PureBoot issueshttps://source.puri.sm/firmware/pureboot/-/issues2020-09-24T13:04:58Zhttps://source.puri.sm/firmware/pureboot/-/issues/17closed2020-09-24T13:04:58Zbernardclosedhttps://source.puri.sm/firmware/pureboot/-/issues/14Redundant Librem Key for boot [SOLVED]2020-04-29T20:18:47ZJT MoreeRedundant Librem Key for boot [SOLVED]I purchased a second librem key for fast recovery if I lose the first. I have everything working with both keys (LUKS,logins, etc) except pureboot. The heads/pureboot process refuses to recognize the second key even though it contains ...I purchased a second librem key for fast recovery if I lose the first. I have everything working with both keys (LUKS,logins, etc) except pureboot. The heads/pureboot process refuses to recognize the second key even though it contains the same pub/priv keypair as the first.
Does the heads/pureboot process record something specific to the librem key such as the serial # as part of the verification?
I will post some screenshots after I submit this and restart.https://source.puri.sm/firmware/pureboot/-/issues/6Skip showing Boot Menu at boot2020-08-03T19:54:33ZSam HewittSkip showing Boot Menu at bootStreamlining the boot experience by skipping the menu at boot (and skipping the need to press enter to boot) would save time at boot.
We ought to presume all is well, when the Librem Key is inserted and so forth, and boot right to the O...Streamlining the boot experience by skipping the menu at boot (and skipping the need to press enter to boot) would save time at boot.
We ought to presume all is well, when the Librem Key is inserted and so forth, and boot right to the OS, only dropping to the Boot Menu when there is an HOTP error or if the user is making use of TOTP.
This could be coupled with an configuration where pressing a key prior to or during boot will proceed to the boot menu, similar to how pressing F12 for example, on a lot of systems takes one to the BIOS.https://source.puri.sm/firmware/pureboot/-/issues/5[Customer] Wants to disable 2FA LUKS unlocking2020-02-26T07:48:28ZRichard Kolla[Customer] Wants to disable 2FA LUKS unlockingE-mail from customer:
>>>
I set up the Two-Factor Disk Unlocking.
This works very well, when the smartcard and the USB-stick with the public key is inserted and I choose the default boot.
However, if no smart card is present than I am...E-mail from customer:
>>>
I set up the Two-Factor Disk Unlocking.
This works very well, when the smartcard and the USB-stick with the public key is inserted and I choose the default boot.
However, if no smart card is present than I am kind of locked (eventually I do sth wrong).
Here my observations:
$sudo reboot
#Machine is rebooting
#Message: No smartcard inserted
#Ok
#Message: Your Librem Key was not detected
Please insert your Librem Key
Press OK
#Core Boot Menu
#Options
#Boot Options
#Ignore tapering and force a boot (Unsafe!)
#Warning: You have chosen to skip all tamper checks and boot anyway.
#This is an unsafe option!
#Do you want to proceed?
Press Yes
#Choose the boot option [1-7, a to abort]:
Choose 1
#Red screen starting
#[...]
#Please insert OpenPGP SmartCard...
Oberservation: Cannot enter regular password. Only option is to insert smart card.
#I insert the smartcard. Then:
Please unlock the card
Number: xxxx xxxxxxxx
Holder:
PIN
OK CANCEL
Observation: I do can enter the PIN but selecting OK nor CANCEL buttons and press Enter-Key does nothing nor do I see anything else I can do. Only Option is to reboot and go ahead with default boot and smart card and usb vault inserted. However, now I feel the risk of being locked out.
When I boot regularly and check in terminal:
$sudo cryptsetup luksDump /dev/nvme0n1p2 | grep "Key Slot"
Key Slot 0: ENABLED
Key Slot 1: ENABLED
Key Slot 3: ENABLED
/dev/nvme0n1p2 is the luks encryption of the boot device. Not sure if of any help.
---- My most important question is: How do I switch off the Two-Factor Disk Unlocking again? ----
What is wrong and how can I fix this is only second. I will also look into "https://forums.puri.sm/".
Any indication or web link will already be helpful.
>>>
I referred him to #community-heads:talk.puri.sm but thought if its something simple that I missed I can pass that along.https://source.puri.sm/firmware/pureboot/-/issues/3[Customer] Initial Issues with PureBoot2019-10-01T18:51:24ZRichard Kolla[Customer] Initial Issues with PureBoot#Ticket a WIP
Customer had sent in a few e-mails before we got to him. Here they are. First e-mail:
>>>
I did the initial set up, logged out, try to login again and every time i try default boot i get this error message. Please help.
...#Ticket a WIP
Customer had sent in a few e-mails before we got to him. Here they are. First e-mail:
>>>
I did the initial set up, logged out, try to login again and every time i try default boot i get this error message. Please help.
![image1](/uploads/88815b0fea858ccf07a5f7884b35da34/image1.jpeg)
>>>
Second e-mail:
>>>
I installed PureOS from the drive provided. This is now the series of screens i get when i attempt to perform a default boot
![image1-1](/uploads/dc146ffd07a8432373fef76412a9e5d1/image1-1.jpeg)
![image2-1](/uploads/d0545f93a5182b06f9cc72a8c92fa0ea/image2-1.jpeg)
![image3-1](/uploads/703cd1f7437f29c84830d0d176186799/image3-1.jpeg)
>>>
And third e-mail:
>>>
I now get this message every time I attempt to boot the machine.
Deeply, deeply dissatisfied with this product.
![image2](/uploads/b2373e2159662bb2aaed7db96b6d7d77/image2.jpeg)
>>>
At this point I picked it up and asked him to do the OEM Factory Reset and this is his response.
>>>
This did not work. I once again got the main menu, where I chose “default boot” and got this:
![image3](/uploads/55281ee4b5e5898536b8bdc5c00496e1/image3.jpeg)
>>>https://source.puri.sm/firmware/pureboot/-/issues/1Please support running from console2018-06-07T17:12:25ZGuido GuntherPlease support running from consoleIf run from the console zenity will not be able to display any dialogs.If run from the console zenity will not be able to display any dialogs.