Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TESTING NEEDED: STAGING PR (quiet mode + diceware + nk3 fixes) #1875

Merged
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
86 commits
Select commit Hold shift + click to select a range
496d930
qemu-coreboot-fbwhiptail-tpm2-hotp-prod_quiet board: addition of boar…
tlaurion Nov 27, 2024
1f02912
initrd bin/* sbin/insmod + /etc/ash_functions: TPM extend operations …
tlaurion Nov 27, 2024
9cd4757
init: suppress /etc/config.user not existing on grep calls
tlaurion Nov 27, 2024
e03a790
init: inform user that running in quiet mode, tell user that technica…
tlaurion Nov 27, 2024
48807de
codebase: silence dd output while capturing output in variables when …
tlaurion Dec 3, 2024
3726e90
initrd/bin/tmpr: silence tpm reset console output, LOG instead
tlaurion Dec 3, 2024
d57a120
initrd/etc/ash_functions: add GPG Admin/User PIN output grabbing on c…
tlaurion Dec 3, 2024
befef09
diceware: add short list v2, requiring 4 dices and providing longer w…
tlaurion Nov 15, 2024
1da5119
initrd/etc/functions: add generate_passphrase logic
tlaurion Nov 15, 2024
f8fdfc7
WiP initrd/bin/oem-factory-reset: format unification
tlaurion Nov 17, 2024
108e6ed
WiP initrd/bin/oem-factory-reset: add --mode (oem/user) skeleton
tlaurion Nov 17, 2024
40df08e
/etc/functions:: reuse detect_boot_device instead of trying only to m…
tlaurion Nov 17, 2024
a6df16e
WiP initrd/bin/oem-factory-reset: add qrcode+secet output loop until …
tlaurion Nov 17, 2024
223e504
WiP: bump to hotp-verification version supporting reset of secret app
tlaurion Nov 28, 2024
814f4fa
WiP: add nk3 secret app reset function and call it following security…
tlaurion Nov 28, 2024
351a2e2
modules/hotp-verification: revert to 1.6, add patches tested instead
tlaurion Dec 5, 2024
fd136cd
oem-factory-reset: add reset secure app PIN = ADMIN_PIN at reownershi…
tlaurion Dec 5, 2024
7f9f84b
modules/hotp-verification: 1.6, removing patch pr43, only keeping 46 …
tlaurion Dec 5, 2024
e01d346
oem-factory-reset: don't set user re-ownership by default for now: us…
tlaurion Dec 5, 2024
03e5ec0
oem-factory-reset: if nk3, also display Secure App PIN = GPG Admin PI…
tlaurion Dec 5, 2024
789231f
oem-factory-reset: fix Secure App wording, prevent word globbing, war…
tlaurion Dec 5, 2024
c372370
oem-factory-reset: set title_text accordingly to mode, either 'OEM Fa…
tlaurion Dec 5, 2024
e25fb59
oem-factory-reset: reset nk3 secure app PIN early since we need physi…
tlaurion Dec 5, 2024
95473d6
kexec-sign-config: mount rw, write things to /boot, mount ro after
tlaurion Dec 5, 2024
847b4dd
WiP seal-hotp: customize message to be GPG Admin PIN or Secure App PIN
tlaurion Dec 5, 2024
4fd7106
hotp-verification patches: Use https://github.com/Nitrokey/nitrokey-h…
tlaurion Dec 6, 2024
ebf4d1d
oem-factory-reset+seal-hotp nk3 hotp-verification info adaptations
tlaurion Dec 6, 2024
27ab173
hotp-verification: removed patches/hotp-verification-e9050e0c914e7a8f…
tlaurion Dec 6, 2024
98e2054
functions: Fix spelling of 'dictionaries'
JonathonHall-Purism Dec 6, 2024
be49517
functions: Simplify dictionary word selection
JonathonHall-Purism Dec 6, 2024
54baa37
oem-factory-reset: Stop adding leading blank lines in 'passphrases' msg
JonathonHall-Purism Dec 6, 2024
4ba7cc5
patches/hotp-verification-*/46.patch : readd https://github.com/Nitro…
tlaurion Dec 7, 2024
abc97fe
WiP: staging changes including https://github.com/linuxboot/heads/pul…
tlaurion Dec 9, 2024
19fd98d
WiP: staging changes (TPM1 regression fixes for LOG/DEBUG on quiet mode)
tlaurion Dec 10, 2024
94b77e8
WiP: staging changes
tlaurion Dec 10, 2024
f68df1c
Bump hotp-verification to version 1.7, remove patches: contains info …
tlaurion Dec 12, 2024
eca4e34
WiP: staging changes
tlaurion Dec 12, 2024
c7ab861
Turn some info on default boot into LOGged info, LOG might go out for…
tlaurion Dec 12, 2024
d768e80
WiP: staging changes, no more tpm output. Next warn /boot changed bec…
tlaurion Dec 13, 2024
0d39642
WiP: staging changes, warn loud and clear of weak security posture by…
tlaurion Dec 13, 2024
53156c3
WiP: staging changes, refusing to fight against tools helping me, for…
tlaurion Dec 13, 2024
a54a4b8
hot-verification: bump to 1.7+ unrelease patchset https://github.com/…
tlaurion Dec 13, 2024
4354cd4
config-gui.sh: Add quiet mode toggle, which turns off debug+tracing i…
tlaurion Dec 16, 2024
08f52af
Deprecate ash in favor of bash shell; /etc/ash_functions: move /etc/a…
