Unverified Commit 9fdef751 authored by Thierry Laurion's avatar Thierry Laurion
Browse files

sdcard initrd support to suport boot fromiso

sdhci and subdependencies initrd kernel modules loaded to support Heads kexec'ing Tails kernel from sdcard integrity validated iso, permitting Tails to boot from a Read Only sdcard (fromiso). Heads boot device is referred by device/by-uuid (fromiso) to continue Heads kexec boot process from OS initrd loaded modules, prerequisite to continue kernel booting.

This would permit measured boot (on-boot iso integrity validation from Read Only sdcard) on many tamper evident laptop models( RYF x200, QubesOS to be certified x230, x220 and many other laptops using those modules for memory extension slot support).

Linked to this discussion: https://lists.autistici.org/message/20190612.203305.bcc3b98b.en.html
Linked to this Heads ticket: https://github.com/osresearch/heads/issues/581
parent 97e6b6c9
#!/bin/sh
set -e
PREREQ=""
prereqs () {
echo "${PREREQ}"
}
case "${1}" in
prereqs)
prereqs
exit 0
;;
esac
. /usr/share/initramfs-tools/hook-functions
manual_add_modules mmc_core mmc_block sdhci-pci sdhci
exit 0
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment