Code

Initial FDE CanvOS build changes.#141

Code

Merged

nianyush merged 129 commits intomainspectrocloud/CanvOS:mainfrom FDEspectrocloud/CanvOS:FDECopy head branch name to clipboardMay 10, 2024

+2,318-204

Commits

Commits on Mar 4, 2024

• Initial FDE CanvOS build changes.

  Show description for fa19a33
  vipsharm

  committed
  fa19a33

  Copy full SHA for fa19a33

Commits on Mar 6, 2024

• add a util to smartly link files with prefix

  Show description for b2870f5
  nianyush

  committed
  b2870f5

  Copy full SHA for b2870f5

• add keys to gitignore

  Show description for bdfc3e8
  nianyush

  committed
  bdfc3e8

  Copy full SHA for bdfc3e8

• fix normal flow

  Show description for f77a12f
  nianyush

  committed
  f77a12f

  Copy full SHA for f77a12f

• fix normal iso

  Show description for ae38875
  nianyush

  committed
  ae38875

  Copy full SHA for ae38875

Commits on Mar 7, 2024

• add stylus_uki.yaml

  Show description for a277e0c
  nianyush

  committed
  a277e0c

  Copy full SHA for a277e0c

Commits on Mar 8, 2024

• update os-builder & stylus image copy

  Show description for c901cd2
  nianyush

  committed
  c901cd2

  Copy full SHA for c901cd2

• update enki args

  Show description for 45399e0
  nianyush

  committed
  45399e0

  Copy full SHA for 45399e0

• fix stylus uki

  Show description for 5c4bd91
  nianyush

  committed
  5c4bd91

  Copy full SHA for 5c4bd91

• fix userdata

  Show description for 56b79f0
  nianyush

  committed
  56b79f0

  Copy full SHA for 56b79f0

Commits on Mar 9, 2024

• fix stylus copy

  Show description for 0c9d7a7
  nianyush

  committed
  0c9d7a7

  Copy full SHA for 0c9d7a7

• Merge branch 'main' into FDE

  nianyush

  authored
  b711d0c

  Copy full SHA for b711d0c

Commits on Mar 11, 2024

• link agent provider stylus in provider image

  Show description for a135de1
  nianyush

  committed
  a135de1

  Copy full SHA for a135de1

• link agent provider stylus

  Show description for 0b73530
  nianyush

  committed
  0b73530

  Copy full SHA for 0b73530

Commits on Mar 13, 2024

• Merge branch 'main' into FDE

  vipsharm

  authored
  8c0f5d5

  Copy full SHA for 8c0f5d5

• Adding branding menu string.

  vipsharm

  committed
  dbef4ca

  Copy full SHA for dbef4ca

Commits on Mar 14, 2024

• Removing UKI target from non-secure ISO target

  vipsharm

  committed
  336301f

  Copy full SHA for 336301f

• Fix auto-install

  vipsharm

  committed
  eeb6340

  Copy full SHA for eeb6340

Commits on Mar 19, 2024

• Minor fix. Adding branding for provider image.

  vipsharm

  committed
  6b5b3ee

  Copy full SHA for 6b5b3ee

Commits on Mar 22, 2024

• use alpine as provider base image

  Show description for 4658326
  nianyush

  committed
  4658326

  Copy full SHA for 4658326

• install kairos-agent to provider image and change base to ubuntu

  Show description for bbefcd6
  nianyush

  committed
  bbefcd6

  Copy full SHA for bbefcd6

• bump os builder version to v0.200.8

  Show description for 1933fb4
  nianyush

  committed
  1933fb4

  Copy full SHA for 1933fb4

Commits on Mar 26, 2024

• add reset stage

  Show description for c3f8398
  nianyush

  committed
  c3f8398

  Copy full SHA for c3f8398

Commits on Mar 27, 2024

• remove line

  Show description for c1be1da
  nianyush

  committed
  c1be1da

  Copy full SHA for c1be1da

Commits on Mar 28, 2024

• bump os-builder to 200.9

  Show description for 9bbb5c5
  nianyush

  committed
  9bbb5c5

  Copy full SHA for 9bbb5c5

Commits on Apr 1, 2024

• Bumping up Kairos version and Stylus unpack fix.

  vipsharm

  committed
  8a02e99

  Copy full SHA for 8a02e99

• update dep

  Show description for 4490e13
  nianyush

  committed
  4490e13

  Copy full SHA for 4490e13

• Merge branch 'FDE' of github.com:spectrocloud/CanvOS into FDE

  nianyush

  committed
  f7db956

  Copy full SHA for f7db956

Commits on Apr 4, 2024

• fix tag

  Show description for a3072b4
  nianyush

  committed
  a3072b4

  Copy full SHA for a3072b4

• Making target change to allow iso target for uki-iso.

  vipsharm

  committed
  a393df2

  Copy full SHA for a393df2

Commits on Apr 5, 2024

• Merging UKI and non-uki provider targets into build-provider-images.

