search

linuxboot / heads

A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.
https://osresearch.net/
GNU General Public License v2.0
1.42k stars 186 forks source link

ISO9660 not supported #116

Closed jonathanfemideer closed 7 years ago

jonathanfemideer commented 7 years ago

It would be nice to be able to install Qubes from DVD. The Qubes maintainers note the advantage of optical media: write-resistance. That reduces the risk of installation media being tampered with.

However, the ISO 9660 file system is not supported in Heads. If possible, can support for it be added? If not, then this limitation should at least be documented, to avoid users wasting time burning a Qubes install DVD and trying to install from it using Heads. (Ask me how I know this! :wink:)

osresearch commented 7 years ago

Perhaps if the ISO9660 driver is built as a module; one of the plans is to have the recovery shell change the PCRs so that any attempts to load external code (such as by mounting a DVD or USB) won't allow unauthorized access to the TPM secrets (issue #16).

osresearch commented 7 years ago

Fixed! I've added the ISO9660 filesystem.