Compare commits

...

3 Commits

Author SHA1 Message Date
Lance Vick a50d38a8a5
force --no-cache in reproduce mode 2024-08-03 15:23:49 -07:00
Lance Vick 286a2b5f37
add docs for writing media 2024-08-03 09:17:35 -07:00
Lance Vick 8dcd8df5ef
release: 2024.8.0 2024-08-02 22:17:41 -07:00
5 changed files with 26 additions and 2 deletions

View File

@ -9,6 +9,7 @@ export
## Use env vars from latest release when reproducing ## Use env vars from latest release when reproducing
ifdef REPRODUCE ifdef REPRODUCE
include dist/release.env include dist/release.env
NO_CACHE := --no-cache
export export
endif endif
@ -30,6 +31,7 @@ out/airgap.iso: Containerfile $(shell git ls-files rootfs)
--build-arg GIT_AUTHOR="$(GIT_AUTHOR)" \ --build-arg GIT_AUTHOR="$(GIT_AUTHOR)" \
--build-arg GIT_KEY="$(GIT_KEY)" \ --build-arg GIT_KEY="$(GIT_KEY)" \
--build-arg GIT_TIMESTAMP="$(GIT_TIMESTAMP)" \ --build-arg GIT_TIMESTAMP="$(GIT_TIMESTAMP)" \
$(NO_CACHE) \
-f Containerfile \ -f Containerfile \
. .

View File

@ -66,6 +66,18 @@ make attest
make sign make sign
``` ```
## Provisioning ##
1. Write airgap.iso to CD-ROM or SD Card
a. `dd if=out/airgap.iso of=/dev/sda bs=1M conv=sync status=progress`
b. `cdrecord out/airgap.iso`
2. Verify media still produces expected hash
```
sha256sum out/airgap.iso
head -c $(stat -c '%s' airgap.iso) /dev/sda | sha256sum
```
## Setup ## ## Setup ##
Assumes target is running Pureboot or Coreboot/heads Assumes target is running Pureboot or Coreboot/heads

BIN
dist/airgap.iso (Stored with Git LFS) vendored Normal file

Binary file not shown.

2
dist/manifest.txt vendored Normal file
View File

@ -0,0 +1,2 @@
18df33fc5e787057004f0783cbd40f9a808c67943d7a53b7c20cd7b92f6bf2bf airgap.iso
ec5912ec6bafc7c9a61e3ecee440485c249a57dca1aa1cc2ac15dc13e682875b release.env

5
dist/release.env vendored Normal file
View File

@ -0,0 +1,5 @@
VERSION=2024.8.0
GIT_REF=74bf27bc6601d4f3f0d22c0f854594b854e893d0
GIT_AUTHOR=Lance R. Vick
GIT_KEY=6B61ECD76088748C70590D55E90A401336C8AAA9
GIT_TIMESTAMP=2024-08-02 22:15:34 -0700