From b2000a3f89d473bd5d85bdad802be1f4c2746528 Mon Sep 17 00:00:00 2001 From: "Lance R. Vick" Date: Mon, 2 Jan 2023 16:47:09 -0800 Subject: [PATCH] update readme with vanilla heads/pureboot setup steps --- README.md | 30 ++++++++++++++++++++++++------ 1 file changed, 24 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 0f327e4..a24bb4b 100644 --- a/README.md +++ b/README.md @@ -61,12 +61,30 @@ internet with high integrity on the supply chain of the firmware and OS used. ## Setup ## -1. Insert external Remote attestation key and signing key when prompted -2. Reboot and verify successful remote attestation -3. Boot to shell: Options -> Recovery Shell -4. Mount SD card -5. Insert chosen GPG Smartcard device -6. Sign target iso ```gpg --armor --detach-sign airgap*.iso``` +Assumes target is running Pureboot or Coreboot/heads + +1. Boot to shell: ```Options -> Recovery Shell``` +2. Mount SD card + ``` + mount-usb + mount -o remount,rw /media + ``` +3. Insert chosen GPG Smartcard device +4. Initialize smartcard + ``` + gpg --card-status + ``` +5. Sign target iso + ``` + cd /media + gpg --armor --detach-sign airgap.iso + ``` +6. Unmount + ``` + cd + umount /media + sync + ``` 7. Reboot ## Usage ##