linuxboot/heads

View on GitHub

A minimal Linux that runs as a coreboot or LinuxBoot(UEFI's DXE replacement) ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.

Stars: 1.6k
Forks: 211
Open beginner issues: 0
Indexed issues: 243
Avg merge: 4d 21h
Merged PRs (30d): 6

Dominant language: Makefile
License: GPL-2.0
Last GitHub push: Sep 17, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

243 open issues indexed

URGENT: Save x220/t420 from going unmaintained Open

help wanted

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#2209 · Opened Sep 17, 2026
Have STATUS and STATUS_OK output on different "columns" Open

Difficulty 2/5 1-3 hours Newbie friendliness 86/100

linuxboot/heads#2208 · Opened Sep 17, 2026
TPM read fails after interrupted at LUKS-passphrase on T480 - no TOTP/HOTP prompt Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

linuxboot/heads#2205 · 2 comments · Opened Sep 8, 2026
Update w530 board owner Open

Difficulty 1/5 Under an hour Newbie friendliness 90/100

linuxboot/heads#2204 · 5 comments · Opened Sep 7, 2026
Switch all config options that can be toggled to "=n" when not active from board configs Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

linuxboot/heads#2202 · Opened Sep 5, 2026
Bump all upstream coreboot boards to 25.12 Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

linuxboot/heads#2198 · Opened Aug 27, 2026
RFC: Beyond donations (not working, whatever reason) - make users pay for maintained open source firmware Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

linuxboot/heads#2195 · 14 comments · Opened Aug 26, 2026
Call for consultation services communtiy can offer Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#2194 · 1 comment · Opened Aug 26, 2026
RFC : Follow up to PGP auth: what should be blocked Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#2192 · 1 comment · Opened Aug 26, 2026
Kicksecure ISO live amnesic (USER Session) boot fails on novacustom-v540tu; works on x230 and nv4x_adl Open

bug help wanted upstream wontfix

Difficulty 4/5 3-5 days Newbie friendliness 38/100

linuxboot/heads#2188 · 4 comments · Opened Aug 19, 2026
Investigate coreboot hashing -> TPM extend timings for additional tamper evidence proof (spkmodem?) Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

linuxboot/heads#2185 · Opened Aug 7, 2026
Add helper and flash menu to check zip file provided hashes.txt for live check of runtime ram initramfs vs to be flashed rom Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

linuxboot/heads#2184 · Opened Aug 7, 2026
Have Circleci hashes for all ROMS outputted as comments in PR Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

linuxboot/heads#2176 · Opened Aug 3, 2026
bump qrencode to newer version Open

enhancement / improvement

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

linuxboot/heads#2175 · Opened Aug 3, 2026
Heads should accept crypto donations. Agreed. But how? Open

help wanted question

Difficulty 5/5 Over a week Newbie friendliness 30/100

linuxboot/heads#2166 · 4 comments · Opened Jul 24, 2026
Support OSes with signed checksums (e.g. Debian, Ubuntu) Open

enhancement / improvement help wanted security UX

Difficulty 4/5 3-5 days Newbie friendliness 55/100

linuxboot/heads#2163 · 1 comment · Opened Jul 21, 2026
Optiplex 7010/9010 + ACM/TXT : unneeded for now (No DRTM planned for older platforms, No SRTM IBB measured in PCR-0); Removal notice from CircleCI Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#2146 · 3 comments · Opened Jul 1, 2026
add ifdtool inside Heads, so we can extract mrc trained data and inject upon firmware upgrade Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#2138 · 1 comment · Opened Jun 27, 2026
Introduce Heads' SBOM (OSFF grant) Open

grant

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#2135 · 9 comments · Opened Jun 26, 2026
Non-HOTP setups need to reboot after signing, otherwise trying to boot and TPM DUK unsealing fails because PCR5 doesn't match Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

linuxboot/heads#2132 · 2 comments · Opened Jun 23, 2026
TPM1/TPM2 DA policy exposure, tooling to trigger DA defend mode and proper gating on increment and unseal Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#2123 · Opened May 20, 2026
we need "insecure remote test terminal" to test on real hardware without invalidating measurements Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#2122 · Opened May 19, 2026
T480S Heads firmware lack ACPI P-state tables. Open