  Show description for 1006aa1
  vipsharm

  committed
  1006aa1

  Copy full SHA for 1006aa1

Commits on Apr 9, 2024

• support stylus pkg restore after reset

  nianyush

  committed
  debb58f

  Copy full SHA for debb58f

Commits on Apr 10, 2024

• Fixing OEM size error.

  vipsharm

  committed
  179a10f

  Copy full SHA for 179a10f

• refractor: stylus image extraction

  nianyush

  committed
  be8fcdb

  Copy full SHA for be8fcdb

• fix: fix unpack in initramfs

  nianyush

  committed
  3a26fae

  Copy full SHA for 3a26fae

• fix conflict

  nianyush

  committed
  33e1751

  Copy full SHA for 33e1751

• Change to move private-keys to different folder. These keys can be copied out and not needed during ISO or upgrade image generation.

  vipsharm

  committed
  0b3c5db

  Copy full SHA for 0b3c5db

• fix typo

  nianyush

  committed
  4cfc0e6

  Copy full SHA for 4cfc0e6

• Minor private key fix.

  vipsharm

  committed
  8a74bdb

  Copy full SHA for 8a74bdb

Commits on Apr 11, 2024

• Merge remote-tracking branch 'origin/main' into FDE

  nianyush

  committed
  0ae738e

  Copy full SHA for 0ae738e

• Merge branch 'main' into FDE

  nianyush

  authored
  5e9c056

  Copy full SHA for 5e9c056

• refractor: only execute uki stages if in uki boot mode

  nianyush

  committed
  dbd5ad4

  Copy full SHA for dbd5ad4

• fix uki mode if condition

  nianyush

  committed
  3d4c0d7

  Copy full SHA for 3d4c0d7

• remove sbctl

  nianyush

  committed
  5654714

  Copy full SHA for 5654714

• bump OSBUILDER to v0.200.11

  nianyush

  committed
  83c8d4e

  Copy full SHA for 83c8d4e

• use apt-get instead of apt

  nianyush

  committed
  2fc346c

  Copy full SHA for 2fc346c

Commits on Apr 12, 2024

• bump kairos version to v3.0.5

  nianyush

  committed
  c0e41d9

  Copy full SHA for c0e41d9

Commits on Apr 15, 2024

• add a hardcoded user to get logs during dev

  nianyush

  committed
  0f94cce

  Copy full SHA for 0f94cce

Commits on Apr 16, 2024

• Fixing the Base Image URL

  vipsharm

  committed
  b919538

  Copy full SHA for b919538

Commits on Apr 17, 2024

• Fixing ISO name

  Show description for 98aa265
  vipsharm

  committed
  98aa265

  Copy full SHA for 98aa265

• Removing the container target for ISO.

  vipsharm

  committed
  f2c0f10

  Copy full SHA for f2c0f10

Commits on Apr 19, 2024

• Update stylus_uki.yaml

  vipsharm

  authored
  3c9844f

  Copy full SHA for 3c9844f

• Adding key folder changes.

  Show description for b498053
  vipsharm

  committed
  b498053

  Copy full SHA for b498053

• Fixing custom keys generation

  vipsharm

  committed
  550ebb3

  Copy full SHA for 550ebb3

• Fixing the image tag issue. (#167)

  vipsharm

  authored
  b3afe37

  Copy full SHA for b3afe37

Commits on Apr 23, 2024

• Update Earthfile

  vipsharm

  authored
  0aa0123

  Copy full SHA for 0aa0123

• genkey target should not use any cache

  Show description for e3c06d7
  nianyush

  committed
  e3c06d7

  Copy full SHA for e3c06d7

• use - instead of _ as directory name and print out dir tree after key gen

  Show description for e33af80
  nianyush

  committed
  e33af80

  Copy full SHA for e33af80

Commits on Apr 24, 2024

• update .gitignore

  Show description for 5f0c268
  nianyush

  committed
  5f0c268

  Copy full SHA for 5f0c268

• Ensure no error messages

  kreeuwijk

  committed
  8763125

  Copy full SHA for 8763125

• fix typo

  Show description for b219a22
  nianyush

  committed
  b219a22

  Copy full SHA for b219a22

• Merge branch 'FDE' of github.com:spectrocloud/CanvOS into FDE

  nianyush

  committed
  30a1246

  Copy full SHA for 30a1246

• PE-3405: Kairos 3.0.x upgrade (#164)

