stboot - GitLite

KO | EN

gitlite — search

#python #react #ai #typescript #android #machine-learning #deep-learning #linux #docker #macos #java #windows #vue #security

stboot

(★ 117)

Paused mirror. Official repository at https://git.glasklar.is/system-transparency/core/stboot

File Explorer

Download Latest Version (.zip)

- cheat-sheet-on-releases.md
- - download.go
  - download_test.go
  - network.go
  - network_test.go
- config.go
- config_test.go
- configautodetect.go
- efivarfs.go
- host_test.go
- recovery.go
- storage.go
- tpm.go
- - certutil.go
- - jsonutil.go
  - jsonutil_test.go
- metadata.go
- - cert.pem
  - cert_bad_cert.pem
  - cert_bad_pem.pem
  - certs.pem
  - host_bad_unset.json
  - host_good_all_set.json
  - key.pem
  - trust_policy_bad_unset.json
  - trust_policy_good_all_set.json
- error.go
- opts.go
- opts_test.go
- descriptor.go
- descriptor_test.go
- fetchmethod.go
- fetchmethod_test.go
- manifest.go
- ospkg.go
- signature.go
- zip.go
- sterror.go
- sterror_test.go
- stlog.go
- stlog_test.go
- policy.go
- policy_test.go
- modules.txt
.gitignore
.gitlab-ci.yml
.golangci.yaml
AUTHORS
go.mod
go.sum
LICENSE
NEWS
README.md
RELEASES.md
stboot.go
stboot_test.go

# Installation Guide

1. Get the code

git clone https://github.com/system-transparency/stboot

Downloads the entire project code from GitHub to your computer.

cd stboot

Moves into the project folder you just downloaded.

2. Go

Medium Recommended

Prerequisites

Git Needed to download the project code from GitHub.
Go The Go compiler and toolchain.

go build ./...

Compiles the Go program into an executable.

go run .

Runs the Go program directly without a separate build step.

✅ If the build finishes without errors, it worked. If you used go run ., check the terminal output.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# stboot

The reference bootloader implementation for System Transparency.

# Description
The stboot bootloader can be used as an init program inside an initramfs and is designed to be combined with a Linux kernel to form a [LinuxBoot](https://www.linuxboot.org/) distribution. It is closely related to the [u-root project](https://github.com/u-root/u-root#u-root). On the one hand, stboot depends on some standard Linux tools packages provided by u-root, on the other hand, u-root is used to create an initramfs including stboot.

# Usage
Make sure your Go version is >=1.13 && <1.16. Make sure your GOPATH is set up correctly. Although using modules, stboot still vendors dependencies to work smoothly with u-root. So if you are usually working with go modules enabled do the following in your working directory:

```
mkdir go
export GO111MODULE=off
export GOPATH=${PWD}/go
```

Download and install u-root and stboot:
```
go get github.com/u-root/u-root
go get system-transparency.org/stboot
```

Build an initramfs:
```
./go/bin/u-root -o initramfs.cpio -uinitcmd stboot github.com/u-root/u-root/cmds/core/{init,elvish,ls} system-transparency.org/stboot
```
There should be your brand new `initramfs.cpio` in you working directory.

Test your initramfs (assuming your OS kernel at `/boot/vmlinuz`):
```
qemu-system-x86_64 -kernel /boot/vmlinuz -nographic -append "console=ttyS0,115200 uroot.uinitargs='-debug'" -initrd initramfs.cpio -m 2048 --enable-kvm
```

You should see something like this:
```
[...]
[    0.689686] Run /init as init process
2021/05/03 12:01:15 Welcome to u-root!
                              _
   _   _      _ __ ___   ___ | |_
  | | | |____| '__/ _ \ / _ \| __|
  | |_| |____| | | (_) | (_) | |_
   \__,_|    |_|  \___/ \___/ \__|

init: 2021/05/03 12:01:15 no modules found matching '/lib/modules/*.ko'
stboot: 
  _____ _______   _____   ____   ____________
 / ____|__   __|  |  _ \ / __ \ / __ \__   __|
| (___    | |     | |_) | |  | | |  | | | |   
 \___ \   | |     |  _ <| |  | | |  | | | |   
 ____) |  | |     | |_) | |__| | |__| | | |   
|_____/   |_|     |____/ \____/ \____/  |_|

```
As long as you can see the stboot banner, everything is fine. The program will exit with an error because of missing configuration data.
See https://git.glasklar.is/system-transparency/core/system-transparency for details on how to set up System Transparency.