Verify that tpm2_flushcontext is installed and added to initramfs.

Signed-off-by: Jonathan Davies <[email protected]>
latchset · Nov 5, 2021 · 095be91 · 095be91
1 parent d304771
commit 095be91
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/src/dracut/clevis-pin-tpm2/module-setup.sh.in b/src/dracut/clevis-pin-tpm2/module-setup.sh.in
@@ -19,7 +19,7 @@
 #
 
 check() {
-    require_binaries clevis-decrypt-tpm2 tpm2_createprimary tpm2_unseal tpm2_load || return 1
+    require_binaries clevis-decrypt-tpm2 tpm2_createprimary tpm2_flushcontext tpm2_load tpm2_unseal || return 1
     require_any_binary tpm2_pcrread tpm2_pcrlist || return 1
     return 0
 }
@@ -30,7 +30,7 @@ depends() {
 }
 
 install() {
-    inst_multiple clevis-decrypt-tpm2 tpm2_createprimary tpm2_unseal tpm2_load
+    inst_multiple clevis-decrypt-tpm2 tpm2_createprimary tpm2_flushcontext tpm2_load tpm2_unseal
     inst_multiple -o tpm2_pcrread tpm2_pcrlist
     inst_libdir_file "libtss2-tcti-device.so*"
 }

diff --git a/src/pins/tpm2/meson.build b/src/pins/tpm2/meson.build
@@ -1,5 +1,6 @@
 cmds = ['tpm2_createprimary', ['tpm2_pcrread', 'tpm2_pcrlist'],
-        'tpm2_createpolicy', 'tpm2_create', 'tpm2_load', 'tpm2_unseal']
+        'tpm2_createpolicy', 'tpm2_create', 'tpm2_flushcontext', 'tpm2_load',
+	'tpm2_unseal']
 
 all = true
 foreach cmd : cmds