heads
heads copied to clipboard
linuxboot
A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.
``` user@localhost:~/heads$ grep -Ri cryptsetup boards/ | grep -v CRYPTSETUP2 boards/kgpe-d16_workstation/kgpe-d16_workstation.config:CONFIG_CRYPTSETUP=y boards/r630/r630.config:#CONFIG_CRYPTSETUP=y boards/kgpe-d16_server-whiptail/kgpe-d16_server-whiptail.config:CONFIG_CRYPTSETUP=y boards/w530-dgpu-K2000m-maximized/w530-dgpu-K2000m-maximized.config:CONFIG_CRYPTSETUP=y boards/kgpe-d16_server/kgpe-d16_server.config:CONFIG_CRYPTSETUP=y boards/t520-maximized/t520-maximized.config:CONFIG_CRYPTSETUP=y boards/w530-maximized/w530-maximized.config:CONFIG_CRYPTSETUP=y boards/t530-dgpu-maximized/t530-dgpu-maximized.config:CONFIG_CRYPTSETUP=y boards/qemu-linuxboot/qemu-linuxboot.config:CONFIG_CRYPTSETUP=y boards/t530-dgpu-hotp-maximized/t530-dgpu-hotp-maximized.config:CONFIG_CRYPTSETUP=y boards/w530-dgpu-K2000m-hotp-maximized/w530-dgpu-K2000m-hotp-maximized.config:CONFIG_CRYPTSETUP=y boards/winterfell/winterfell.config:#CONFIG_CRYPTSETUP=y boards/tioga/tioga.config:#CONFIG_CRYPTSETUP=y boards/w530-dgpu-K1000m-maximized/w530-dgpu-K1000m-maximized.config:CONFIG_CRYPTSETUP=y boards/w530-hotp-maximized/w530-hotp-maximized.config:CONFIG_CRYPTSETUP=y boards/leopard/leopard.config:#CONFIG_CRYPTSETUP=y boards/t530-maximized/t530-maximized.config:CONFIG_CRYPTSETUP=y boards/t520-hotp-maximized/t520-hotp-maximized.config:CONFIG_CRYPTSETUP=y boards/s2600wf/s2600wf.config:#CONFIG_CRYPTSETUP=y boards/w530-dgpu-K1000m-hotp-maximized/w530-dgpu-K1000m-hotp-maximized.config:CONFIG_CRYPTSETUP=y...
So I was excited to get heads installed and my nitrokey setup. But then realised I have some sort of bug on all three laptops. No matter the OS, if...
The last release from Heads:Master is from April 2017. Thanks to the incredible work of the main folks involved, Heads has moved on significantly since then. From x230 and the...
With the current master branch, which includes the changes to the x220 configs, amongst others, a new CBFS size ("to fix 50 seconds boot delay problems"), I found that you...
Hi all, we reaching stage where beta testers of coreboot-based Dasharo Trustworthy computing will be crucial to further project progress. Why we want to replace [hostboot](https://github.com/open-power/hostboot) with [coreboot]()? Some reason...
Instead of using UROOT_CMDS too specify the packages to include use UROOT_TEMPLATE=minimal or all, etc.
Currently, HEADS will prompt a recovery shell under any fault conditions, it may not be a concern in a perspective of security. However, unlike other bootloaders, such as GRUB which...
A customer or ours wishes a simple password protection in Heads. This should prevent against simple DoS attacks where somebody executes a factory reset or other misconfiguration. Do you think...
On some newer platforms of intel (confirmed on nehalem, sandy/ivy bridge), coreboot after commit [2ac149d294af795710eb4bb20f093e9920604abd](https://review.coreboot.org/cgit/coreboot.git/commit/?id=2ac149d294af795710eb4bb20f093e9920604abd) registers an SMI to lockdown some registers on the chipset, as well as access to...