port

Difficulty 3/5 1-2 days Newbie friendliness 35/100

linuxboot/heads#2120 · 3 comments · Opened May 17, 2026
Add qemu board (kvm) docker support for qubesos tests (vnc + vmx) Open

automated testing enhancement / improvement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#2093 · 1 comment · Opened Apr 22, 2026
need help porting - BzImage too large Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#2090 · 4 comments · Opened Apr 16, 2026
Make sure CONFIG_USE_PC_CMOS_ALTCENTURY is not defined in all boards Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#2087 · Opened Apr 15, 2026
Support smmstorev2 firmware configuration changes Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

linuxboot/heads#2070 · 1 comment · Opened Mar 11, 2026
Implement missing fbwhiptail features, minimally input, maybe multi selection Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#2069 · Opened Mar 10, 2026
Create sub issues for other modules version bumps Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

linuxboot/heads#2043 · Opened Jan 7, 2026
TODO for MSI platforms (post merge needed work) Open

enhancement / improvement port

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#2040 · 2 comments · Opened Jan 5, 2026
OEM Factory Reset permits to export public key to LUKS encrypted partition but freezes Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

linuxboot/heads#2028 · Opened Nov 19, 2025
Heads needs to change co-maintaining/reviewing/merging policies Open

help wanted

Difficulty 5/5 Over a week Newbie friendliness 30/100

linuxboot/heads#2027 · 7 comments · 1 reaction · Opened Nov 16, 2025
PKCS#11 tokens/smartcards support Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#2005 · Opened Oct 3, 2025
Measuring GPU device firmware Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

linuxboot/heads#2004 · 5 comments · Opened Oct 2, 2025
Experiences with NovaCustom dGPU variants Open

Bounty/Donations expected help wanted

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#2003 · 4 comments · Opened Oct 2, 2025
Use nix based muslc Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

linuxboot/heads#2002 · Opened Sep 22, 2025
T430 : Is it possible to change various BIOS settings? (wifi adapter doesn't work on USB3 port) Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#2001 · 8 comments · Opened Sep 22, 2025
update nix dependencies for canokey-qemu on newer canokey-core on newer mbedtls Open

upstream

Difficulty 4/5 3-5 days Newbie friendliness 38/100

linuxboot/heads#1998 · 5 comments · Opened Sep 18, 2025
HOTP concerns Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1997 · 26 comments · Opened Sep 12, 2025
Create Donation/update funding.json/duplicate under heads-wiki Open

Difficulty 1/5 Under an hour Newbie friendliness 35/100

linuxboot/heads#1990 · Opened Jul 18, 2025
Create CODE_OF_CONDUCT.md: a political tool to refer to prior following its rules and guidelines Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1977 · 3 comments · Opened May 26, 2025
Add Network boot option: boot to DTS Open

enhancement / improvement help wanted installation upstream UX

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1941 · 1 comment · Opened Mar 31, 2025
Btrfs support in Heads recovery console Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

linuxboot/heads#1939 · 1 reaction · Opened Mar 25, 2025
Include modules/curl from vaultboot + version bump Open

Difficulty 5/5 Over a week Newbie friendliness 28/100

linuxboot/heads#1936 · 1 comment · Opened Mar 20, 2025
ARM: Port Heads to Lenovo Chromebook Duet Gen9 (ciri) Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1927 · Opened Mar 11, 2025
Early DMA protection not enforced properly on Alderlake and Meteorlake Open

upstream

Difficulty 4/5 3-5 days Newbie friendliness 25/100

linuxboot/heads#1922 · 5 comments · Opened Mar 9, 2025
Misleading error when fused key does not match security dongle Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

linuxboot/heads#1921 · Opened Mar 4, 2025
Boot device detection is not deterministic Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

linuxboot/heads#1919 · 5 comments · Opened Mar 3, 2025
Heads became grub centric Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

linuxboot/heads#1918 · 4 comments · Opened Mar 2, 2025
usb boot does not work in basic mode when CONFIG_TPM is y Open

Difficulty 3/5 1-2 days Newbie friendliness 42/100

linuxboot/heads#1914 · 3 comments · Opened Feb 21, 2025

linuxboot/heads

Get new issues in your inbox