tlaurion Dec 16, 2024
b5c24f2
init+cbfs-init: refactor and explain why quiet mode cannot suppress m…
tlaurion Dec 16, 2024
60ba06d
DEBUG: inform that output will be both in dmesg and on console from w…
tlaurion Dec 16, 2024
ef4cdfa
init: some more comments in code per review
tlaurion Dec 16, 2024
91299fd
seal-totp: contextualize qr code output for manual input of those wit…
tlaurion Dec 16, 2024
885af7d
kexec-select-boot+kexec-save-default: Quiet mode; remove last rollbac…
tlaurion Dec 16, 2024
f981ef9
init: Quiet mode enablement output string modified; tell users having…
tlaurion Dec 17, 2024
71d4260
novacustom_nv4x_adl/novacustom_nv4x_adl.config : add quiet mode for r…
tlaurion Dec 17, 2024
1e60796
TPM2 primary handle debugging once more. Can't wait we get rid of thi…
tlaurion Dec 17, 2024
02d8ce8
kexec-save-default kexec-select-boot: fix primary handle once more. C…
tlaurion Dec 18, 2024
494ba09
novacustom-nv4x board config: revert quiet mode enablement
tlaurion Dec 18, 2024
bcd364c
TO REVERT BEFORE MERGE: enable quiet mode in all boards and revert fo…
tlaurion Dec 18, 2024
97121ab
global: finalize switch from ash to bash shell, including recovery sh…
tlaurion Dec 19, 2024
eb63d4d
oem-factory-reset: remove duplicate output 'Checking for USB Security…
tlaurion Dec 19, 2024
07218df
initrd/bin/kexec-select-boot: clarify that TPM2 primary handle HASH i…
tlaurion Dec 20, 2024
e1a263c
init: warn user that if CONFIG_QUIET_MODE was enabled in board config…
tlaurion Dec 20, 2024
2835539
initrd/init: Delete outdated comment about ash
JonathonHall-Purism Dec 20, 2024
516f7b6
etc/functions: Fix SINK_LOG blank lines, add more dev doc
JonathonHall-Purism Dec 20, 2024
c4bb410
tpmr: Use SINK_LOG rather than temp file, avoid doubled log output
JonathonHall-Purism Dec 20, 2024
a06ead6
tpmr: Don't continue blindly if a TPM reset step fails
JonathonHall-Purism Dec 20, 2024
8e630e0
seal-totp: Print plain secret instead of URL for manual entry
JonathonHall-Purism Dec 20, 2024
0825b57
config-gui.sh: Combine quiet mode / debug output to one output setting
JonathonHall-Purism Dec 20, 2024
89309f0
init: clarify origin of quiet mode once more after merge conflict res…
tlaurion Dec 21, 2024
574cd97
Revert "TO REVERT BEFORE MERGE: enable quiet mode in all boards and r…
tlaurion Dec 21, 2024
27b3e3a
qemu-*-prod_quiet board configs: move debug(n)+tracing(n)+pcap(n)+qui…
tlaurion Dec 21, 2024
ff94d78
all maintained boards: add debug(n)+tracing(n)+pcap(n)+quiet(y) just …
tlaurion Dec 21, 2024
d2b8459
tpmr: check for CONFIG_TPM2_CAPTURE_PCAP=y to export TPM comms under …
tlaurion Dec 21, 2024
696ecf5
initrd/bin/seal-hotpkey: fix regression of hotp_verification 1.7+ ver…
tlaurion Dec 21, 2024
94dd788
seal-hotpkey: change warning when default GPG Admin PIN/Secrets app P…
tlaurion Dec 21, 2024
af59704
TODOs: remove no more relevant ones code per review
tlaurion Dec 21, 2024
618ff26
functions: remove DO_WITH_DEBUG call for kexec-parse-boot which redir…
tlaurion Jan 9, 2025
8f7b1c4
Revert "functions: remove DO_WITH_DEBUG call for kexec-parse-boot whi…
tlaurion Jan 13, 2025
930d3e6
BUGFIX: replace direct calls from LOG to INFO, so that only DO_WITH_D…
tlaurion Jan 13, 2025
b1690ce
Merge remote-tracking branch 'osresearch/master' into introduce_quiet…
tlaurion Jan 15, 2025
69037fc
BOARD_TESTERS.md: revise board names, add v560tu, add testers expecte…
tlaurion Jan 15, 2025
bab46bc
novacustom-v560tu board config: set board to have quiet mode enabled …
tlaurion Jan 15, 2025
392d456
typo: s01x -> s0ix
tlaurion Jan 16, 2025
2872f44
v560tu: unify board config, remove debug cmdline passed from coreboot…
tlaurion Jan 16, 2025
22a86e6
oem-factory-reset: Only badger user to record passphrases if generated
JonathonHall-Purism Jan 16, 2025
61e6cf6
Merge remote-tracking branch 'osresearch/master' into introduce_quiet…
tlaurion Jan 17, 2025
0cdd441
Merge remote-tracking branch 'osresearch/master' into introduce_quiet…
tlaurion Jan 17, 2025
2d19fa9
Merge remote-tracking branch 'osresearch/master' into introduce_quiet…
tlaurion Jan 17, 2025
836af32
BUGFIX >2tb drives: replace all fdisk -l calls with stderr suppressio…
tlaurion Jan 20, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions BOARD_TESTERS.md
Original file line number Diff line number Diff line change
Expand Up @@ -44,8 +44,8 @@ Librems:
Clevo:
===
- [ ] Nitropad NS50 (AlderLake) : @daringer
- [ ] Nitropad NV41 (AlderLake) : @tlaurion @daringer

