Commit Graph

16 Commits

Author SHA1 Message Date
Itxaka
c59c656fbe Add a UKI transition step
This help the transition between 3.3.x to 3.4.x by moving existing
sysexts to their new places and creating the expected links so it should
behave exactly like it was before

Signed-off-by: Itxaka <itxaka@kairos.io>
2025-04-09 16:39:44 +02:00
Itxaka
367ab5610e Implement generic sysext management (#459) 2025-04-09 11:21:22 +02:00
Itxaka
d455c7f6ec Restore Secureboot check
Something is missing from our implementation, which makes it break

Signed-off-by: Itxaka <itxaka@kairos.io>
2025-02-21 13:26:28 +01:00
Itxaka
b819f9fb5d Adapt to kcrypt bump
Basically create a fake KairosLogger to pass to kcrypt

Signed-off-by: Itxaka <itxaka@kairos.io>
2025-02-18 14:48:44 +01:00
Itxaka
a597656fe0 Improve deps (#431) 2025-02-18 14:41:54 +01:00
Itxaka
3042aae185 2599 (#336) 2024-06-13 12:08:37 +02:00
Itxaka
4c4801cde3 Exit properly if we cannot unlock partitions (#334) 2024-06-11 16:51:33 +02:00
Itxaka
c9924a3205 Support copying sysextensions into final dir (#330) 2024-06-10 10:10:54 +02:00
Itxaka
a956ab361d Do a better panic on uki with secureboot disabled (#326) 2024-05-30 09:35:32 +02:00
Itxaka
cbf38f553c Use a pure golang pcr extend (#286) 2024-04-19 13:43:05 +02:00
Ettore Di Giacinto
d14a047aa6 fix(mount): call sync before/after operations (#288)
* fix(mount): call sync after mount ops

Signed-off-by: mudler <mudler@kairos.io>

* refactor(mount): replace calls wrapped with sync

Signed-off-by: mudler <mudler@kairos.io>

* be consistent

Signed-off-by: mudler <mudler@kairos.io>

* lint fixes

Signed-off-by: mudler <mudler@kairos.io>

---------

Signed-off-by: mudler <mudler@kairos.io>
2024-04-19 10:01:16 +00:00
Mauro Morales
d8671d1152 Check both pcrphase and pcrextend (#279)
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
2024-04-10 16:39:44 +02:00
Itxaka
c97a3ae559 Recover original 755 perms for dir creation
Signed-off-by: Itxaka <itxaka@kairos.io>
2024-04-10 11:22:15 +02:00
Itxaka
ade21d4663 Fix lint and new uki steps (#274)
* Fix lint and add new uki step

Make it simpler by dividing the actual base mounts and pivot into new
sysroot into two different steps

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix constant name and gosec issues

Signed-off-by: Itxaka <itxaka@kairos.io>

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2024-04-09 10:40:47 +02:00
Itxaka
266d06334f Rework uki to pivot at start (#271)
* Rework uki to pivot at start

Signed-off-by: Itxaka <itxaka@kairos.io>

* Fix secureboot check

Signed-off-by: Itxaka <itxaka@kairos.io>

* debug

Signed-off-by: Itxaka <itxaka@kairos.io>

* Change order of initial stuff

first mount the barebone stuff and then do the movement

Signed-off-by: Itxaka <itxaka@kairos.io>

* Drop sleep

Signed-off-by: Itxaka <itxaka@kairos.io>

---------

Signed-off-by: Itxaka <itxaka@kairos.io>
2024-04-02 10:26:07 +00:00
Itxaka
93f5cf5de6 Rework immucore (#246) 2024-03-20 11:48:51 +01:00