Heads

Heads is secure BIOS replacement that provides tamper-evident features to detect when the BIOS or important boot files have been modified. The official project page can be found at the official Heads GitHub page and we base our Heads BIOS off of this code. On Purism laptops Heads is built as an executable on top of the same coreboot BIOS that we have used in the past but instead of coreboot running SeaBIOS to detect and boot into your devices, coreboot runs Heads instead.

Current Status

Currently Heads is available as part of a closed Beta program and while this documentation will describe how to build, install, and use Heads on Librem hardware, it is still a risky and complicated process intended for very technical users and involves compiling Beta software and manually flashing a BIOS. Note that Heads on Librem hardware is not yet an officially-supported product so keep that in mind if you want to test it on your own hardware outside of our closed Beta. If you want to join the closed Beta, email our CSO Kyle Rankin.