Skip to content

Commit

Permalink
README: More text, add disclaimer
Browse files Browse the repository at this point in the history
  • Loading branch information
Joakim Nohlgård committed Dec 5, 2016
1 parent 4bbd32d commit 8ada09c
Showing 1 changed file with 19 additions and 2 deletions.
21 changes: 19 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,11 @@
opal-kexec-pba
==============

Alternative OPAL SED unlock image for pre-boot authentication (alternative to
LinuxPBA).

Introduction
============
------------

This repository contains some scripts for creating an initramfs and boot image
to use as a PBA image on OPAL encrypted hard disk and solid state drives.
Expand All @@ -9,6 +15,15 @@ See
for a more detailed explanation of self-encrypting drives (SED) and how to use
them with Linux.

Disclaimer
----------

These scripts have only been tested on a single machine, with a specific NVME
SED device, under UEFI. I won't be able to help you if it bricks your drive,
nor will I take any responsibility for any errors or flaws in the scripts which
may lead to ruined hard drives, leaked passwords or data, or anything other bad
things.

Features
--------

Expand Down Expand Up @@ -129,6 +144,8 @@ to generate an image.
It is also possible to start with the LinuxPBA image instead of an empty image,
mount it, and replace the syslinux.cfg, kernel bzImage, and initramfs.

The image generated above will only work on UEFI systems.

Building sedutil-cli as a static binary
---------------------------------------

Expand Down Expand Up @@ -156,7 +173,7 @@ drive image (`dd` step above) if you want it to go faster.
Testing
-------
This has been tested on a single machine, with an Intel 6000p NVMe drive
(SSDPEKKF512G7).
(SSDPEKKF512G7), using UEFI boot, Secure Boot disabled.
I am using an image with these scripts as the primary unlock method on that
machine and have been using this for a few weeks now (2016-12-05).

Expand Down

0 comments on commit 8ada09c

Please sign in to comment.