Heads is secure BIOS replacement that provides tamper-evident features to detect when the BIOS or important boot files have been modified. The official project page can be found at the official Heads GitHub page and we base our Heads BIOS off of this code. On Purism laptops Heads is built as an executable on top of the same coreboot BIOS that we have used in the past but instead of coreboot running SeaBIOS to detect and boot into your devices, coreboot runs Heads instead.
Currently Heads is available as part of a closed Beta program and while this documentation will describe how to build, install, and use Heads on Librem hardware, it is still a risky and complicated process intended for very technical users and involves compiling Beta software and manually flashing a BIOS. Note that Heads on Librem hardware is not yet an officially-supported product so keep that in mind if you want to test it on your own hardware outside of our closed Beta. If you want to join the closed Beta, email our CSO Kyle Rankin.
- About Heads
- Heads Beta Installation Instructions
- Build Coreboot
- Generate GPG keys to use with Heads
- Build Heads for your Librem hardware
- Flash Heads to your hardware
- Perform initial Heads configuration
- Other Resources
- Report an Issue