Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

- Change loction in initramfs to /etc/ssl/certs/
- Use Lets Encrypt ISRC Root X1

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

This target builds an ISO including an initramfs including an
auto-launch script running the 'stmgr provision hostconfig'
command. There you can define the hostconfig settings via a
GUI and then write it to efivarfs.

While the stmgr sub command may have its purpose, the ISO does not.

To have QEMU preset with certain efi variables to test
host config auto-detection, see issue #186

.

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

The boot-part target was called by the iso target. Its job was:
- call the linux:kernel target to build the stboot image
- create an iso including the stboot image
- optionally include a host configuration

Since host configuration will not be added to the partition but
be part of the initramfs or some NVRAM, the boot-part target is
finally obsolete. The creation of the iso is pulled into the iso
target.

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

This includes removing the host config related flag.
The host config will be autodetected soon.

As intermediate step, only include it in the initramfs.
It is not planned to have the config inside the ISO, so removed
that part, too.

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Linus Nordberg authored Oct 24, 2022 and Jens Drenhaus committed Oct 25, 2022

1.19.1 was picked because Debian bullseye-backports have that version.

Keeping the ubuntu-18.04 on go1.17 to catch (some) breakage on 1.17.

Linus Nordberg authored Oct 24, 2022 and Jens Drenhaus committed Oct 24, 2022

Stolen from https://github.com/system-transparency/system-transparency/pull/190/

Linus Nordberg authored Oct 21, 2022 and Jens Drenhaus committed Oct 24, 2022

This unbreaks building with go versions higher than 1.15 or so.

The `-uroot-source` command line argument is needed in modern u-root,
see u-root/README.

Morten Linderud authored Oct 21, 2022 and Jens Drenhaus committed Oct 24, 2022

Allows us to supply LDFLAGS into the go install command. This is
practical to build binaries with embedded versions or other variables.

Signed-off-by: Morten Linderud <morten.linderud@mullvad.net>

Morten Linderud authored Oct 21, 2022 and Jens Drenhaus committed Oct 21, 2022

Signed-off-by: Morten Linderud <morten.linderud@mullvad.net>

Morten Linderud authored Aug 03, 2022 and Jens Drenhaus committed Oct 21, 2022

Signed-off-by: Morten Linderud <morten.linderud@mullvad.net>

Morten Linderud authored Aug 02, 2022 and Jens Drenhaus committed Oct 21, 2022

Issues like a missing `cpio` binary would go unnoticed in the pipeline.
Lets make theme explicit.

Signed-off-by: Morten Linderud <morten.linderud@mullvad.net>

Marcello Sylvester Bauer authored Jun 03, 2022 and Jens Drenhaus committed Jun 07, 2022

Remove remaining references to caching in network mode, since it is
not supported anymore.

Signed-off-by: Marcello Sylvester Bauer <sylv@sylv.io>

Signed-off-by: Marcello Sylvester Bauer <sylv@sylv.io>

Marcello Sylvester Bauer authored May 12, 2022 and Jens Drenhaus committed May 12, 2022

Signed-off-by: Marcello Sylvester Bauer <sylv@sylv.io>

Marcello Sylvester Bauer authored May 12, 2022 and Jens Drenhaus committed May 12, 2022

Checkout go repositories sequentially to prevent conflicts.
This change should fix the `fetch` target.

Signed-off-by: Marcello Sylvester Bauer <sylv@sylv.io>

Rasmus Dahlberg authored May 08, 2022 and Jens Drenhaus committed May 09, 2022

Default gateway should not be expressed with CIDR notation.  It is an IP
address, see example configuration as well as stboot/opts/hostcfg.go#L70.

Marcello Sylvester Bauer authored May 06, 2022 and Jens Drenhaus committed May 07, 2022

Add target to fetch build dependencies. In this way it is possible to
build installation targets without network access.

Signed-off-by: Marcello Sylvester Bauer <sylv@sylv.io>

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

Using stboot commit 4b208b7 introduces optimazations in parsing
of host configuration, security configuration etc. Further the
command line of stboot changed regarding logging.

Signed-off-by: Jens Drenhaus <jens.drenhaus@9elements.com>

* Introduce ST_HOST_CONFIG_MODE
* Prevent stboot argument conflict
* Update README

Signed-off-by: Marcello Sylvester Bauer <sylv@sylv.io>