update readme with vanilla heads/pureboot setup steps
This commit is contained in:
parent
7dfb2882a6
commit
b2000a3f89
30
README.md
30
README.md
|
@ -61,12 +61,30 @@ internet with high integrity on the supply chain of the firmware and OS used.
|
||||||
|
|
||||||
## Setup ##
|
## Setup ##
|
||||||
|
|
||||||
1. Insert external Remote attestation key and signing key when prompted
|
Assumes target is running Pureboot or Coreboot/heads
|
||||||
2. Reboot and verify successful remote attestation
|
|
||||||
3. Boot to shell: Options -> Recovery Shell
|
1. Boot to shell: ```Options -> Recovery Shell```
|
||||||
4. Mount SD card
|
2. Mount SD card
|
||||||
5. Insert chosen GPG Smartcard device
|
```
|
||||||
6. Sign target iso ```gpg --armor --detach-sign airgap*.iso```
|
mount-usb
|
||||||
|
mount -o remount,rw /media
|
||||||
|
```
|
||||||
|
3. Insert chosen GPG Smartcard device
|
||||||
|
4. Initialize smartcard
|
||||||
|
```
|
||||||
|
gpg --card-status
|
||||||
|
```
|
||||||
|
5. Sign target iso
|
||||||
|
```
|
||||||
|
cd /media
|
||||||
|
gpg --armor --detach-sign airgap.iso
|
||||||
|
```
|
||||||
|
6. Unmount
|
||||||
|
```
|
||||||
|
cd
|
||||||
|
umount /media
|
||||||
|
sync
|
||||||
|
```
|
||||||
7. Reboot
|
7. Reboot
|
||||||
|
|
||||||
## Usage ##
|
## Usage ##
|
||||||
|
|
Loading…
Reference in New Issue