mirrors/linuxboot
1
0
Fork 0
mirror of https://github.com/linuxboot/linuxboot synced 2024-11-21 15:50:58 +00:00
Code Issues Packages Projects Releases Wiki Activity
29 Commits 6 Branches 0 Tags 9.2 MiB
C 73.5%
Perl 17.8%
Makefile 7.8%
Shell 0.5%
Go 0.4%
f37d5dd171
Go to file
Trammell Hudson f37d5dd171
dependency updates
2016-08-03 08:39:29 -04:00
build porting Makefile to use a modular build system for each package 2016-08-02 19:25:47 -04:00
config copy the bzImage into the coreboot build directory 2016-08-02 21:59:14 -04:00
initrd tpmtotp and qrencode deps 2016-07-31 22:39:07 -04:00
modules dependency updates 2016-08-03 08:39:29 -04:00
packages ignore fetched files 2016-08-02 21:24:15 -04:00
patches patch to let Xen 4.6.3 boot via kexec without a BIOS 2016-07-26 15:14:34 -04:00
.gitignore ignore created directories in initrd 2016-08-02 21:54:10 -04:00
Makefile ensure that the initrd/bin dir exists 2016-08-02 23:48:18 -04:00
populate-lib temp var for destination library 2016-08-02 21:21:56 -04:00
README.md Images and warning 2016-08-02 23:29:46 -04:00

README.md

Heads boot ROM motd

Heads: the other side of TAILS

Heads is a configuration for laptops that tries to bring more security to commodity hardware. Among its goals are:

  • Use free software on the boot path
  • Move the root of trust into hardware (or at least the ROM bootblock)
  • Measure and attest to the state of the firmware
  • Measure and verify all filesystems

Flashing Heads into the boot ROM

NOTE: It is a work in progress and not yet ready for users. If you're interested in contributing, please get in touch. Installation requires disassembly of your laptop or server, external SPI flash programmers, possible risk of destruction and significant frustration.

Components:

  • CoreBoot
  • Linux
  • busybox
  • kexec
  • tpmtotp
  • QubesOS (Xen)

Notes:

  • Building coreboot's cross compilers can take a while.
  • Currently only tested in Qemu and on a Thinkpad x230
  • Booting Qubes requires patching Xen's real mode startup code; see patches/xen-4.6.3.patch