Novacustom nv4x adl heads v0.9.2 rc2#14

Open

filipleple wants to merge 759 commits intomasterfrom

novacustom_nv4x_adl_heads_v0.9.2

This pull request is big! We're only showing the most recent 250 commits

Commits on Dec 21, 2024

WiP seal-hotp: customize message to be GPG Admin PIN or Secure App PIN
tlaurion
committed
hotp-verification patches: Use https://github.com/Nitrokey/nitrokey-hotp-verification/pull/43 instead of https://github.com/Nitrokey/nitrokey-hotp-verification/pull/46 for hotp-verification info pa…
tlaurion
committed
oem-factory-reset+seal-hotp nk3 hotp-verification info adaptations
tlaurion
committed
hotp-verification: removed patches/hotp-verification-e9050e0c914e7a8ffef5d1c82a014e0e2bf79346 directory: waiting for https://github.com/Nitrokey/nitrokey-hotp-verification/pull/43 and https://githu…
tlaurion
committed
functions: Fix spelling of 'dictionaries'

JonathonHall-Purism
authored and
tlaurion
committed
functions: Simplify dictionary word selection

JonathonHall-Purism
authored and
tlaurion
committed
oem-factory-reset: Stop adding leading blank lines in 'passphrases' msg

JonathonHall-Purism
authored and
tlaurion
committed
patches/hotp-verification-*/46.patch : readd https://github.com/Nitrokey/nitrokey-hotp-verification/pull/46 so that this PR can be tested and reviewed from OEM Factory Reset/User Re-Ownership persp…
tlaurion
committed
WiP: staging changes including https://github.com/linuxboot/heads/pull/1850 https://github.com/Nitrokey/nitrokey-hotp-verification/pull/43 and https://github.com/Nitrokey/nitrokey-hotp-verification…
tlaurion
committed
WiP: staging changes (TPM1 regression fixes for LOG/DEBUG on quiet mode)
tlaurion
committed
WiP: staging changes
tlaurion
committed
Bump hotp-verification to version 1.7, remove patches: contains info fixes and reset fixes so that oem-factory-reset can reset secrets app PIN
tlaurion
committed
WiP: staging changes
tlaurion
committed
Turn some info on default boot into LOGged info, LOG might go out forever if not pertinent to most?
tlaurion
committed
WiP: staging changes, no more tpm output. Next warn /boot changed because htop counter and primary handle until removed outside of this PR
tlaurion
committed
WiP: staging changes, warn loud and clear of weak security posture by using weak OEM defaults provisioned secrets
tlaurion
committed
WiP: staging changes, refusing to fight against tools helping me, formatting changed. sign after tpm-reset now to work around primary handle issue.
tlaurion
committed
hot-verification: bump to 1.7+ unrelease patchset https://github.com/Nitrokey/nitrokey-hotp-verification/pull/51
tlaurion
committed
config-gui.sh: Add quiet mode toggle, which turns off debug+tracing if enabled, and where enabling debug+tracing disables Quiet mode
tlaurion
committed
Deprecate ash in favor of bash shell; /etc/ash_functions: move /etc/ash_functions under /etc/functions, replace TRACE calls by TRACE_FUNC, remove xx30-flash.init
tlaurion
committed
init+cbfs-init: refactor and explain why quiet mode cannot suppress measurements of cbfs-init extracted+measured TPM stuff if not in board config
tlaurion
committed
DEBUG: inform that output will be both in dmesg and on console from where that measure is enforced in code
tlaurion
committed
init: some more comments in code per review
tlaurion
committed
seal-totp: contextualize qr code output for manual input of those without qr scanner app in mobile phone
tlaurion
committed
kexec-select-boot+kexec-save-default: Quiet mode; remove last rollback counters printed to console
tlaurion
committed
init: Quiet mode enablement output string modified; tell users having enabled it through Configuration Settings that earlier suppression requires enabling through board config
tlaurion
committed
novacustom_nv4x_adl/novacustom_nv4x_adl.config : add quiet mode for real hardware recording in PR, will comment and generalize in next commit to all maintained boards, leaving this to be overriden …
tlaurion
committed
TPM2 primary handle debugging once more. Can't wait we get rid of this...
tlaurion
committed
kexec-save-default kexec-select-boot: fix primary handle once more. Can't wait we get rid of this... file must exist and not be empty, and hash output to console must not be silenced
tlaurion
committed
novacustom-nv4x board config: revert quiet mode enablement
tlaurion
committed
TO REVERT BEFORE MERGE: enable quiet mode in all boards and revert for qemu so only prod_quiet boards have quiet upon revert
tlaurion
committed
global: finalize switch from ash to bash shell, including recovery shell access
tlaurion
committed
oem-factory-reset: remove duplicate output 'Checking for USB Security dongle...'
tlaurion
committed
initrd/bin/kexec-select-boot: clarify that TPM2 primary handle HASH is created upon setting default boot (was not clear)
tlaurion
committed
init: warn user that if CONFIG_QUIET_MODE was enabled in board config at build time but disabled through Configuration Settings applied override, early measurement output got suppressed
tlaurion
committed
initrd/init: Delete outdated comment about ash

JonathonHall-Purism
authored and
tlaurion
committed
etc/functions: Fix SINK_LOG blank lines, add more dev doc

JonathonHall-Purism
authored and
tlaurion
committed
tpmr: Use SINK_LOG rather than temp file, avoid doubled log output

