-
Notifications
You must be signed in to change notification settings - Fork 52
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
profiles: Enable TPM2 support in systemd #1756
Conversation
sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
Show resolved
Hide resolved
There is a cyclical dep between the app-crypt/tpm-tss and virtual/tmpfiles and systemd. Need to see how to break it somehow:
|
Build action triggered: https://github.com/flatcar/scripts/actions/runs/8418960061 |
One way could be using |
We could use systemd-cryptenroll and cryptsetup with a TPM device but so far the support was not compiled in. Enable the use flags for TPM2 support in systemd.
f49462c
to
7c4529d
Compare
As Flatcar always uses systemd, we can make this package purely virtual to just flag the usage of the tmpfiles eclass. This can be done by removing the systemd dependency. Might be useful in the future to not have this kind of dependency breaking hacks for other packages too. |
profiles: Enable TPM2 support in systemd
We could use systemd-cryptenroll and cryptsetup with a TPM device but so far the support was not compiled in.
Enable the use flags for TPM2 support in systemd.
How to use
Testing done
systemd-cryptenroll works with a tpm but so far I didn't manage to make the systemd-cryptsetup generator unlock with a TPM