]> git.ipfire.org Git - thirdparty/mkosi.git/commit
Allow PCR signing settings to be overridden in sub-images
authorMichael A Cassaniti <michael@cassaniti.id.au>
Wed, 9 Apr 2025 04:15:50 +0000 (14:15 +1000)
committerDaan De Meyer <daan.j.demeyer@gmail.com>
Thu, 10 Apr 2025 08:35:44 +0000 (10:35 +0200)
commit2c052b9d45a5080c7b614b9dd10ea751bf89cd2f
treea2d6f9b7030e3ef16a7940957af45f422bdac853
parent00c220225bd0baa22773f3e29482740fe3f9797b
Allow PCR signing settings to be overridden in sub-images

A sub-image is usually built from the same base image. That base image may be
used for a rescue image and a primary workstation image. If the rescue image
has PCR signing enabled then it could allow the disk to be automatically
unlocked. This change allows specifying separate PCR signing keys which will
support only the workstation sub-image performing an automatic unlock.
mkosi/config.py
mkosi/resources/man/mkosi.1.md