Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

initdata: measure initdata digest into rt register #1999

Merged
merged 1 commit into from
Aug 13, 2024
Merged

initdata: measure initdata digest into rt register #1999

merged 1 commit into from
Aug 13, 2024

Commits on Aug 12, 2024

  1. initdata: measure initdata digest into rt register 

    This adds two post exec directives for process-user-data in the mkosi to
extend PCR 8 (grub, which we don't use it mkosi podvms:
https://uapi-group.org/specifications/specs/linux_tpm_pcr_registry/)
with the digest of initdata. Sha256 and Sha384 banks are attempted.
initdata.digest contains a hex value that will fit only in one of those.
A failure of either post exec step will be ignored and do not turn the
unit status into a failure.

This is a bit provisional, but since things with init-data and runtime
measurement are a bit in flux still, which doesn't warrant to put such
logic in code yet.

Drive-by fix: Updated the azure nightly badge on the Readme

Signed-off-by: Magnus Kulke <[email protected]>
    @mkulke
    mkulke committed Aug 12, 2024
    Configuration menu
    Copy the full SHA
    d98c07c View commit details
    Browse the repository at this point in the history