Itxaka
2d238e7014
Enable the use of common sysexts ( #462 )
2025-04-14 15:42:20 +02:00
Itxaka
19a0c2d681
Add a UKI transition step ( #460 )
2025-04-09 18:48:49 +02:00
Itxaka
367ab5610e
Implement generic sysext management ( #459 )
2025-04-09 11:21:22 +02:00
Itxaka
d455c7f6ec
Restore Secureboot check
...
Something is missing from our implementation, which makes it break
Signed-off-by: Itxaka <itxaka@kairos.io >
2025-02-21 13:26:28 +01:00
Itxaka
7c9b6943a3
Bump sdk
...
Signed-off-by: Itxaka <itxaka@kairos.io >
2025-02-18 14:52:50 +01:00
Itxaka
b819f9fb5d
Adapt to kcrypt bump
...
Basically create a fake KairosLogger to pass to kcrypt
Signed-off-by: Itxaka <itxaka@kairos.io >
2025-02-18 14:48:44 +01:00
Itxaka
a597656fe0
Improve deps ( #431 )
2025-02-18 14:41:54 +01:00
Itxaka
3042aae185
2599 ( #336 )
2024-06-13 12:08:37 +02:00
Itxaka
4c4801cde3
Exit properly if we cannot unlock partitions ( #334 )
2024-06-11 16:51:33 +02:00
Itxaka
c9924a3205
Support copying sysextensions into final dir ( #330 )
2024-06-10 10:10:54 +02:00
Itxaka
a956ab361d
Do a better panic on uki with secureboot disabled ( #326 )
2024-05-30 09:35:32 +02:00
Itxaka
cbf38f553c
Use a pure golang pcr extend ( #286 )
2024-04-19 13:43:05 +02:00
Ettore Di Giacinto
d14a047aa6
fix(mount): call sync before/after operations ( #288 )
...
* fix(mount): call sync after mount ops
Signed-off-by: mudler <mudler@kairos.io >
* refactor(mount): replace calls wrapped with sync
Signed-off-by: mudler <mudler@kairos.io >
* be consistent
Signed-off-by: mudler <mudler@kairos.io >
* lint fixes
Signed-off-by: mudler <mudler@kairos.io >
---------
Signed-off-by: mudler <mudler@kairos.io >
2024-04-19 10:01:16 +00:00
Mauro Morales
d8671d1152
Check both pcrphase and pcrextend ( #279 )
...
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com >
2024-04-10 16:39:44 +02:00
Itxaka
c97a3ae559
Recover original 755 perms for dir creation
...
Signed-off-by: Itxaka <itxaka@kairos.io >
2024-04-10 11:22:15 +02:00
Itxaka
ade21d4663
Fix lint and new uki steps ( #274 )
...
* Fix lint and add new uki step
Make it simpler by dividing the actual base mounts and pivot into new
sysroot into two different steps
Signed-off-by: Itxaka <itxaka@kairos.io >
* Fix constant name and gosec issues
Signed-off-by: Itxaka <itxaka@kairos.io >
---------
Signed-off-by: Itxaka <itxaka@kairos.io >
2024-04-09 10:40:47 +02:00
Itxaka
b9fe50bf84
Add timeout wait for sysroot ( #278 )
2024-04-09 10:40:28 +02:00
Itxaka
266d06334f
Rework uki to pivot at start ( #271 )
...
* Rework uki to pivot at start
Signed-off-by: Itxaka <itxaka@kairos.io >
* Fix secureboot check
Signed-off-by: Itxaka <itxaka@kairos.io >
* debug
Signed-off-by: Itxaka <itxaka@kairos.io >
* Change order of initial stuff
first mount the barebone stuff and then do the movement
Signed-off-by: Itxaka <itxaka@kairos.io >
* Drop sleep
Signed-off-by: Itxaka <itxaka@kairos.io >
---------
Signed-off-by: Itxaka <itxaka@kairos.io >
2024-04-02 10:26:07 +00:00
Itxaka
94e643622a
Set autoreset sentinel ( #259 )
2024-03-22 13:21:31 +01:00
Itxaka
93f5cf5de6
Rework immucore ( #246 )
2024-03-20 11:48:51 +01:00
