Harald Hoyer
|
a2bd2d4182
|
mkimage.sh: add hook for Shell.efi with startup.nsh
|
2018-09-13 13:46:08 +02:00 |
|
Harald Hoyer
|
23680b65ff
|
prepare-root.sh: fix /root symlink
|
2018-09-13 13:44:23 +02:00 |
|
Harald Hoyer
|
ddbef9392b
|
prepare-root.sh: don't move away vmlinuz
|
2018-09-13 13:43:18 +02:00 |
|
Harald Hoyer
|
61f55d1612
|
prepare-root.sh: cleanup dracut remains
|
2018-09-13 13:42:50 +02:00 |
|
Harald Hoyer
|
612289f5af
|
mkimage.sh: fix LockDown.efi and Shell.efi copy
|
2018-09-13 11:30:59 +02:00 |
|
Harald Hoyer
|
7a10c19f02
|
clonedisk.sh,mkimage.sh: install Shell.efi and Lockdown.efi
|
2018-09-13 10:59:06 +02:00 |
|
Harald Hoyer
|
7b5e78e9a1
|
clonedisk.sh: fixed dd typo
|
2018-09-13 10:58:48 +02:00 |
|
Harald Hoyer
|
d6f7aec884
|
mkrelease.sh: add --notar
|
2018-09-13 10:58:26 +02:00 |
|
Harald Hoyer
|
c275d3c6d8
|
mkrelease.sh: add --nosign option
|
2018-09-13 10:15:54 +02:00 |
|
Harald Hoyer
|
44e7216ae7
|
pkglist.txt: update and sort
|
2018-09-13 10:12:17 +02:00 |
|
Harald Hoyer
|
7a269d3c1f
|
prepare-root.sh: ensure home dir exists
|
2018-09-12 17:09:34 +02:00 |
|
Harald Hoyer
|
6036c0d2ba
|
mkrelease.sh: add UEFI signing
|
2018-09-12 16:44:03 +02:00 |
|
Harald Hoyer
|
edee679f34
|
pre-pivot.sh: udevadm settle
wait for udev to settle to mount the correct data disk
|
2018-09-12 16:40:53 +02:00 |
|
Harald Hoyer
|
daa5bdd118
|
prepare-root.sh: set lockdown=1 on the kernel cmdline
|
2018-09-12 16:40:19 +02:00 |
|
Harald Hoyer
|
074dddddf6
|
quirks/nss.sh: don't create /home/admin
|
2018-09-12 16:39:52 +02:00 |
|
Harald Hoyer
|
923e5c9dd5
|
pkglist.txt: moar packages
|
2018-09-12 16:39:18 +02:00 |
|
Harald Hoyer
|
b449e327c7
|
clonedisk.sh: Don't fail if EFI boot entries already set
|
2018-09-12 16:38:06 +02:00 |
|
Harald Hoyer
|
1138c7c1ec
|
update.sh: be more careful searching for the correct disk
otherwise we might catch the install USB stick still inserted
|
2018-09-12 16:37:15 +02:00 |
|
Harald Hoyer
|
1dc7a0fae6
|
use single image for squashfs and dmverity
|
2018-09-11 16:49:44 +02:00 |
|
Harald Hoyer
|
7e93df54b4
|
add yubikey udev rules
|
2018-09-11 16:49:18 +02:00 |
|
Harald Hoyer
|
0e17648dc5
|
update
|
2018-09-11 11:37:59 +02:00 |
|
Harald Hoyer
|
c8a3101e7b
|
tss before nss quirk
|
2018-09-10 17:11:47 +02:00 |
|
Harald Hoyer
|
bc0266de48
|
pkglist.txt: add pesign
|
2018-09-10 16:52:27 +02:00 |
|
Harald Hoyer
|
a320d42d51
|
fixed /data paths
|
2018-09-10 16:28:48 +02:00 |
|
Harald Hoyer
|
8dfa7e146a
|
add mkrelease.sh
|
2018-09-10 15:53:23 +02:00 |
|
Harald Hoyer
|
d18cdafa5b
|
update
|
2018-09-10 15:53:21 +02:00 |
|
Harald Hoyer
|
7d097f89e7
|
update
|
2018-09-10 14:19:20 +02:00 |
|
Harald Hoyer
|
2e63e25d7d
|
update
|
2018-09-07 17:02:36 +02:00 |
|
Harald Hoyer
|
55202efcba
|
add man pages
|
2018-09-06 16:17:45 +02:00 |
|
Harald Hoyer
|
5d5ec9682e
|
update
|
2018-09-06 15:57:20 +02:00 |
|
Harald Hoyer
|
6910172911
|
extend PCR7 after using it to unlock the LUKS
|
2018-09-05 16:50:45 +02:00 |
|
Harald Hoyer
|
52e5a2c9fa
|
force admin to change the password
|
2018-09-05 15:52:36 +02:00 |
|
Harald Hoyer
|
590f0ed4a7
|
README.md
|
2018-09-05 15:51:58 +02:00 |
|
Harald Hoyer
|
44534eab45
|
README.md
|
2018-09-05 15:16:47 +02:00 |
|
Harald Hoyer
|
a2f5682cec
|
pre-pivot.sh: don't remove the initial keyslot
It is needed, if the user wants to set a password
|
2018-09-05 15:15:53 +02:00 |
|
Harald Hoyer
|
2bd0b8d314
|
use /dev/mapper/data and a /etc/fstab on the real root
|
2018-09-05 15:15:53 +02:00 |
|
Harald Hoyer
|
de922ad17c
|
README.md
|
2018-09-05 14:24:25 +02:00 |
|
Harald Hoyer
|
7849f49833
|
README.md
|
2018-09-05 14:10:49 +02:00 |
|
Harald Hoyer
|
7a9fc6f7f7
|
README.md
|
2018-09-05 14:08:50 +02:00 |
|
Harald Hoyer
|
d32cd2fd1e
|
fixed missing linuxx64.efi.stub
|
2018-09-05 13:55:47 +02:00 |
|
Harald Hoyer
|
083e39326b
|
README.md
|
2018-09-05 13:50:57 +02:00 |
|
Harald Hoyer
|
4fda20a7aa
|
README.md
|
2018-09-05 13:42:47 +02:00 |
|
Harald Hoyer
|
57b6bc5784
|
README.md
|
2018-09-05 13:37:07 +02:00 |
|
Harald Hoyer
|
0c410bad77
|
README.md
|
2018-09-05 13:33:02 +02:00 |
|
Harald Hoyer
|
22b3b497aa
|
README.md
|
2018-09-05 13:24:27 +02:00 |
|
Harald Hoyer
|
6ab6028e26
|
README.md: update
|
2018-09-05 13:23:07 +02:00 |
|
Harald Hoyer
|
b228882743
|
pre-pivot.sh: don't wait for root device
since we are in pre-pivot, /dev/mapper/root should already exist.
|
2018-09-05 13:18:06 +02:00 |
|
Harald Hoyer
|
832454ea89
|
pre-pivot.sh: only wait for tpmrm0 if clevis is used
|
2018-09-05 13:17:31 +02:00 |
|
Harald Hoyer
|
e4226db63f
|
README.md: update
|
2018-09-05 13:16:05 +02:00 |
|
Harald Hoyer
|
abddd47cbc
|
README.md: update
|
2018-09-05 13:14:58 +02:00 |
|