2a109c0121
flake.lock: Update
...
Flake lock file updates:
• Updated input 'flake-parts':
'github:hercules-ci/flake-parts/006c75898cf814ef9497252b022e91c946ba8e17' (2023-05-08)
→ 'github:hercules-ci/flake-parts/8e8d955c22df93dbe24f19ea04f47a74adbdc5ec' (2023-07-04)
• Updated input 'flake-utils':
'github:numtide/flake-utils/cfacdce06f30d2b68473a46042957675eebb3401' (2023-04-11)
→ 'github:numtide/flake-utils/919d646de7be200f3bf08cb76ae1f09402b6f9b4' (2023-07-11)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/794a24afefde85c3e9b533443c4c73cd871f9e3a' (2023-05-26)
→ 'github:NixOS/nixpkgs/17dd4c92ee12de80a1fe86ea30be723e4e06cd00' (2023-07-20)
• Updated input 'pre-commit-hooks-nix':
'github:cachix/pre-commit-hooks.nix/61e567d6497bc9556f391faebe5e410e6623217f' (2023-05-23)
→ 'github:cachix/pre-commit-hooks.nix/eb433bff05b285258be76513add6f6c57b441775' (2023-07-18)
• Updated input 'pre-commit-hooks-nix/nixpkgs-stable':
'github:NixOS/nixpkgs/9b8e5abb18324c7fe9f07cb100c3cd4a29cda8b8' (2023-03-15)
→ 'github:NixOS/nixpkgs/c37ca420157f4abc31e26f436c1145f8951ff373' (2023-06-03)
2023-07-20 22:42:22 +02:00
bf82f823e1
Merge pull request #211 from nix-community/docs-flake
...
docs: suggest to use 0.3.0 tagged release of lanzaboote rather than master
2023-07-20 11:30:16 +02:00
aa2cb467da
docs: suggest to use 0.3.0 tagged release of lanzaboote rather than master
...
This is to avoid people relying on dangerous development branches.
Retake of #207…
2023-07-20 10:48:02 +02:00
85420159e7
Merge pull request #210 from nix-community/revert-207-update/docs
...
Revert "docs: suggest to track released versions rather than master "
2023-07-20 10:35:10 +02:00
0dbcd0ec1a
Revert "docs: suggest to track released versions rather than master "
2023-07-20 10:34:20 +02:00
78f00a288f
Merge pull request #209 from nix-community/update-all-but-goblin
...
Update all dependencies besides goblin
2023-07-20 01:41:52 +02:00
9cceec4008
fix(deps): update all dependencies
2023-07-20 01:27:43 +02:00
bfc8826663
Merge pull request #208 from nix-community/flake/cache
...
flake: offer nix-community cache as a suggested substituter
2023-07-19 21:49:42 +02:00
4dc0c2464d
Merge pull request #207 from nix-community/update/docs
...
docs: suggest to track released versions rather than master
2023-07-19 21:47:50 +02:00
434ee97ab3
flake: offer nix-community cache as a suggested substituter
...
As we use Hercules CI with nix-community builder, our CI sends the stuff there
all the time.
Now, let's make everyone benefit from it.
2023-07-19 21:42:27 +02:00
d4131e0c65
docs: suggest to track released versions rather than master for the flake setup
...
The flake setup previously suggested master implicitly,
we use the latest known release.
2023-07-19 21:39:50 +02:00
c758cdad46
Merge pull request #201 from Janik-Haag/master
...
Further updates to QUICK_START.md
2023-06-18 23:45:07 +02:00
d791fc5c35
remove QUICK_START.md sharp-edge
2023-06-18 15:50:33 +02:00
9044916b9e
Merge pull request #200 from Janik-Haag/master
...
update QUICK_START.md bootspec
2023-06-18 15:36:11 +02:00
19a7312462
remove QUICK_START.md bootspec section
2023-06-17 16:51:00 +02:00
823ad6b70b
Merge pull request #198 from SuperSandro2000/fix-eval
...
Fix eval when aliases are disabled
2023-06-13 23:47:14 +02:00
7777777700
Fix eval when aliases are disabled
2023-06-13 19:31:50 +02:00
59e3ebb19f
Merge pull request #147 from nix-community/nixpkgs-infrastructure
...
project: move to nixpkgs Rust infrastructure
2023-06-12 10:40:16 +02:00
9f97a908e4
Merge pull request #195 from nix-community/mutually-exclusive-fat-thin-stubs
...
feat(stub): throw compile error in case of enabling fat and thin feat…
2023-06-10 18:45:56 +02:00
b77ef07cec
project: perform clippy/rustfmt checking via a higher order derivation transformer
...
Instead of patching the derivation in-place via flags, we just have
a higher order function that takes the Rust package derivation and override it
into a Rustfmt / Clippy oriented derivation: it turns off checks and adds its
required dependencies.
2023-06-10 18:08:35 +02:00
63bbfe35d8
feat(stub): throw compile error in case of enabling fat and thin features
...
