Is pureboot just heads? Is heads just a custom implementation of bootguard?

[MrChromebox]

@prezretpolistajete

Thank you for the detailed answer, extremely helpful. So the Librem 14 is not using TPM 2?

no, the Librem 14 uses a TPM 1.2 (it can be firmware-flashed to TPM 2.0 should we wish)

@prezretpolistajete

any ballpark for man hours to achieve tpm2 support? And then more generically, if I wanted to put heads on a coreboot supported machine, how much minimal work would you estimate to have it function nicely on the machine (assuming everything else was generally compatible, including tpm2 support)

I’ve not looked at the state of things recently to be able to estimate that. If TPM2 support were implemented, me adding support for a new board would probably take an hour or less to get up and running, but I’m a veteran coreboot/Heads developer so not a great metric to use.

@prezretpolistajete

is it possible to use a yubikey or other gpg hardware key with the Librem implementation of heads

only the LK/NK are supported currently. I’m not sure what other keys are capable (if any) and support would likely needed to be explicitly added