- [ ] Novacustom NV4x (AlderLake) : @tlaurion @daringer
- [ ] Novacustom v560tu (MeteorLake) : @tlaurion @daringer @mkopec

Desktops/Servers
==
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,13 @@ export CONFIG_LINUX_USB_COMPANION_CONTROLLER=y

export CONFIG_TPM=y
#BOOT SCRIPT SELECTION
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
#export CONFIG_BOOTSCRIPT=/bin/generic-init
export CONFIG_BOOTSCRIPT=/bin/gui-init
#export CONFIG_BOOTSCRIPT_NETWORK=/bin/network-init-recovery
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,13 @@ CONFIG_LINUX_E1000E=y
export CONFIG_LINUX_USB_COMPANION_CONTROLLER=y

export CONFIG_TPM=y
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
#BOOT SCRIPT SELECTION
export CONFIG_BOOTSCRIPT=/bin/generic-init
#export CONFIG_BOOTSCRIPT_NETWORK=/bin/network-init-recovery
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -49,6 +49,13 @@ export CONFIG_USB_KEYBOARD_REQUIRED=y
export CONFIG_TPM=y
#BOOT SCRIPT SELECTION
#export CONFIG_BOOTSCRIPT=/bin/generic-init
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
#export CONFIG_BOOTSCRIPT_NETWORK=/bin/network-init-recovery

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,13 @@ export CONFIG_LINUX_USB_COMPANION_CONTROLLER=y
export CONFIG_TPM=y
#BOOT SCRIPT SELECTION
#export CONFIG_BOOTSCRIPT=/bin/generic-init
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
#export CONFIG_BOOTSCRIPT_NETWORK=/bin/network-init-recovery

Expand Down
14 changes: 7 additions & 7 deletions boards/UNTESTED_nitropad-ns50/UNTESTED_nitropad-ns50.config
Original file line number Diff line number Diff line change
Expand Up @@ -8,12 +8,6 @@ export CONFIG_LINUX_VERSION=6.1.8
CONFIG_COREBOOT_CONFIG=config/coreboot-nitropad-ns50.config
CONFIG_LINUX_CONFIG=config/linux-novacustom-common.config

#Enable DEBUG output
#export CONFIG_DEBUG_OUTPUT=y
#export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=y
#Enable TPM2 pcap output under /tmp
#export CONFIG_TPM2_CAPTURE_PCAP=y

