OEM factory reset #606
OEM factory reset #606
Conversation
Add function to detect boot device. Start by checking CONFIG_BOOT_DEV, then iterate thru all bootable partitions. Check if partition is mountable, contains grub directory. Update CONFIG_BOOT_DEV and mount on /boot if successful. Signed-off-by: Matt DeVillier <[email protected]>
Add oem-factory-reset script which performs an unattended reset and configuration of the device's TPM, GPG security token, and boot device / boot selection. Signed-off-by: Matt DeVillier <[email protected]>
Add an OEM Factory Reset menu option, which performs an unattended reset and configuration of the device's TPM, GPG security token, and boot device / boot selection. Signed-off-by: Matt DeVillier <[email protected]>
superseded by newer version in main options menu Signed-off-by: Matt DeVillier <[email protected]>
Add a check to determine if first boot after flashing a cleaned ROM, and prompt user to run the OEM Factory Reset if so Signed-off-by: Matt DeVillier <[email protected]>
MrChromebox
force-pushed
the
oem-factory-reset
branch
from
36ada91 to
aab9004
Compare
|
Are we redoing piece by piece what was already done in #551? |
|
In this case the existing automated OEM reset wizard in the GPG menu still required a lot of intervention and prompts that weren't necessary so this PR removed the remaining prompts to make it completely non-interactive. Because it did more than just reset GPG (it also needed to re-sign files in /boot etc) it made more sense to move it up one menu as it impacted more than GPG. Other than that from my reading this is just a simplified and further automated form of what was already merged in a few months ago. |
|
I've tested this and it's much improved over the previous automated GPG reset function I wrote and handles edge cases better while also not bothering the user w/ unnecessary prompts. Merging. |
Add an improved OEM Factory reset function, which erases/resets the TPM and GPG security token, generates a new GPG key, signs the files in /boot and sets the default boot device / boot selection.
Add a new item in the main options menu for it, and remove the existing GPG reset function since it is superseded by this.
Add a function to detect a clean boot situation, and prompt the user to run the OEM factory reset.