ymatsiuk

Pre-requisites:

• parallel, jq, curl
• GITHUB_TOKEN your personal github API token
• ORG the name of your organization
• REPO_TOTAL which is the total number of repositories your org owns (check curl below)

Get REPO_TOTAL

curl -L \

stengoes

First step: install tpm2-tss, tpm2-tools and all its depedencies.

# Install dependencies
sudo apt-get update && sudo apt-get -y install autoconf autoconf-archive automake libtool pkg-config gcc libssl-dev libcurl4-gnutls-dev doxygen

# Install tpm2-tss
git clone https://github.com/tpm2-software/tpm2-tss.git
cd tpm2-tss
git checkout e05d28ec  # I used this particular commit
./bootstrap

klingtnet

The instructions were tested on a Lenovo X1 Carbon 5th Gen (X1C5) on Arch Linux but should be applicable to other Lenovo models and Linux distributions.

BACKUP YOUR DATA! I created a bootable Ubuntu Image like this:

$ sudo sh -c 'curl --location --silent --fail "http://releases.ubuntu.com/18.04/ubuntu-18.04.1-desktop-amd64.iso" | pv > /dev/<your-usb-drive>'
# note that pv is only there to show progress, it is perfectly fine to redirect curl to the usb drive directly.

then I booted from this drive by pressing F12 on reboot and dumped my NVMe disk to an external hard drive like this:

chreniuc

timedatectl set-ntp true
timedatectl set-timezone Europe/Bucharest

fdisk /dev/sda
########################################
n 1G pentru /boot /dev/sda1
a - Flag it as bootable

n - 4G pentru swap /dev/sda3
n - 70G pentru / /dev/sda2

zaxebo1

UEFI SecureBoot on ArchLinux

For KVM and Laptop

Rationale

I want full control what boots the computer to avoid the so called evil maid attack. That requires setting SecureBoot with only my own keys.

Intro