heads
heads copied to clipboard
linuxboot
A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.
 The protected range registers and flash lockdown should be set before invoking the kexec.
i reported earlier that i'd found hda_sdo on t440p; i did. but i didn't find a test point to connect dvdd from the hda chip to it, not yet anyway...
Adresses @aesrentai suggestion to pass modules optimization from O2 (performance) to Os (space) here: https://github.com/osresearch/heads/issues/590#issuecomment-821788703 Will comment on gains after build succeeds. ~Still impossible as of now to build xx30-flash...
Continuing #1116 on x230 linux config tuning. - flash (minimal) - legacy (reduced) - maximized As opposed to currently stored linux config, those are not stored in defconfig but full...
Would be nice if [AntiEvilMaid](https://github.com/QubesOS/qubes-antievilmaid/blob/master/anti-evil-maid/README) could be supported from Heads, so S3 suspend and integrity validation would be implemented in QubesOS. Requires: - [Ivy bridge SINIT](https://software.intel.com/system/files/article/183305/3rd-gen-i5-i7-sinit-67.zip) under /boot
Thanks @walliams to report that some maximized boards were still on cryptsetup1 (so TPM Disk encryption key cannot be defined under Heads for Qubes 4.1). - [x] This is based...
* #1031 and #893 on top of the current master * new board `nitropc_v2` is essentially a `librem_mini_v2` / nitropc + tpm2 (not working due to some missing config-hacks I...
Hi heads maintainers, We've been testing [heads on x230](https://github.com/hardenedlinux/Debian-GNU-Linux-Profiles/blob/master/docs/hardened_boot/heads-atop-coreboot.md) for a while and we aware of that the current version of heads doesn't support TPMv2. Do you guys have a...
@tlaurion How is heads currently versioned? In the QubesOS script https://github.com/3mdeb/qubes-fwupd/blob/master/src/qubes_fwupd_heads.py#L91 we check for the current version and want to download an update from LVFS only if the version is...
merges @eganonoa and fixes on top of it by @walliams. Nothing of my hand here. Just cherry-picked commits without merging master into @walliams branch. Replaces #1175