#On-demand hardware support (modules.cpio)
CONFIG_LINUX_USB=y
CONFIG_LINUX_E1000=y
Expand Down Expand Up @@ -68,11 +62,17 @@ export CONFIG_TPM2_TOOLS=y
export CONFIG_PRIMARY_KEY_TYPE=ecc
#TPM1 requirements
#export CONFIG_TPM=y
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
export CONFIG_BOOT_KERNEL_ADD=""
export CONFIG_BOOT_KERNEL_REMOVE="intel_iommu=on intel_iommu=igfx_off"
export CONFIG_BOARD_NAME="Nitropad NS50"
export CONFIG_FLASH_OPTIONS="flashprog --progress --programmer internal"
export CONFIG_AUTO_BOOT_TIMEOUT=5
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,13 @@ CONFIG_LINUX_USB=y
CONFIG_MOBILE_TETHERING=y

export CONFIG_TPM=y
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
7 changes: 7 additions & 0 deletions boards/UNTESTED_talos-2/UNTESTED_talos-2.config
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,13 @@ export CONFIG_USB_KEYBOARD_REQUIRED=y
export CONFIG_BOOT_EXTRA_TTYS="tty0"

export CONFIG_TPM=y
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/talos-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
7 changes: 7 additions & 0 deletions boards/UNTESTED_w541-maximized/UNTESTED_w541-maximized.config
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,13 @@ CONFIG_LINUX_USB=y
CONFIG_MOBILE_TETHERING=y

export CONFIG_TPM=y
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
7 changes: 7 additions & 0 deletions boards/librem_11/librem_11.config
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,13 @@ CONFIG_MOBILE_TETHERING=y

export CONFIG_TPM=n

#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
7 changes: 7 additions & 0 deletions boards/librem_13v2/librem_13v2.config
Original file line number Diff line number Diff line change
Expand Up @@ -29,6 +29,13 @@ CONFIG_LINUX_USB=y
CONFIG_MOBILE_TETHERING=y

export CONFIG_TPM=y
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
7 changes: 7 additions & 0 deletions boards/librem_13v4/librem_13v4.config
Original file line number Diff line number Diff line change
Expand Up @@ -29,6 +29,13 @@ CONFIG_LINUX_USB=y
CONFIG_MOBILE_TETHERING=y

export CONFIG_TPM=y
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
7 changes: 7 additions & 0 deletions boards/librem_14/librem_14.config
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,13 @@ CONFIG_MOBILE_TETHERING=y

export CONFIG_TPM=y

#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
7 changes: 7 additions & 0 deletions boards/librem_15v3/librem_15v3.config
Original file line number Diff line number Diff line change
Expand Up @@ -29,6 +29,13 @@ CONFIG_LINUX_USB=y
CONFIG_MOBILE_TETHERING=y

export CONFIG_TPM=y
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
7 changes: 7 additions & 0 deletions boards/librem_15v4/librem_15v4.config
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,13 @@ CONFIG_LINUX_USB=y
CONFIG_MOBILE_TETHERING=y

export CONFIG_TPM=y
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
7 changes: 7 additions & 0 deletions boards/librem_l1um/librem_l1um.config
Original file line number Diff line number Diff line change
Expand Up @@ -29,6 +29,13 @@ CONFIG_MOBILE_TETHERING=y

export CONFIG_TPM=y

#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
7 changes: 7 additions & 0 deletions boards/librem_l1um_v2/librem_l1um_v2.config
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,13 @@ CONFIG_TPM2_TSS=y
CONFIG_OPENSSL=y
CONFIG_PRIMARY_KEY_TYPE=ecc

#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
7 changes: 7 additions & 0 deletions boards/librem_mini/librem_mini.config
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,13 @@ CONFIG_MOBILE_TETHERING=y

export CONFIG_TPM=n

#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
7 changes: 7 additions & 0 deletions boards/librem_mini_v2/librem_mini_v2.config
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,13 @@ CONFIG_MOBILE_TETHERING=y

export CONFIG_TPM=n

#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
15 changes: 8 additions & 7 deletions boards/novacustom-v560tu/novacustom-v560tu.config
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
# This excludes gbe from internal flashing, otherwise mac address would revert to '88:88:88:88:87:88' see https://github.com/linuxboot/heads/pull/1871#discussion_r1870134788
# Same options should be used when externally flashing the first time, otherwise Intel GBE region (Ethernet config blob) will be overwitten and MAC reverted to '88:88:88:88:87:88'

