heads
heads copied to clipboard
Add CONFIG_BOOT_XEN_ADD CONFIG_BOOT_XEN_REMOVE
One of the interesting functionalities Heads now provides through config heads configs management is resetting/merging /etc/config.user(live) + /etc/config (stock).
This facilitates testing of different configurations on live system when unsafe booting since we invalidated measurements by going into recovery and modified PCR4, prohibiting release of the TPM Disk Unlock Key from TPM since measurements are invalidated.
For OS testings, where end user can modify /etc/config.user and then call config-gui.sh to inject that new config into cbfs, seal it on next reboot, only OS kernel options can be modified from compiled board config which is placed under /etc/config in rom:
Example of current ADD/REMOVE board config options usable right now:
export CONFIG_BOOT_KERNEL_ADD="intel_iommu=on intel_iommu=igfx_off"
export CONFIG_BOOT_KERNEL_REMOVE="quiet"
That permits to tinker and tweak OS bootable kernel options, where Xen config tweaks still need to be manually modified inside of grub config and grub config needs to be regenerated
I was thinking of adding CONFIG_BOOT_XEN_ADD and CONFIG_BOOT_XEN_REMOVE options in the set.
@MrChromebox ?