talos-petitboot/lib, branch master

ui/ncurses: Add preboot check option in the config screen

2020-01-25T03:54:27+00:00

Petitboot might run some checks to validate the kernel images before call the kexec load. This patch adds both 'preboot check' option in the config UI screen and a NVRAM variable 'petitboot,preboot-check' to make the user choice persistent. The 'preboot check' is enabled by default. The 'petitboot,preboot-check' is created on NVRAM only when 'preboot check' is disabled by the user. NVRAM property changed to preboot-check, small label changes and help text added by Jeremy Kerr . Signed-off-by: Maxiwell S. Garcia Signed-off-by: Jeremy Kerr

protocol,types: Add secure & trusted boot state to system info

2020-01-23T01:02:43+00:00

Add state of secure & trusted boot to struct system_info: - fw_measurement: whether the firmware has been measured - fw_enforcing: whether the firmware has been authenticated - os_enforcing: whether the boot payload will be authenticated Signed-off-by: Jeremy Kerr

lib/types: consolidate struct system_info layout with serialised version

2020-01-23T01:02:43+00:00

We currently serialise the BMC MAC at the end of a system info message, so update struct system_info to suit. Signed-off-by: Jeremy Kerr

lib/pb-protocol: fix ordering of system info length calculation

2020-01-23T01:02:43+00:00

... to match the definition of struct system_info. Signed-off-by: Jeremy Kerr

Various fixups and checks to make scan-build happy

2019-05-30T05:23:15+00:00

Signed-off-by: Samuel Mendoza-Jonas

lib: Add AUTH_MSG_DECRYPT

2019-03-05T20:54:10+00:00

Extend the auth_message struct to support the AUTH_MSG_DECRYPT operation, allowing the existing authentications methods to be used for passing a disk password from the UI to pb-discover. In addition add DEVICE_TYPE_LUKS to identify encrypted disk devices. Signed-off-by: Samuel Mendoza-Jonas

lib/process: Add option to pipe to process stdin

2019-03-05T20:54:10+00:00

If pipe_stdin exists, create a second pipe to write to the child process's STDIN. This allows Petitboot to pipe information to a process, for example piping a LUKS password to cryptsetup. Signed-off-by: Samuel Mendoza-Jonas

lib/system: Add cryptsetup utility

2019-03-05T20:54:10+00:00

Signed-off-by: Samuel Mendoza-Jonas

lib/url: Include port in pb_url_to_string()

2019-02-01T00:07:50+00:00

And include a pxe-parser test which uses a port in the path prefix to exercise this. This could cause PXE discovery failures if parameters such as pathprefix included a port in the URL. Signed-off-by: Samuel Mendoza-Jonas

ui/ncurses: Add option to clear IPMI boot mailbox

2018-12-13T00:26:17+00:00

If there is an IPMI boot mailbox configuration present display a message in the System Configuration screen and provide the option to clear the mailbox. Signed-off-by: Samuel Mendoza-Jonas