# Meteor Lake (Intel Gen 14) is not supposed to support s3 but coincidently does. In case s3 is broken, user must configure settings to not suspend or otherwise enable ME/CSME for s01x to work (unsupported by QubesOS when writing those lines) or use Hibernate (Not supported by QubesOS either)
# Meteor Lake (Intel Gen 14) is not supposed to support s3 but coincidently does. In case s3 is broken, user must configure settings to not suspend or otherwise enable ME/CSME for s0ix to work (unsupported by QubesOS when writing those lines) or use Hibernate (Not supported by QubesOS either)

export CONFIG_COREBOOT=y
export CONFIG_COREBOOT_VERSION=dasharo
Expand All @@ -12,12 +12,6 @@ export CONFIG_LINUX_VERSION=6.1.8
CONFIG_COREBOOT_CONFIG=config/coreboot-novacustom-v560tu.config
CONFIG_LINUX_CONFIG=config/linux-novacustom-common.config

#Enable DEBUG output
#export CONFIG_DEBUG_OUTPUT=y
#export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=y
#Enable TPM2 pcap output under /tmp
#export CONFIG_TPM2_CAPTURE_PCAP=y

#On-demand hardware support (modules.cpio)
CONFIG_LINUX_USB=y
CONFIG_LINUX_E1000=y
Expand Down Expand Up @@ -71,6 +65,13 @@ export CONFIG_TPM2_TOOLS=y
export CONFIG_PRIMARY_KEY_TYPE=ecc
#TPM1 requirements
#export CONFIG_TPM=y
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
14 changes: 7 additions & 7 deletions boards/novacustom_nv4x_adl/novacustom_nv4x_adl.config
Original file line number Diff line number Diff line change
Expand Up @@ -8,12 +8,6 @@ export CONFIG_LINUX_VERSION=6.1.8
CONFIG_COREBOOT_CONFIG=config/coreboot-novacustom_nv4x_adl.config
CONFIG_LINUX_CONFIG=config/linux-novacustom-common.config

#Enable DEBUG output
#export CONFIG_DEBUG_OUTPUT=y
#export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=y
#Enable TPM2 pcap output under /tmp
#export CONFIG_TPM2_CAPTURE_PCAP=y

#On-demand hardware support (modules.cpio)
CONFIG_LINUX_USB=y
CONFIG_LINUX_E1000=y
Expand Down Expand Up @@ -67,11 +61,17 @@ export CONFIG_TPM2_TOOLS=y
export CONFIG_PRIMARY_KEY_TYPE=ecc
#TPM1 requirements
#export CONFIG_TPM=y
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
export CONFIG_BOOT_KERNEL_ADD=""
export CONFIG_BOOT_KERNEL_REMOVE="intel_iommu=on intel_iommu=igfx_off"
export CONFIG_BOARD_NAME="NovaCustom NV4x 12th Gen"
export CONFIG_FLASH_OPTIONS="flashprog --progress --programmer internal"
export CONFIG_AUTO_BOOT_TIMEOUT=5
Original file line number Diff line number Diff line change
Expand Up @@ -13,10 +13,6 @@ export CONFIG_LINUX_VERSION=6.1.8
CONFIG_COREBOOT_CONFIG=config/coreboot-optiplex-7019_9010-maximized.config
CONFIG_LINUX_CONFIG=config/linux-x230-maximized.config

#Enable DEBUG output
#export CONFIG_DEBUG_OUTPUT=y
#export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=y

#Additional hardware support
CONFIG_LINUX_USB=y
CONFIG_LINUX_E1000E=y
Expand Down Expand Up @@ -74,6 +70,13 @@ export CONFIG_AUTO_BOOT_TIMEOUT=5
#export CONFIG_PRIMARY_KEY_TYPE=ecc
#TPM1 requirements
export CONFIG_TPM=y
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -13,10 +13,6 @@ export CONFIG_LINUX_VERSION=6.1.8
CONFIG_COREBOOT_CONFIG=config/coreboot-optiplex-7019_9010-maximized.config
CONFIG_LINUX_CONFIG=config/linux-x230-maximized.config

#Enable DEBUG output
#export CONFIG_DEBUG_OUTPUT=y
#export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=y

#Additional hardware support
CONFIG_LINUX_USB=y
CONFIG_LINUX_E1000E=y
Expand Down Expand Up @@ -74,6 +70,13 @@ export CONFIG_AUTO_BOOT_TIMEOUT=5
#export CONFIG_PRIMARY_KEY_TYPE=ecc
#TPM1 requirements
export CONFIG_TPM=y
#Enable DEBUG output
export CONFIG_DEBUG_OUTPUT=n
export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=n
#Enable TPM2 pcap output under /tmp
export CONFIG_TPM2_CAPTURE_PCAP=n
#Enable quiet mode: technical information logged under /tmp/debug.log
export CONFIG_QUIET_MODE=y
export CONFIG_BOOTSCRIPT=/bin/gui-init
export CONFIG_BOOT_REQ_HASH=n
export CONFIG_BOOT_REQ_ROLLBACK=n
Expand Down
Loading