Heads is secure BIOS replacement that provides tamper-evident features to detect when the BIOS or important boot files have been modified. The official project page can be found at the official Heads GitHub page and we base our Heads BIOS off of this code. On Purism laptops Heads is built as an executable on top of the same coreboot BIOS that we have used in the past but instead of coreboot running SeaBIOS to detect and boot into your devices, coreboot runs Heads instead.
Currently Heads is available as part of an open Beta program and while this documentation will describe how to build, install, and use Heads on Librem hardware, it is still a risky and complicated process intended for very technical users and involves compiling Beta software and manually flashing a BIOS. We have created a community Matrix channel for Heads users at #community-heads:talk.puri.sm.
- About Heads
- Heads Beta Installation Instructions
- Build Coreboot
- Generate GPG keys to use with Heads
- Build Heads for your Librem hardware
- Flash Heads to your hardware
- Perform initial Heads configuration
- Other Resources
- Report an Issue