min
/
lanzaboote
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
563 Commits 1 Branch 0 Tags 958 KiB
Commit Graph

563 Commits

Author SHA1 Message Date
Janne Heß c22352ca20
tool: Use mtime of the symlink rather than the target 
When using the target, this will always result in a timestamp from 1970
because the symlink points to the store.
 2023-04-24 11:57:34 +02:00
Janne Heß 979d25ee13
Revert "Merge pull request #139 from adtya/built_on_date" 
This reverts commit d751d13b0a, reversing
changes made to 7c55847aaf.
 2023-04-24 11:48:46 +02:00
renovate[bot] 2ecd951de1
fix(deps): update rust crate clap to 4.2.4 2023-04-24 01:08:24 +00:00
nikstur efff933460
Merge pull request #158 from nix-community/revert-warnlevel-malformed-gen 
tool: revert log level of malformed gens
 2023-04-23 23:44:07 +02:00
nikstur 8efc061e1d tool: add comment for log level of malformed gens 
The message about malformed generatiosn should semantically be a
warning. However, since users might have hundres of old and thus
malformed generations and can do little about it, this should remain a
debug message. This way the user is not spammed with no-op warnings
while still enabling debugging.
 2023-04-23 23:28:21 +02:00
nikstur 68d1928e3d Revert "tool: don't silently ignore generations" 
This reverts commit 4f182704e0.
 2023-04-23 23:27:32 +02:00
Julian Stecklina 9bf192bb79
Merge pull request #155 from nix-community/desaster-control 
Avoid Unbootable System on Bootspec Changes
 2023-04-23 15:29:18 +02:00
Julian Stecklina 4f182704e0 tool: don't silently ignore generations 2023-04-23 15:20:49 +02:00
Julian Stecklina be458e3385 tool: avoid creating unbootable system 
lzbt currently happily nukes all boot entries, if it can't parse any
bootspecs. With the upcoming incompatible bootspec change, this might
be a problem that's worth avoiding. :)

I changed lzbt to fail hard in case, it can't generate any boot
items.
 2023-04-23 15:17:32 +02:00
Julian Stecklina 385eced09d
Merge pull request #157 from Mic92/flake-compat 
flake: reduce number of dependencies
 2023-04-23 15:10:06 +02:00
Julian Stecklina 00743d97ba
Merge pull request #156 from nix-community/update-rust-overlay 
Bump Rust Overlay
 2023-04-23 15:05:56 +02:00
Jörg Thalheim 0e68a1dd3e flake: reduce number of dependencies 2023-04-23 11:55:09 +02:00
Julian Stecklina 02f7e25888 flake.lock: Update 
Flake lock file updates:

• Updated input 'rust-overlay':
    'github:oxalica/rust-overlay/45c2ed9dd1397526dad35fc867c43955d87f9f3f' (2023-04-10)
  → 'github:oxalica/rust-overlay/2c417c0460b788328220120c698630947547ee83' (2023-04-22)
 2023-04-22 17:11:34 +02:00
Julian Stecklina ce0e72a578
Merge pull request #151 from alois31/icache 
stub: implement `flush_instruction_cache` on i686 and AArch64
 2023-04-21 18:39:13 +02:00
Julian Stecklina ddd22a8f67
Merge branch 'master' into icache 2023-04-21 18:34:33 +02:00
Alois Wohlschlager ae401e4b18
stub: implement icache coherence on i686 and AArch64 
People reportedly want to compile the stub on i686 and AArch64
platforms for testing. Make compilation possible by providing proper
`make_instruction_cache_coherent` implementations on these platforms.
For x86 (just as x86_64), this is a no-op, because Intel made the
instruction cache coherent for compatibility with code that was written
before caches existed.
For AArch64, adapt the procedure from their manual to multiple
instructions.
 2023-04-21 18:00:14 +02:00
Julian Stecklina 9e6ea4feca
Merge pull request #152 from nix-community/renovate/all 
chore(deps): update all dependencies
 2023-04-17 18:24:31 +02:00
renovate[bot] b25e1b77d2
chore(deps): update all dependencies 2023-04-17 01:25:18 +00:00
Alois Wohlschlager 81e25ee5c3
stub: clarify instruction cache coherence 2023-04-16 16:17:50 +02:00
Ryan Lahfa 83a357eb7c
Merge pull request #149 from nix-community/rust-stable 
stub: make it compatible with a stable Rust compiler (≥ 1.68.x)
 2023-04-14 22:22:01 +02:00
Raito Bezarius 666b5e7169 stub: make it compatible with a stable Rust compiler (≥ 1.68.x) 2023-04-14 16:48:30 +02:00
Ryan Lahfa ed50448200
Merge pull request #141 from lilyinstarlight/fix/fwupd-efi 
nix: clean up fwupd-efi handling a little bit
 2023-04-12 18:40:49 +02:00
Julian Stecklina f0cc345caa flake.lock: Update 
Flake lock file updates:

