heads
heads copied to clipboard
linuxboot
A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.
I was able to get Heads working pretty well in qemu using a software TPM and USB-forwarded token. Booting, HOTP, TOTP, TPM reset, etc. all work. I think this is...
Addresses https://github.com/osresearch/heads/issues/614 The whole trailing of how this PoC happened can be read https://github.com/osresearch/heads/issues/614#issuecomment-770431146 ---- EDIT: as of Aug 12 2022, the current patchset upstream is still a moving target....
Looking at [this issue](https://github.com/osresearch/heads/issues/699#issuecomment-611274089) in another context, I found out how to fix an issue I had in Arch Linux so far. ### What is happening When kexec is starting...
- Addition of nvmutil (nvm) from osboot project to play with gbe (Thanks @githubisnonfree!) - Addition of ifdtool from coreboot project to extract gbe - As of now, its implemented...
Hello guys/gals There is tickets opened to: - remove networking ( #564 ), with corresponding PR attempt to remove networking with cleanup ( #572 ) while cryptsetup seemed to depend...
t430/t530/w530 opened relevant (add others) The problem/feature is that currently deployed coreboot configs are setting both STATIC_OPTION_TABLE and USE_OPTION_TABLE. USE_OPTION_TABLE instructs coreboot to read CMOS settings from file if not...
This provides a configuration for OpenPower that builds (wasn't fully tested yet). It seems to be the first non-x86 target for Heads and might be the time to think how...
### Coreboot specs #### Intel xxx0: [gm45 bridge, Montevina: no FSP, no ME: X200, T400, T500, R500, X300](https://doc.coreboot.org/mainboard/lenovo/montevina_series.html) [xx20](https://doc.coreboot.org/mainboard/lenovo/x2xx_series.html): [Sandy bridge, no FSP. ME
Heads had several build breakages in the past because repositories go either down, have certificate problems etc. Pointing to github releases or Debian archives would mitigate this issue for reproducibility...
Tagging @tlaurion Opened to track comment https://github.com/osresearch/heads/pull/912#issuecomment-735017071 * ~Should be a togglable feature, turned off by default. Some networks, such as university campuses, require MAC addresses to be registered to...