  Dr-N00B

  authored
  5878858

  Copy full SHA for 5878858

• CIS hardening - enabled by default

  kreeuwijk

  committed
  879adaf

  Copy full SHA for 879adaf

• Support UEFI boot for non-UKI ISO

  kreeuwijk

  committed
  883d963

  Copy full SHA for 883d963

• add iso-disk-image for container disk image

  Show description for e40229f
  nianyush

  committed
  e40229f

  Copy full SHA for e40229f

• put ISO_NAME as global arg

  Show description for b65d392
  nianyush

  committed
  b65d392

  Copy full SHA for b65d392

• fix image tag

  Show description for 8b9112e
  nianyush

  committed
  8b9112e

  Copy full SHA for 8b9112e

Commits on Apr 25, 2024

• Pe 3405 (#169)

  Dr-N00B

  authored
  4744a68

  Copy full SHA for 4744a68

• fix jetson image

  Show description for 30f8ee7
  nianyush

  committed
  30f8ee7

  Copy full SHA for 30f8ee7

• Ensure kubeadm compatibility

  Show description for 370064f
  kreeuwijk

  committed
  370064f

  Copy full SHA for 370064f

• bump kairos to v3.0.7

  Show description for 5394c68
  nianyush

  committed
  5394c68

  Copy full SHA for 5394c68

Commits on Apr 26, 2024

• add sbctl and mokutil in dockerfile

  Show description for a57b491
  nianyush

  committed
  a57b491

  Copy full SHA for a57b491

• add uki related variables to .arg.template and add readme about trusted boot (#170)

  Show description for e92adf3
  nianyush

  authored
  e92adf3

  Copy full SHA for e92adf3

• add a script to smartly explain key usage and recommends under a folder

  Show description for 4f6a92d
  nianyush

  committed
  4f6a92d

  Copy full SHA for 4f6a92d

• rename comment.sh to keys.sh

  Show description for 6390e64
  nianyush

  committed
  6390e64

  Copy full SHA for 6390e64

• Add private CA instructions

  kreeuwijk

  committed
  1dca7eb

  Copy full SHA for 1dca7eb

• Fix example cert location info

  kreeuwijk

  committed
  9c05bfb

  Copy full SHA for 9c05bfb

• add bring your own key option to genkey

  Show description for f4d1cc3
  nianyush

  committed
  f4d1cc3

  Copy full SHA for f4d1cc3

• add if exists

  Show description for d1a2b4b
  nianyush

  committed
  d1a2b4b

  Copy full SHA for d1a2b4b

Commits on Apr 27, 2024

• Merge remote-tracking branch 'origin/main' into FDE

  Show description for bd8f84e
  nianyush

  committed
  bd8f84e

  Copy full SHA for bd8f84e

• PE-3405: Update kairos base image (#172)

  Dr-N00B

  authored
  4db1115

  Copy full SHA for 4db1115

• update 4.4.0-alpha1 provider versions (#174)

  santhoshdaivajna

  authored
  02c05df

  Copy full SHA for 02c05df

Commits on Apr 29, 2024

• base images changes

  Dr-N00B

  committed
  2430964

  Copy full SHA for 2430964

• Don't concatenate the PK

  kreeuwijk

  committed
  45be77f

  Copy full SHA for 45be77f

• Adjust messages

  kreeuwijk

  committed
  406f195

  Copy full SHA for 406f195

• Phase out UKI_SELF_SIGNED_KEYS

  kreeuwijk

  committed
  9e04f57

  Copy full SHA for 9e04f57

• base url change (#175)

  Dr-N00B

  authored
  58e6ed9

  Copy full SHA for 58e6ed9

• update

  Show description for 3103586
  nianyush

  committed
  3103586

  Copy full SHA for 3103586

Commits on Apr 30, 2024

• rename to 80_stylus_uki.yaml

  Show description for bfdc563
  nianyush

  committed
  bfdc563

  Copy full SHA for bfdc563

• comment out sbctl

  Show description for 3757dec
  nianyush

  committed
  3757dec

  Copy full SHA for 3757dec

• updating kairos version 3.0.8 (#176)

  Dr-N00B

  authored
  fc82e0f

  Copy full SHA for fc82e0f

Commits on May 1, 2024

• Native Ubuntu Pro support

  kreeuwijk

  committed
  0f5ddce

  Copy full SHA for 0f5ddce

• fix: content not copied into uki iso (#177)

