]> git.ipfire.org Git - thirdparty/systemd.git/commit
tpm2-setup: introduce nvpcr for measuring Verity images
authorLennart Poettering <lennart@amutable.com>
Wed, 11 Feb 2026 12:13:00 +0000 (13:13 +0100)
committerLennart Poettering <lennart@amutable.com>
Tue, 17 Feb 2026 21:00:13 +0000 (22:00 +0100)
commit8485bba53d82a0852318fa4ce3bd76ac291cd418
tree043760f9fcb1bc3b7ca7ad8be86189a7510c392e
parent0a8f393c64f3716883cf57a7a28bf7dae03e06b3
tpm2-setup: introduce nvpcr for measuring Verity images

I thnk it's crucial we start to measure Verity images as we activate
them, so that the event log has a full trace of the compisition of the
system. hence let's introduce a new NvPCR for this purpse, under the
name "verity".
src/tpm2-setup/meson.build
src/tpm2-setup/nvpcr/verity.nvpcr.in [new file with mode: 0644]