• Updated input 'crane':
    'github:ipetkov/crane/2552a2d1ccf33d43259a9e00f93dbacb9e6d6bed' (2023-03-20)
  → 'github:ipetkov/crane/65d3f6a3970cd46bef5eedfd458300f72c56b3c5' (2023-04-04)
 2023-04-10 13:32:12 +02:00
Julian Stecklina 4555398821 flake.lock: Update 
Flake lock file updates:

• Updated input 'rust-overlay':
    'github:oxalica/rust-overlay/c680a0a4144bb0931f6cebd601a3978bbafc4f64' (2023-03-20)
  → 'github:oxalica/rust-overlay/45c2ed9dd1397526dad35fc867c43955d87f9f3f' (2023-04-10)
 2023-04-10 13:31:46 +02:00
Julian Stecklina 46dab00ba9 flake.lock: Update 
Flake lock file updates:

• Updated input 'pre-commit-hooks-nix':
    'github:cachix/pre-commit-hooks.nix/32b1dbedfd77892a6e375737ef04d8efba634e9e' (2023-03-16)
  → 'github:cachix/pre-commit-hooks.nix/2144d9ddcb550d6dce64a2b44facdc8c5ea2e28a' (2023-04-08)
 2023-04-10 13:31:16 +02:00
Julian Stecklina 3297ef13a7 flake.lock: Update 
Flake lock file updates:

• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/c13d60b89adea3dc20704c045ec4d50dd964d447' (2023-03-09)
  → 'github:hercules-ci/flake-parts/dcc36e45d054d7bb554c9cdab69093debd91a0b5' (2023-04-01)
• Updated input 'flake-parts/nixpkgs-lib':
    'github:NixOS/nixpkgs/130fa0baaa2b93ec45523fdcde942f6844ee9f6e?dir=lib' (2023-03-09)
  → 'github:NixOS/nixpkgs/e3652e0735fbec227f342712f180f4f21f0594f2?dir=lib' (2023-03-30)
 2023-04-10 13:30:45 +02:00
Julian Stecklina 2ee83b5d15 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/49966f2c7139521b1c84af4c76c72725e1eafd2e' (2023-03-19)
  → 'github:NixOS/nixpkgs/4fba351146e26d9e09d455687b75089ac50b9b13' (2023-04-10)
 2023-04-10 13:23:48 +02:00
Julian Stecklina e0005b077a
Merge pull request #145 from nix-community/renovate/all 
fix(deps): update all dependencies
 2023-04-09 22:55:22 +02:00
renovate[bot] 51017c0f40
fix(deps): update all dependencies 2023-04-09 20:27:07 +00:00
Julian Stecklina 5d3fbf10a6
Merge pull request #142 from Myaats/master 
tool: drop buggy condition for when to sign
 2023-04-09 22:20:46 +02:00
Julian Stecklina a7e0aba743 renovate: remove explicit lock file maintenance schedule 
... and enable dependency dashboard.
 2023-04-09 21:59:18 +02:00
Julian Stecklina d751d13b0a
Merge pull request #139 from adtya/built_on_date 
Use birth time instead of modify time for generation "built on" date
 2023-04-06 12:18:46 +02:00
Lily Foster 4066b0a894
nix: clean up fwupd-efi handling a little bit 2023-04-04 06:38:19 -04:00
Mats 223ab53d55 tool: drop buggy condition for when to sign 2023-03-30 23:53:24 +02:00
Adithya Nair 97874a2002
propagate error instead of unwrapping in tests 2023-03-22 11:19:12 +05:30
Adithya Nair 6a342a49a9
propagate error instead of unwrapping 2023-03-22 01:25:17 +05:30
Adithya Nair e033a2fcaf
replace mtime with birth time 2023-03-21 23:47:33 +05:30
Ryan Lahfa 7c55847aaf
Merge pull request #134 from kanashimia/hardcoding 
nixos-module: add settings key for the loader.conf
 2023-03-21 15:49:55 +01:00
Mia Kanashi ea5e2ba437 nixos-module: add settings key for the loader.conf 
This commit adds settings key for configuring systemd-boot to the lanzaboot
nixos module. The are couple of the default values that are set from the usual
nixos boot.loader.systemd-boot options, they are merged with the user defined
configuration.

This commit modifies default loader.conf to boot into the latest nixos
generation by default, for when you have other operating systems installed.

Primary reason behind this PR is to allow extensible loader configuration.

Co-authored-by: Raito Bezarius <masterancpp@gmail.com>
 2023-03-21 15:48:56 +01:00
Ryan Lahfa 9c0dfff36b
Merge pull request #131 from lilyinstarlight/feature/fwupd 
Properly handle fwupd update capsules, take 2
 2023-03-21 15:26:50 +01:00
Lily Foster fd956c4864
flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs-test':
    'github:RaitoBezarius/nixpkgs/e51bf8cc8e2c75192e930ad83ed272938729e7be' (2022-12-23)
  → 'github:NixOS/nixpkgs/371d3778c4f9cee7d5cf014e6ce400d57366570f' (2023-03-16)
 2023-03-20 07:47:21 -04:00
Lily Foster 738d986536
flake: update nixpkgs-test 
The nixpkgs-test input has been moved to the branch from
NixOS/nixpkgs#207039.
 2023-03-20 07:46:24 -04:00
Lily Foster 658d753d1c
Properly handle fwupd update capsules 
Co-Authored-By: Janne Heß <janne@hess.ooo>
 2023-03-20 07:46:24 -04:00
Julian Stecklina bdcada4bc2
Merge pull request #137 from nix-community/renovate/all 
fix(deps): update all dependencies
 2023-03-20 10:34:53 +01:00
renovate[bot] 9bbbae3168
fix(deps): update all dependencies 2023-03-20 09:25:02 +00:00
Julian Stecklina a5dcc2cc3f
Merge pull request #138 from nix-community/renovate/lock-file-maintenance 
chore(deps): lock file maintenance
 2023-03-20 10:23:09 +01:00
Julian Stecklina 5a03bb751d stub: update dependencies 
Update nightly toolchain and UEFI dependencies. The latest crane
version comes with a bug where it fails to compile UEFI binaries.
 2023-03-20 09:51:30 +01:00
renovate[bot] dfa6c3db1f
chore(deps): lock file maintenance 2023-03-20 01:57:17 +00:00
Julian Stecklina 73fca9b923
Merge pull request #132 from nix-community/toctou 
Don't Reload Stub from the File System
 2023-03-15 23:57:12 +01:00
Julian Stecklina 7060389698 stub: add safety comment for PE parsing 2023-03-15 21:53:19 +01:00