  Show description for 68083d7
  nianyush

  authored
  68083d7

  Copy full SHA for 68083d7

Commits on May 2, 2024

• Simplify uki-build-iso

  kreeuwijk

  committed
  9d2ab83

  Copy full SHA for 9d2ab83

• Update private CA instructions

  kreeuwijk

  committed
  0c62d62

  Copy full SHA for 0c62d62

• Improve wording

  kreeuwijk

  committed
  9c02bf5

  Copy full SHA for 9c02bf5

• correct extension

  kreeuwijk

  committed
  50824ca

  Copy full SHA for 50824ca

• dynamic cryptsetup close

  kreeuwijk

  committed
  a95df18

  Copy full SHA for a95df18

• Correct procedure to uki-genkey

  kreeuwijk

  committed
  2402541

  Copy full SHA for 2402541

• Add instructions for the TPM key

  kreeuwijk

  committed
  8e21a5c

  Copy full SHA for 8e21a5c

• Split the ZST file to 3GB chunks. (#178)

  Show description for b04a63d
  

  vipsharm

  and

  nianyush

  authored
  b04a63d

  Copy full SHA for b04a63d

Commits on May 3, 2024

• kairos upgrade to v3.0.9 and ubuntu-fips snapd remove (#179)

  Dr-N00B

  authored
  9bcb4f7

  Copy full SHA for 9bcb4f7

• Fix broken pam settings

  kreeuwijk

  committed
  f5e7eae

  Copy full SHA for f5e7eae

Commits on May 6, 2024

• fix zst file missing error

  Show description for 398f738
  nianyush

  committed
  398f738

  Copy full SHA for 398f738

• fix content split

  Show description for 8b2a775
  nianyush

  committed
  8b2a775

  Copy full SHA for 8b2a775

• fix split eval

  kreeuwijk

  committed
  dff9bf6

  Copy full SHA for dff9bf6

• fix typo

  kreeuwijk

  committed
  f9d2fbd

  Copy full SHA for f9d2fbd

• Copy content for non-UKI iso

  kreeuwijk

  committed
  26d703c

  Copy full SHA for 26d703c

• Fix logic

  kreeuwijk

  committed
  daaf2e2

  Copy full SHA for daaf2e2

• Generate secure-boot directory structuire

  kreeuwijk

  committed
  f8bf35b

  Copy full SHA for f8bf35b

• Only save artifacts when needed

  kreeuwijk

  committed
  479c339

  Copy full SHA for 479c339

• support INCLUDE_MS_SECUREBOOT_KEYS for BYOK

  kreeuwijk

  committed
  0ead43a

  Copy full SHA for 0ead43a

• Update .arg template instructions

  kreeuwijk

  committed
  1912e5e

  Copy full SHA for 1912e5e

• Ignore privately generated keys

  kreeuwijk

  committed
  f8b626c

  Copy full SHA for f8b626c

• Improve private CA instructions

  kreeuwijk

  committed
  d824c2b

  Copy full SHA for d824c2b

• set INCLUDE_MS_SECUREBOOT_KEYS to false by default

  Show description for 2ddfb41
  nianyush

  committed
  2ddfb41

  Copy full SHA for 2ddfb41

• Merge branch 'FDE' of github.com:spectrocloud/CanvOS into FDE

  nianyush

  committed
  f89fbb8

  Copy full SHA for f89fbb8

• set INCLUDE_MS_SECUREBOOT_KEYS to true by default

  Show description for 704548e
  nianyush

  committed
  704548e

  Copy full SHA for 704548e

Commits on May 7, 2024

• bump k3s provider version to 4.4.0-alpha2 (#180)

  kpiyush17

  authored
  f7a10bb

  Copy full SHA for f7a10bb

• Merge remote-tracking branch 'origin/main' into FDE

  Show description for 54b6014
  nianyush

  committed
  54b6014

  Copy full SHA for 54b6014

Commits on May 8, 2024

• Don't install libpam-pwquality twice

  kreeuwijk

  committed
  08652ea

  Copy full SHA for 08652ea

• Install correct yum packages

  kreeuwijk

  committed
  6f1d829

  Copy full SHA for 6f1d829

• fix SPECTRO_PUB_REPO

  Show description for decf36a
  nianyush

  committed
  decf36a

  Copy full SHA for decf36a

• Merge branch 'FDE' of github.com:spectrocloud/CanvOS into FDE

  nianyush

  committed
  09f53b6

  Copy full SHA for 09f53b6

• fix arch

  Show description for 3ac44d2
  nianyush

  committed
  3ac44d2

  Copy full SHA for 3ac44d2

Commits on May 9, 2024

• build slink

  Show description for 6cb9a27
  nianyush

  committed
  6cb9a27

  Copy full SHA for 6cb9a27

• add spc.tgz to gitignore

  Show description for 639fa98
  nianyush

  committed
  639fa98

  Copy full SHA for 639fa98

• add efi-size-check

  Show description for d4812e7
  nianyush

  committed
  d4812e7

  Copy full SHA for d4812e7