Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-06-17 | remove documentary comments from partvi | Andrew Cady | |
2023-06-17 | "fix" efi booting with disgusting hack and out-of-repo binary | Andrew Cady | |
it turns out all that we need to do to make EFI booting work is to replace the BOOTX64.EFI file that is produced by GRUB's "grub-install" command with the version of that file from Ventoy's upstream source of the same file: <https://github.com/ValdikSS/Super-UEFIinSecureBoot-Disk/>. Ventoy claims that to be their source here: <https://github.com/ventoy/Ventoy/blob/master/DOC/BuildVentoyFromSource.txt> """ 5.10 UEFIinSecureBoot https://github.com/ValdikSS/Super-UEFIinSecureBoot-Disk/releases Super-UEFIinSecureBoot-Disk_minimal_v3.zip unzip it and get Super-UEFIinSecureBoot-Disk_minimal.img, extract the img by 7zip. INSTALL/EFI/BOOT/BOOTX64.EFI --> EFI/BOOT/BOOTX64.EFI SHA-256: 475552c7476ad45e42344eee8b30d44c264d200ac2468428aa86fc8795fb6e34 """ That SHA-256 matches what we have downloaded and are using. I have created a separate repo containing the code that pulls down the .zip file and extract the BOOTX64.EFI file from it. That code verifies the SHA-256 hash. It can be added as a sami.git submodule. This code is not usable without that file generated by that code. This commit should be amended with a git submodule added with that code too. | |||
2023-06-14 | fixup! experimental grub simplification | Andrew Cady | |
2023-06-13 | experimental grub simplification | Steven | |
2022-01-10 | switch to C ficlonerange instead of Python | Andrew Cady | |
2022-01-10 | partvi: show grub-install runtime | u | |
2021-03-13 | firstboot: do not attempt to eject samizdat medium when booting to ram | Andrew Cady | |
2021-03-12 | try to fix efi boot with alternative grub-install commandefi-test | Andrew Cady | |
2021-03-11 | initrd: umount /mnt/* before booting | Andrew Cady | |
2021-03-11 | calling umount slightly sooner is more correct | Andrew Cady | |
2021-03-03 | automatically make the boot medium ejectable | Andrew Cady | |
2021-03-02 | Fix to make the btrfs install method work. | Andrew Cady | |
Just figured this out. We must change the fsuid after removing the devices, because btrfs MODIFIES the READ-ONLY SEED DEVICES to mark them unavailable after when remove them from the read-write device. When we reboot with the UNMODIFIED, IMMUTABLE seed image, btrfs cannot handle the duplicate fsuid. We detect this situation (kind of) and call btrfstune -m to change the fsuid of the /dev/mapper/samizdatcrypt single device fs. Now it just works. It would be much better to call this on the booted system on the running rootfs, but btrfs can't, so we instead call it on the initrd mount time. A more proper fix might use the partition table to mark the partition as in need of 'btrfstune -m'. | |||
2021-03-02 | simplify samizdat-eject.sh | Andrew Cady | |
2021-03-02 | mkinitramfs-samizdat: use standard location for initrd by default | Andrew Cady | |
2021-03-02 | make-total-destroy: try to make device unbusy | Andrew Cady | |
2021-03-02 | initrd: improve console logging | Andrew Cady | |
2021-03-02 | Fix dynmenu restart error | Andrew Cady | |
Thanks https://bbs.archlinux.org/viewtopic.php?id=94780 libncurses should change error string from 'unknown' to '$TERM is unset'! | |||
2021-03-02 | initrd: do not autoboot again if first autoboot failed | Andrew Cady | |
2021-03-02 | initrd: improve terminal and error handling for menu | Andrew Cady | |
2021-03-02 | initrd: improve readability and robustness to recovery | Andrew Cady | |
The luks.secret is stored per block device, and any existing /dev/mapper/samizdatcrypt is removed before we try to create that device. This makes it more possible to recover from a failed menu-select from the emergency console. | |||
2021-03-02 | initrd: menu-select: robustness | Andrew Cady | |
Try to make menu-select slightly more robust to being run a second time after a failed run. | |||
2021-03-02 | partvi: do not rely on part image file to get size | Andrew Cady | |
When partvi writes directly to a boot medium, it shouldn't copy part files, because these involve copying the unused parts of the filesystems. Instead, it should create a new filesystem on the target and copy files into it. This change moves in that direction. | |||
2021-02-28 | ignore "btrfs device ready" failure | Andrew Cady | |
2021-02-28 | initrd fixes: calls to "btrfs device ready" | Andrew Cady | |
2021-02-27 | partvi: move all functions to top | Andrew Cady | |
2021-02-27 | partvi: avoid hard-coded "_build" | Andrew Cady | |
2021-02-27 | partvi: check that $GPG_INPUT_DIR is a directory | Andrew Cady | |
2021-02-25 | fixup! partvi: clarify code | Andrew Cady | |
2021-02-25 | partvi: clarify code | Andrew Cady | |
2021-02-25 | partvi: eliminate code duplication | Andrew Cady | |
2021-02-25 | use sfdisk default instead of calculating "last-lba" | Andrew Cady | |
2021-02-25 | Ignore failures from grub-install EFI run | Andrew Cady | |
The second call to grub-install, which installs an EFI bootloader, fails on this machine. No need to fail the whole process for that, since I am not using EFI. | |||
2021-02-25 | partvi: fixes related to key-only mode | Andrew Cady | |
fixed race condition in kpartx fix for sfdisk kernel reload ptable failure cleaned up some code duplication created make keymu target amended make clean target | |||
2021-02-23 | key-only mode for partvi; integrated partvi | Andrew Cady | |
These commands are available in sami: make upgrade make emu make key They use partvi. | |||
2021-02-23 | partvi: create key.img when $1=="key" | Andrew Cady | |
2021-02-23 | make key: qemu will use curses mode | Andrew Cady | |
2021-02-23 | boot menu: add shutdown option | Andrew Cady | |
2021-02-23 | mkinitramfs-samizdat: exit after fatal error | Andrew Cady | |
2021-02-23 | mkinitramfs-samizdat: correct /vmlinuz symlink | Andrew Cady | |
2021-01-21 | remove selfstrap from this archive, which should be installed from fsmgr | Andrew Cady | |
2021-01-19 | eatmydata for speed | Andrew Cady | |
2021-01-19 | implement more of the discoverable partition specification | Andrew Cady | |
2021-01-18 | hybrid mbr verified boots | Andrew Cady | |
2021-01-18 | hybrid mbr | Andrew Cady | |
2021-01-18 | ficlonerange.py | Andrew Cady | |
2021-01-18 | loads linux kernel, panics unpacking initrd | Andrew Cady | |
2021-01-18 | yes more | Andrew Cady | |
2021-01-18 | now it be really ficksed | Andrew Cady | |
2021-01-18 | working | Andrew Cady | |
2021-01-18 | this is the fix | Andrew Cady | |