trammell hudson <hudson@trmm.net>
2020-01-07 19:56:49 +01:00
Trammell hudson dacc3e2755 circleci: use their ubuntu 18.04
Signed-off-by: Trammell hudson <hudson@trmm.net>
2020-01-07 19:30:23 +01:00
Trammell hudson 8d4245a8bb circleci: try a clean build
Signed-off-by: Trammell hudson <hudson@trmm.net>
2020-01-07 19:27:55 +01:00
tlaurion 8af849cadc Merge pull request #618 from osresearch/musl-cross-pin
Pin tag of musl-cross, tpmtotp and msrtools
2019-12-06 10:52:50 -05:00
Trammell hudson 027ae39abe modules: add module_tar_opt to allow different strip options
Signed-off-by: Trammell hudson <hudson@trmm.net>
2019-12-03 10:48:10 +01:00
tlaurion 28740017d8 Merge pull request #635 from rofl0r/musl-cross-pin
update musl-cross to 1952975
2019-12-02 23:22:40 -05:00
rofl0r 7370b75945 update musl-cross to 1952975
this should fix issues with compressed ELF header sections.
2019-12-02 23:03:14 +00:00
tlaurion b4a647c485 Merge pull request #461 from osresearch/debug-linux
Enable verbose bootup debugging and set the early serial IO base port
2019-11-28 10:53:29 -05:00
tlaurion 81e7c1b636 Merge pull request #575 from merge/remove_keylime
initrd: remove unused keylime-init
2019-11-28 10:52:37 -05:00
tlaurion 61dd9ce2a0 Merge pull request #633 from merge/anykey_text
oem-factory-reset: Fix description for rebooting when finished
2019-11-28 10:51:43 -05:00
Martin Kepplinger 81df949632 oem-factory-reset: Fix description for rebooting when finished
As is in many cases in Heads, not any key will work, just Enter.

Signed-off-by: Martin Kepplinger <martin.kepplinger@puri.sm>
2019-11-26 18:10:39 +01:00
Kyle Rankin bd8d1c3e3d Merge pull request #632 from MrChromebox/password_min
oem-factory-reset: enforce 8-char min on custom password
2019-11-25 10:47:25 -08:00
Matt DeVillier 4db6fbd51a oem-factory-reset: enforce 8-char min on custom password
Since the custom password is used to set the GPG admin
password as well as the TPM and GPG user passwords, an
8-character minimum is required. Inform the user of this,
and validate custom password length upon entry.

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2019-11-25 12:44:56 -06:00
Kyle Rankin 8110b6192c Merge pull request #628 from MrChromebox/hotp_check_boot
unseal-hotp: ensure /boot mounted before checking HOTP secret
2019-11-25 09:26:07 -08:00
Kyle Rankin 9576a427a0 Merge pull request #627 from MrChromebox/totp_error_prompt
gui-init: update TOTP error prompt
2019-11-25 09:23:21 -08:00
Kyle Rankin ac987a2870 Merge pull request #626 from MrChromebox/librem_cfgs
Update Librem configs
2019-11-25 09:22:05 -08:00
Kyle Rankin c55c36ba50 Merge pull request #624 from MrChromebox/purism_resync
Resync with Purism tree
2019-11-25 09:20:48 -08:00
Matt DeVillier e8fb231bc7 config/coreboot-librem*: disable iGPU IOMMU for Linux payload
Disabling IOMMU on the iGPU for Heads (mostly) eliminates
display corruption when kexec'ing to new kernel (and has no effect
on iGPU/IOMMU for kexec'ed kernel)

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2019-11-21 15:42:51 -06:00
Matt DeVillier 0dbc748233 unseal-hotp: ensure /boot mounted before checking HOTP secret
If /boot isn't mounted, we can't read the HOTP counter, so no
point in reading from the TPM. This speeds up getting to the
main menu in the case of an inaccessible or non-existant /boot.

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2019-11-18 21:52:48 -06:00
Matt DeVillier b9fd6e2708 gui-init: update TOTP error prompt
Update text on TOTP error prompt to provide better
guidance for users following the use of the OEM
factory reset function

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2019-11-18 21:46:04 -06:00
Matt DeVillier 5d28532a0f board/librem*.config: set default boot device to NVMe
Automatic /boot detection will fall back to /dev/sd*

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2019-11-18 21:45:01 -06:00
Matt DeVillier 858f027285 config/coreboot-librem*: drop secondary payloads
Drop coreinto/memtest secondary payloads as they are not
usable with Linux as primary payload. Leftover copy-pasta
from original SeaBIOS configs.

Signed-off-by: Matt DeVillier <matt.devillier@puri.sm>
2019-11-18 21:43:47 -06:00