forked from public/airgap
1
0
Fork 0
Commit Graph

165 Commits

Author SHA1 Message Date
Lance Vick 249e93bcce
overhaul update-packages to be faster, and save sha256 hash manifest of downloaded debs 2020-10-15 17:08:15 -07:00
Lance Vick 1badff2241
safer/simpler uid/gid mapping w/ reduced build privs 2020-10-15 16:26:28 -07:00
Lance Vick 8a2ac4b000
reduce/update build apt packages 2020-10-15 16:24:35 -07:00
Lance Vick 3873dd5e07
ensure uid:gid in iso are always set to 0 2020-10-14 23:00:54 -07:00
Lance Vick ed74b314a5
1.0.0rc10 2020-10-14 03:24:13 -07:00
Lance Vick 9894b08bcb
sort order of files packed into initramfs 2020-10-13 23:07:41 -07:00
Lance Vick e3bf233b34
1.0.0rc9 2020-10-11 18:35:55 -07:00
Lance Vick 13535c14bd
revert docker buildkit which seems to be buggy in docker < 19 2020-10-10 00:56:44 -07:00
Lance Vick de8b907bd4
1.0.0.rc8 2020-10-07 23:01:02 -07:00
Lance Vick 2fdac9efed
cleaned up, updated, and more reliable package updates 2020-10-07 18:24:58 -07:00
Lance Vick ba8673c4f2
working measured boot from sd card without an internal disk present 2020-09-09 18:20:15 -07:00
Lance Vick 51a134f00f
make patches optional 2020-09-09 04:07:35 -07:00
Lance Vick 3d631420b1
fix patching on repeated builds 2020-08-12 22:54:32 -07:00
Lance Vick 244caf5b6d
allow checking out expired apt packages 2020-08-12 22:26:22 -07:00
Lance Vick 58ff50f779
cleanup console output 2020-08-12 22:26:07 -07:00
Lance Vick 4e66c50835
Name change and boot-from-usb on Heads 2020-08-12 22:25:41 -07:00
Lance Vick d4b60d191d
working autorun stack 2020-08-11 20:23:25 -07:00
Lance Vick db3ade30d4
document use of 'audit' target when releasing 2020-07-27 11:23:26 -07:00
Lance Vick 9d5ee9fc7e
Sign release 1.0.0rc6 2020-07-25 17:53:59 -07:00
Lance Vick 375bda1a39
allow multiple detached signatures named by fingerprint 2020-07-25 17:53:15 -07:00
Lance Vick 663fe8f750
1.0.0rc6 2020-07-25 13:10:35 -07:00
Lance Vick 349399f46b
fix verify hash path 2020-07-24 18:00:07 -07:00
Lance Vick 0e2c98c758
1.0.0rc5 2020-07-24 17:57:55 -07:00
Lance Vick 1ad50ac4c8
add build container cve reporting 2020-07-24 17:51:05 -07:00
Lance Vick bd5d947f1e
use main mirrors for pinned packages, then try snapshots 2020-07-24 13:19:34 -07:00
Lance Vick 826d60556d
improved audit output with CVE reporting 2020-07-24 13:18:53 -07:00
Lance Vick 1642587af3
bump packages/sources and increase timeout 2020-07-24 11:09:29 -07:00
Lance Vick b54b103009
add audit target for collecting legal/cve details 2020-07-24 03:08:28 -07:00
Lance Vick 2d00082279
updated hash format: 1.0.0rc4 2020-07-24 03:07:39 -07:00
Matt Weber 875c5c891f
patch: add cpe-info make target for buildroot 2020-07-24 03:07:08 -07:00
Lance Vick a5c4d51df1
1.0.0rc4 2020-07-23 14:19:43 -07:00
Lance Vick ba24e9f786
automate snapshot date bump 2020-07-23 04:12:31 -07:00
Lance Vick f806367aa6
tested knon working snapshot date 2020-07-23 04:07:35 -07:00
Lance Vick 22c9edfa67
lock debian sources to snapshots with auto retry 2020-07-23 01:33:05 -07:00
Lance Vick 25dcaab742
bump 1.0.0.rc3 hashes 2020-07-22 11:25:23 -07:00
Lance Vick 5622c52526
1.0.0rc3 2020-07-22 03:02:02 -07:00
Lance Vick ad107baf01
update package list 2020-07-22 02:45:25 -07:00
Lance Vick a465115327
1.0.0rc2 2020-07-21 03:45:00 -07:00
Lance Vick d35950c72f
Import firmware signing keychain from coreboot at boot 2020-07-20 19:59:18 -07:00
Lance Vick 01c292c828
overhaul docs to respect current state of affairs 2020-07-19 02:25:06 -07:00
Lance Vick ba361d3db1
1.0.0rc1 2020-07-19 01:32:26 -07:00
Lance Vick d48965252a
add release verification and signing 2020-07-19 01:31:10 -07:00
Lance Vick 4904c3f8d1
add proper clean script 2020-07-17 18:02:22 -07:00
Lance Vick c328c928ea
librem15v4 support + generic x86_64 for iso 2020-07-17 17:38:06 -07:00
Lance Vick 109ee0a86b
Only I can manage to typo ascii art and not notice all day 2020-07-16 22:48:27 -07:00
Lance Vick cf88d7ba72
embed build details into build as splash screen 2020-07-16 19:15:03 -07:00
Lance Vick bee4c289ca
implement keyboard layout selector in bootloader 2020-07-16 04:26:24 -07:00
Lance Vick 0a79141750
working usb, yubikeys, and some kernel hardening 2020-07-14 18:35:16 -07:00
Lance Vick 1888d6793e
Lock timestamps in iso metadata 2020-07-12 02:45:12 -07:00
Lance Vick a0606ab246
Deterministic iso support (on supported filesystems) 2020-07-11 16:08:30 -07:00