linuxboot/heads

View on GitHub

A minimal Linux that runs as a coreboot or LinuxBoot(UEFI's DXE replacement) ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.

Stars: 1.6k
Forks: 211
Open beginner issues: 0
Indexed issues: 243
Avg merge: 4d 21h
Merged PRs (30d): 6

Dominant language: Makefile
License: GPL-2.0
Last GitHub push: Sep 17, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

243 open issues indexed

Consider including git for /boot and root fs integrity and changes reporting Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

linuxboot/heads#1599 · 11 comments · Opened Feb 1, 2024
Don't build ME linux kernel modules (not currently packed) Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

linuxboot/heads#1597 · 1 comment · Opened Jan 22, 2024
Move zip hash verification logic from flash-gui.sh to flash.sh Open

enhancement / improvement help wanted installation UX

Difficulty 2/5 1-3 hours Newbie friendliness 25/100

linuxboot/heads#1593 · 1 comment · Opened Jan 18, 2024
Talos II produce both tgz and zip archives, zip are unsupported for Talos Open

Difficulty 3/5 1-2 days Newbie friendliness 30/100

linuxboot/heads#1591 · 1 comment · Opened Jan 18, 2024
Improve TPM DUK passphrase UX Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

linuxboot/heads#1588 · 2 comments · Opened Jan 12, 2024
Refactor/Make CircleCI use blobs download scripts blobs placed under blobs dir + have CircleCI prep step download only if hashes of blobs fail Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

linuxboot/heads#1574 · 1 comment · Opened Jan 4, 2024
Enable proper GitHub codespace in-tree config + novnc to propel better testing/collaboration + Heads qemu headless board Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1572 · 1 comment · Opened Jan 2, 2024
Experiment with u-root (u-root-builder booted from network, and tinygoized u-root) Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1559 · 1 comment · Opened Dec 21, 2023
Improve LUKS container re-encryption and OEM factory reset process Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#1538 · Opened Nov 25, 2023
can't sign multiple OSes with LUKS (0x45 from TPM_IncrementCounter) Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#1531 · 1 comment · Opened Nov 18, 2023
Add info output function (for unified text prompts under Heads) Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#1491 · 2 comments · Opened Sep 1, 2023
CAPSLOCK Detection Open

linuxboot/heads#1486 · 4 comments · 1 assignee · Opened Sep 1, 2023
Consider moving away of busybox Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1484 · 2 comments · Opened Aug 30, 2023
Use TPM2_Quote for attestation Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1480 · 3 comments · Opened Aug 25, 2023
Update #692 with responsive testers from #1403 OP Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#1471 · Opened Aug 16, 2023
Review real.clean global Makefile target which deletes coreboot 3rdparty dir Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#1470 · 4 comments · Opened Aug 16, 2023
Include missing patches from linux-builder project Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

linuxboot/heads#1465 · Opened Aug 11, 2023
Use `--prefix ""` - no prefix in modules Open

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

linuxboot/heads#1460 · Opened Aug 10, 2023
Investigate h8dgi as kgpe-d16 alternative Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

linuxboot/heads#1458 · 1 comment · Opened Aug 9, 2023
Move UNTESTED_w530-hotp-maximized UNTESTED_w530-maximized away of UNTESTED boards Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

linuxboot/heads#1454 · 1 comment · Opened Aug 7, 2023
Cache reusal foreseen problems when using git repositories (coreboot-git now being example) Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

linuxboot/heads#1450 · 1 comment · Opened Aug 4, 2023
Boot from unsigned USB ISO: Change UX to propose to show iso hash for user first time validation + detach sign hashfile Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

linuxboot/heads#1438 · 11 comments · Opened Jul 11, 2023
TPMTOTP HOTP code to be extended to 40 bytes (vs 20) Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#1437 · Opened Jul 10, 2023
Alpine OS not detected after install (only grub.cfg searched for on local disk installation by scripts) Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#1415 · 6 comments · Opened Jun 11, 2023
KGPE-d16 board status : untested Open

Difficulty 4/5 3-5 days Newbie friendliness 28/100

linuxboot/heads#1395 · 85 comments · Opened May 3, 2023
Mention in the wiki to reset CMOS after a flash Open

Difficulty 1/5 Under an hour Newbie friendliness 45/100

linuxboot/heads#1391 · 3 comments · Opened Apr 30, 2023
OSResearch Heads support for the Starbook MkVI Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

linuxboot/heads#1388 · 3 comments · Opened Apr 26, 2023
T520 board now under coreboot 4.19 : UNTESTED Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

linuxboot/heads#1386 · Opened Apr 24, 2023
How does anyone flash this? Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

linuxboot/heads#1385 · 1 comment · Opened Apr 24, 2023
Board port: HP Elite 8200 SFF desktop PC Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#1375 · Opened Apr 17, 2023
Hash operations should leave some feedback on progress Open

Difficulty 3/5 1-2 days Newbie friendliness 42/100

linuxboot/heads#1369 · Opened Apr 7, 2023
detect_boot_device() prevents OEM factory reset to fully complete Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

linuxboot/heads#1368 · 1 comment · Opened Apr 7, 2023
kexec-parse-boot don't parse grub.cfg functions nor variables Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#1360 · Opened Mar 31, 2023
xx20/xx30 memory scrubbing on boot Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1346 · 1 comment · Opened Mar 19, 2023
Key replication with hardware token key wrapping Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

linuxboot/heads#1344 · Opened Mar 17, 2023
If TOTP unsealing fails, HOTP isn't updated Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

linuxboot/heads#1343 · Opened Mar 14, 2023
TPM reset is complex Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1337 · 1 comment · 1 reaction · Opened Mar 13, 2023
Embed blobs downloading into board configurations (based on t440p work) Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

linuxboot/heads#1335 · 1 comment · Opened Mar 10, 2023
Improve whiptail dual console board configurations (would be useful for qemu) Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

linuxboot/heads#1332 · 3 comments · Opened Mar 9, 2023
Add ccache in all coreboot configs Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

linuxboot/heads#1331 · 1 comment · Opened Mar 9, 2023
Does Heads support PXE network boot? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1327 · 2 comments · Opened Mar 6, 2023
Understand how CBFS size relates to the MRC/CAR Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

linuxboot/heads#1324 · 2 comments · Opened Feb 28, 2023
Plausible deniability of encryption Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1322 · 8 comments · 1 reaction · Opened Feb 28, 2023
Heads cant boot from USB-drive with Ventoy Open

help wanted installation UX

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1320 · 13 comments · Opened Feb 23, 2023
Add bases for TPM measuremement replications (small steps to forward sealing) Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

linuxboot/heads#1311 · Opened Feb 14, 2023
Integrate with Ultrablue for remote attestation over Bluetooth/USB Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

linuxboot/heads#1307 · 13 comments · Opened Feb 7, 2023
oem-factory-reset should reduce RSA keysize for Nitrokey start by default Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

linuxboot/heads#1306 · 1 comment · Opened Feb 3, 2023
t420 owners (and t430 users) : Why CONFIG_USE_OPTION_TABLE, CONFIG_STATIC_OPTION_TABLE and CONFIG_GENERIC_LINEAR_FRAMEBUFFER are defined under coreboot configs? Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

linuxboot/heads#1293 · 6 comments · Opened Jan 24, 2023
encrypted LVM group needs more sanitization (setting boot default with TPM disk encryption key passphrase) Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

linuxboot/heads#1271 · Opened Jan 10, 2023
Support for modded thinkpad x2100? Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

linuxboot/heads#1258 · 1 comment · Opened Dec 17, 2022

linuxboot/heads

Get new issues in your inbox