diff --git a/build_library/grub.cfg b/build_library/grub.cfg index 39bf5107255..a057311069b 100644 --- a/build_library/grub.cfg +++ b/build_library/grub.cfg @@ -6,6 +6,8 @@ set prefix=($root)/flatcar/grub # Load any and all video drivers. # Required under UEFI to boot Linux with a working console. insmod all_video +# Load the TPM2 module to measure the boot code path and files into PCR 8+9 +insmod tpm # Default menuentry id and boot timeout set default="flatcar" diff --git a/changelog/changes/2024-04-09-grub-tpm.md b/changelog/changes/2024-04-09-grub-tpm.md new file mode 100644 index 00000000000..957f8f34b63 --- /dev/null +++ b/changelog/changes/2024-04-09-grub-tpm.md @@ -0,0 +1 @@ +- Enabled the GRUB TPM2 module to measure the boot code path and files into PCR 8+9 in UEFI