JonathonHall-Purism
authored and
tlaurion
committed
tpmr: Don't continue blindly if a TPM reset step fails

JonathonHall-Purism
authored and
tlaurion
committed
seal-totp: Print plain secret instead of URL for manual entry

JonathonHall-Purism
authored and
tlaurion
committed
config-gui.sh: Combine quiet mode / debug output to one output setting

JonathonHall-Purism
authored and
tlaurion
committed
init: clarify origin of quiet mode once more after merge conflict resolution
tlaurion
committed
Revert "TO REVERT BEFORE MERGE: enable quiet mode in all boards and revert for qemu so only prod_quiet boards have quiet upon revert"
tlaurion
committed
qemu-*-prod_quiet board configs: move debug(n)+tracing(n)+pcap(n)+quiet(y) just prior of gui-init to attempt to unify to all boards
tlaurion
committed
all maintained boards: add debug(n)+tracing(n)+pcap(n)+quiet(y) just prior of bootscript to unify to all boards
tlaurion
committed
tpmr: check for CONFIG_TPM2_CAPTURE_PCAP=y to export TPM comms under /tmp/tpm0.pcap (not just check for existence of CONFIG_TPM2_CAPTURE_PCAP under env)
tlaurion
committed
initrd/bin/seal-hotpkey: fix regression of hotp_verification 1.7+ version bump output parsing for <nk3
tlaurion
committed
seal-hotpkey: change warning when default GPG Admin PIN/Secrets app PIN is detected
tlaurion
committed
TODOs: remove no more relevant ones code per review
tlaurion
committed

Commits on Jan 9, 2025

functions: remove DO_WITH_DEBUG call for kexec-parse-boot which redirects output to file used to show boot options in GUI
tlaurion
committed

Commits on Jan 10, 2025

modules/coreboot: bump Dasharo fork for 96GB boot time fix
mkopec
committed

Commits on Jan 13, 2025

Commits on Jan 15, 2025

Commits on Jan 16, 2025

Commits on Jan 17, 2025

Commits on Jan 21, 2025

Commits on Jan 22, 2025

Commits on Jan 24, 2025

novacustom_nv4x_adl -> novacustom-nv4x_adl consistent NovaCustom board naming scheme from now on
tlaurion
committed

Commits on Jan 30, 2025

Merge pull request #1899 from tlaurion/unify_nv41_with_other_novacustom_board_name_scheme
tlaurion
authored

Commits on Feb 3, 2025

non-hotp boards: skip Secrets App reset with hotp_verification if binary doesn't exit
tlaurion
committed

Commits on Feb 4, 2025

Merge pull request #1903 from tlaurion/BUGFIX_non_hotp_nk3_regression_fix
tlaurion
authored

Commits on Feb 11, 2025

Commits on Feb 12, 2025

Commits on Feb 14, 2025

Commits on Feb 18, 2025

Commits on Feb 19, 2025

Commits on Feb 20, 2025

Commits on Feb 21, 2025

Commits on Feb 22, 2025

Commits on Feb 23, 2025

properly escape % chars in format string to display battery status
gaspar-ilom
committed

Commits on Feb 24, 2025

Commits on Feb 25, 2025

Commits on Feb 26, 2025

refactor printing of battery state to confuse less users
gaspar-ilom
committed

Commits on Feb 27, 2025

Commits on Feb 28, 2025

add documentation for tb.bin Thunderbolt flashing on the T480
gaspar-ilom
committed

Commits on Mar 2, 2025

Commits on Mar 3, 2025

t480: move to unmaintained, remove t480 from circleci. Upstream will need to fix thermal codepath: as of now its either other thinkpads or t480. Not good
tlaurion
committed

Commits on Mar 9, 2025

rename patches in correct order to prepare for more
gaspar-ilom
committed

Commits on Mar 10, 2025

Commits on Mar 11, 2025

Merge pull request #1908 from tlaurion/coreboot_bump_2412
tlaurion
authored

Commits on Mar 12, 2025

Commits on Mar 24, 2025

bugfix: readd x230-hotp-maximized board build in CircleCI (was dropped because replaced by t480-hotp-maximized by error)
tlaurion
committed

Commits on Mar 25, 2025

Merge pull request #1938 from tlaurion/bugfix_circleci-bring_back_x230-hotp-maximized
tlaurion
authored

Commits on Apr 3, 2025

Commits on Apr 10, 2025

Commits on Apr 11, 2025

Commits on Apr 12, 2025

Makefile: unify console output for unique patch application vs multiple ones under patches/*
tlaurion
committed

Commits on Apr 13, 2025

Commits on Apr 16, 2025

Commits on Apr 17, 2025

patches/coreboot-24.12/0010-cbmem_tpm-clear_whole_log_on_creation.patch: readd missing uptream cbmem patch for TPM 1.2
tlaurion
committed

Commits on Apr 18, 2025

Merge pull request #1959 from tlaurion/readd_cbmem_missing_patch_from_upstream
tlaurion
authored

Commits on Apr 24, 2025

Commits on Apr 25, 2025

xx20 (x220/t420): explicitely deactivate CONFIG_KBD (loadkeys + keyboard keymaps) for those boards with insufficient SPI space (8MB)
tlaurion
committed

Commits on Apr 27, 2025

fix change passphrase
gaspar-ilom
committed

Commits on Apr 28, 2025

Commits on May 2, 2025

Commits on May 5, 2025

Commits on May 12, 2025

Commits on May 21, 2025

site-local/config: bump up to v0.9.2
filipleple
committed