g/librem14-coreboot-grub-qubes
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Readme.md syntax

Browse Source
This commit is contained in:
Giulio 2022-01-08 17:20:39 +01:00
parent 968cfce6e6
commit 4f36d06f57
1 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
README.md
View File

@ -53,25 +53,25 @@ Data loss is extremely probable and firmware corruption is rare but not impossib
* Run `mkpassword.sh` to generate a Grub2 password
* If desired, change the background image for grub in `resources/background.jpg`. It must be a `1920*1080` JPG of size below 300KB.
### Build coreboot+Grub2 (Step 3)
#### Build coreboot+Grub2 (Step 3)
* Run `build.sh` as root and check that it completes successfully
*If `build.sh` fails, stop here. It does not make any sense to proceed without a valid firmware image*
### Encrypt /boot (Step 4)
#### Encrypt /boot (Step 4)
* Run `encryptboot.sh /dev/sdX` as root. The parameter indicates the target device noted down at Step 1.
*If `encryptboot.sh` fails stop here. It does not make any sense to flash coreboot+Grub2 if it is unable to properly boot.*
### Flash the firmware (Step 5)
#### Flash the firmware (Step 5)
* Run `flash.sh` as root.
*If `flash.sh` fails, do not reboot or turn off your computer. If you believe the failure left your firmware in an unknown state, run `recover.sh`*
### Boot into Qubes and set update hooks (Step 6)
#### Boot into Qubes and set update hooks (Step 6)
* Run the following command in `dom0`
@ -80,15 +80,15 @@ Data loss is extremely probable and firmware corruption is rare but not impossib
* Copy `resources/00-kernel-xen-symlink.conf` from this repository to `dom0` `/etc/dnf/plugins/post-transaction-actions.d/00-kernel-xen-symlink.conf`
Since editing `grub.cfg` requires a re flash, that we would like to avoid, the supplied configuration files boots qubes using some symlinks:
* /boot/vmlinuz-latest
* /boot/initramfs-latest
* /boot/xen-latest-latest
* `/boot/vmlinuz-latest`
* `/boot/initramfs-latest`
* `/boot/xen-latest-latest`
Since those names are not standard, in order to be able to update Qubes Linux Kernel and Xen without manual intervention, the aforementioned procedure creates a post transaction hook for `dnf` that automatically updates those symlinks.
### Tun on hardware write protection (Step 7)
### Add glitter to screws and joints (Step 8)
#### Tun on hardware write protection (Step 7)
#### Add glitter to screws and joints (Step 8)
### Community
### References
* [Purism Forum Thread](https://forums.puri.sm/t/coreboot-with-grub-payload/)
* [Qubes Forum Thread]()