28bb93c5f3
nix: switch everything to crane and drop naersk
2022-11-28 14:01:35 +01:00
0a638970e7
lanzatool: enable specialisation
2022-11-27 12:01:53 +01:00
fffa7d6bfa
lanzatool: appease clippy
2022-11-26 23:19:08 +01:00
3c094ee5ff
flake.nix: remove some redundancies
2022-11-26 22:21:05 +01:00
5406e69b9a
lanzatool: prepare to enable clippy
...
This still needs work.
2022-11-26 19:16:31 +01:00
b37ffd19d6
nix: fix indentation of checks attribute
2022-11-26 19:16:31 +01:00
85de5d52d0
nix: build lanzatool with crane
2022-11-26 19:16:31 +01:00
95f596f4dc
lanzatool: add support for generations and correct naming of kernels a… ( #12 )
...
* lanzatool: add support for generations and correct naming of kerels and initrds
* test: use convert_to_esp(extract_bspec_attr(⋅)) for unsigned tests
* lanzatool: ryan is a B class engineer
Co-authored-by: nikstur@outlook.com
2022-11-26 03:14:21 +01:00
702a38398f
nix: remove remaining cruft from flakes.nix
2022-11-26 02:26:39 +01:00
46452f0e46
nix: drop wrapInitrd from flake.nix
2022-11-26 02:21:05 +01:00
691da44610
nix: rename lanzatoolBin to lanzatool-unwrapped
2022-11-26 02:17:34 +01:00
74b815512c
nix: remove qemuUefi wrapper
2022-11-26 02:17:34 +01:00
541275acae
nix: drop the stable Rust toolchain from the environment
...
... otherwise it messes with the unstable one we use for the UEFI
code.
2022-11-26 02:17:28 +01:00
9f65f75289
feature: support initrd secrets
2022-11-26 02:01:41 +01:00
c87b2a09dc
nix: fix lanzatool integration/merge mixup
2022-11-25 23:46:19 +01:00
dec7c06e6b
tests: test unsigned initrd/kernel either, plus some machinery for sb tests
2022-11-25 18:42:37 +01:00
91b8cb02e4
flake.nix: use nixosTest instead of importing file
2022-11-25 17:39:01 +01:00
cd2ef6181d
lanzatool: improve signer code
2022-11-25 13:07:04 +01:00
49519cb289
nixos: secureboot reached
2022-11-25 03:04:44 +01:00
e75d892964
nixos: disable it and adapt it
2022-11-24 17:09:51 +01:00
2148cb06ab
nixos: actually enable sb
2022-11-24 17:07:06 +01:00
ccdd02bf1c
nixos: add a lanzaboote module
...
- Wire up things with Bootspec & External bootloaders
- Introduce SecureBoot keys
2022-11-24 17:07:05 +01:00
c53477fbf5
nixos: add a lanzaboote module
2022-11-24 16:59:59 +01:00
1dfa7c7fc8
Fix flake name
2022-11-24 12:29:16 +01:00
521bf343f5
Use makeWrapper to wrap lanzatool
2022-11-24 12:05:46 +01:00
b555c18e83
lanzatool: add wrapper
2022-11-24 11:45:09 +01:00
10e516c148
Merge pull request #5 from blitz/magic-mk-shell
...
flake.nix: automagically use deps in shell with inputsFrom
2022-11-23 15:41:04 +01:00
60b269b69c
Add a script to wrap an initrd into an EFI application
2022-11-23 13:11:22 +01:00
dea1ab9798
Fix initrd-stub build
2022-11-23 13:05:19 +01:00
9567fa7f0e
Build tiny empty PE image as initrd carrier
2022-11-23 13:00:55 +01:00
5a6c05cf11
Pass on command line from UKI to Linux kernel
2022-11-23 12:11:20 +01:00
5b414bd20b
Remove stable Rust toolchain for now
2022-11-23 00:58:52 +01:00
4a90c19892
flake.nix: automagically use deps in shell with inputsFrom
2022-11-23 00:26:00 +01:00
aada596b8c
flake: add openssl for pki generation
2022-11-22 02:18:22 +01:00
f40199b7aa
Move Rust tools into a common directory
2022-11-22 01:53:40 +01:00
b4f670455a
Merge remote-tracking branch 'origin/lanzatool'
2022-11-22 01:48:53 +01:00
5dc82382e2
lanzatool: init
2022-11-22 01:29:16 +01:00
20e1bf7fc8
Set boot loader version
2022-11-22 01:01:11 +01:00
ed8509ce9d
Remove useless rec
2022-11-22 00:45:18 +01:00
afcbe7140e
Minimize shell environment
2022-11-22 00:44:14 +01:00
bcad59a20a
Move uefi-run into its own Nix file
2022-11-22 00:43:15 +01:00
0c013e77a7
Add crypto library
2022-11-21 16:03:58 +01:00
b10ee4d0d6
Make systemd boot the EFI binary
2022-11-21 15:36:39 +01:00
cd39fd3a6b
Initial import of Rust files
2022-11-21 12:31:23 +01:00
Julian Stecklina