Hacker GitHub

← All repos

linuxboot/heads

View on GitHub ↗ ★ 1,606 Makefile

A minimal Linux that runs as a coreboot or LinuxBoot(UEFI's DXE replacement) ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.

15 mentions on Hacker News by 11 people: 1 story, 14 comments · first 2017-04-06 · latest 2026-10-24

Mentions per year 15 mentions · busiest year 2026 (5)
20082026
AllStoriesComments NewestTopOldest
  1. …this is by you authenticating the device before you enter anything. Look at the heads project ( https://github.com/linuxboot/heads ).
    comment by bubblethink · 2026-10-24 · in Full Disk Encryption on Fedora with TPM2
  2. …I got a PR merged for the first ChromeOS Port using MrChromebox's code as an upstream dependency: https://github.com/linuxboot/heads/pull/2133 I'm now working on the 2nd ChromeOS device in this PR right now:…
    comment by cwiggs · 2026-10-15 · in Libreboot 26.10 "Ominous Olive" released with UEFI, Chromebook support
  3. …non-free blob updates. The OS still runs the non-free blobs. It just loads it from separate flash. https://github.com/linuxboot/heads/blob/c859c28b88b7bc197c16... https://forums.puri.sm/t/the-librem-5-blob-list/28815/26
    comment by kuhsaft · 2026-04-29 · in Your phone is about to stop being yours
  4. …is just marketing. It's just for the OS. A lot of the hardware and firmware is proprietary. https://github.com/linuxboot/heads/blob/c859c28b88b7bc197c16... https://forums.puri.sm/t/the-librem-5-blob-list/28815/26
    comment by kuhsaft · 2026-04-29 · in Your phone is about to stop being yours
  5. …unlike Heads? coreboot with Heads is not the same as Qubes AEM. Heads is updated regularly: https://github.com/linuxboot/heads/
    comment by fsflover · 2026-03-04 · in F-Droid Board of Directors nominations 2026
  6. …coreboot with Heads on my Librem 14 with my own keys. [0] https://docs.puri.sm/PureBoot.html [1] https://github.com/osresearch/heads [2] https://puri.sm/posts/pureboot-101-first-boot-first-update-a...
    comment by fsflover · 2024-09-02 · in Authenticated Boot and Disk Encryption on Linux (2021)
  7. It relies on Heads ( https://github.com/osresearch/heads ), tamper-evident boot software that loads from within coreboot and uses the TPM chip and the user’s own GPG keys to detect tampering within the BIOS. Here are some explanations:…
    comment by fsflover · 2023-04-04 · in Ask HN: What lesser-known accessories do you use with your computer?
  8. …to encrypt anything to verify those images, you just need to sign them. See how Heads does this. https://github.com/osresearch/heads
    comment by rhn_mk1 · 2023-03-10 · in Arch Linux Btrfs with hibernation in a swapfile
  9. ▲ 5
    Heads: Minimal Linux that runs as coreboot payload to provide secure environment
    story by nateb2022 · 2022-10-09 · 0 comments
  10. Relevant, HEADS firmware: https://github.com/osresearch/heads Definitely worth reading the Wiki: https://osresearch.net/ Can be run on a variety of laptops, including a ThinkPad X230. Ships by default on Librem laptops. Uses the…
    comment by xvector · 2021-06-02 · in Producing a trustworthy x86-based Linux appliance
  11. …the article yet. I wanted to mention the excellent HEADS project (as in the other side of TAILS): https://github.com/osresearch/heads This talk is great: https://trmm.net/Heads_33c3 I remember when UEFI became a thing and people were…
    comment by openfuture · 2020-10-25 · in Geeking Out with UEFI
  12. There is - Heads[1]. [1] https://github.com/osresearch/heads
    comment by xvilka · 2020-07-30 · in GRUB2 UEFI SecureBoot Vulnerability: 'BootHole'
  13. …to read more on the technical aspects, here are all the constituent projects: https://coreboot.org/ https://github.com/osresearch/heads/ https://github.com/corna/me_cleaner https://github.com/nitrokey A good talk if you prefer video:…
    comment by bubblethink · 2020-01-08 · in NitroPad: Secure Laptop with Tamper Detection
  14. …with the number on the screen, then it proves the system is not being tampered. Read the code here: https://github.com/osresearch/heads/blob/584c07042ef4898de52... https://github.com/osresearch/heads/blob/584c07042ef4898de52... (yes, all…
    comment by bcaa7f3a8bbc · 2018-09-20 · in Introducing the Librem Key
  15. …just like non-blobless (blobfull?) coreboot. BTW, a really interesting coreboot distribution is https://github.com/osresearch/heads (focused on boot security)
    comment by floatboth · 2017-04-06 · in Libreboot: Open Letter to the Free Software Community