This is more helpful than a weird compilation error on borrow checking rules!
2023-06-10 18:06:50 +02:00
5b22893473
project: move to nixpkgs Rust infrastructure
...
This builds the stub and tool using `rustPlatform.buildRustPackage`
which features a stable Rust compiler, recent enough to support UEFI
targets.
In the future, it will rely on properly defined targets for UEFI in
nixpkgs.
2023-06-10 18:03:58 +02:00
45d04a45d3
Merge pull request #193 from nix-community/renovate/all
...
fix(deps): update all dependencies
2023-06-05 10:31:02 +02:00
3cae2f1c63
fix(deps): update all dependencies
2023-06-05 02:00:30 +00:00
e422970c1b
Merge pull request #192 from nix-community/upgrade/uefi
...
stub: upgrade to uefi-rs 0.22.0
2023-06-02 14:33:17 +02:00
88aeb61d85
stub: upgrade to uefi-rs 0.22.0
...
This upgrade is necessary to avoid borking boot on bad UEFI implementations.
2023-06-02 13:16:44 +02:00
da24357977
Merge pull request #182 from nix-community/fat-uki
...
stub: add fat variant
2023-06-01 22:43:53 +02:00
2e62c11bab
Merge pull request #191 from nix-community/renovate/all
...
fix(deps): update rust crate log to 0.4.18
2023-05-29 10:45:26 +02:00
f1d199d0b4
fix(deps): update rust crate log to 0.4.18
2023-05-29 01:38:08 +00:00
e9003f12e6
Merge pull request #189 from nix-community/update-state-of-upstreaming
...
docs: fixup stray ```
2023-05-28 00:52:36 +02:00
72b66bfc69
docs: fixup stray ```
2023-05-28 00:43:51 +02:00
e5bced9852
Merge pull request #188 from nix-community/update-state-of-upstreaming
...
docs: update upstreaming state
2023-05-28 00:43:04 +02:00
de80330ec4
docs: update upstreaming state
...
We now have bootspec enabled by default for 23.05+.
2023-05-28 00:39:31 +02:00
f641dcfc8b
Merge pull request #186 from erdnaxe/docs_update
...
docs: add precision about dbx and OptionROMs
2023-05-27 12:14:02 +02:00
b673e1b71f
docs: add precision about dbx and OptionROMs
2023-05-25 08:57:33 +02:00
7ecafb2947
stub: add fat variant
...
A compile time feature is introduced that allows to build "fat" stubs
that can be used to build "fat" UKIs. "fat" here means that the actual
kernel and initrd are embedded in the PE binary, not only the file path
and hash. This brings us one step closer to feature partiy with
systemd-stub and thus one step closer to replacing it fully. Such a
"fat" or "real" UKI is also interesting for image-based deployments of
NixOS.
2023-05-24 22:09:28 +02:00
dc52f0352d
Merge pull request #185 from nix-community/cleanup-flake
...
Cleanup flake
2023-05-24 10:32:41 +02:00
740f7f9314
flake: checkInputs -> nativeCheckInputs
...
Use nativeCheckInputs instead of checkInputs because it is more
semantically correct even if checkInputs works with Crane.
2023-05-24 01:08:58 +02:00
8e4de7892a
flake: add proper description
2023-05-24 01:08:32 +02:00
1f542a1eba
Merge pull request #184 from nix-community/improve-subprocess-errors
...
tool: improve command error messages
2023-05-24 00:44:36 +02:00
30ddfcd2ce
tool: improve command error messages
2023-05-24 00:17:11 +02:00
36adaf5a9e
Merge pull request #181 from nix-community/renovate/all
...
fix(deps): update all dependencies
2023-05-22 10:11:11 +02:00
5ecd73cdac
fix(deps): update all dependencies
2023-05-22 02:56:28 +00:00
f9681e3e23
Merge pull request #178 from nix-community/update/uefi-rs
...
deps: update to uefi-rs 0.21.0
2023-05-20 23:05:27 +02:00
c96299ea46
deps: update to uefi-rs 0.21.0
...
It simplifies our filesystem handling.
2023-05-20 23:05:15 +02:00
3fb74cfb53
Merge pull request #179 from nix-community/update/bootspec
...
tool(bootspec): remove boilerplate with newest bootspec
2023-05-20 22:01:55 +02:00
77f1279406
tool(bootspec): remove boilerplate with newest bootspec
2023-05-20 19:41:31 +02:00
7ed294c84d
Merge pull request #180 from nix-community/sync-packages-ver
...
chore: sync our crates version to latest tag
2023-05-19 00:36:31 +02:00
3a5e15f4ac
Merge pull request #167 from nix-community/sd-stub-tpm2
...
feat: minimal poc for TPM measurements à la sd-stub
2023-05-18 19:16:30 +02:00
f603e0c134
tests: support TPM2 + SecureBoot tests
...
Test that our measurements exposes a TPM PCR index in the userspace
through efivarfs.
2023-05-18 19:06:32 +02:00
nikstur