Paul Meyer
57f8a85a21
cryptsetup: measure volume key and keyslot via the pcrextend Varlink service ( #43109 )
...
Motivated by
https://github.com/systemd/systemd/pull/43041#discussion_r3595022610 .
Switch systemd-cryptsetup's volume-key and keyslot measurements from
driving the TPM directly (tpm2-util) to the io.systemd.PCRExtend Varlink
service, aligning it with how the verity and imds measurements already
work.
Some notes on decisions taken:
- The volume key is sent over the wire. systemd-pcrextend will do the
hmac. The socket is root only. Otherwise we would need to do bank
negotiation via varlink and pollute the interface with it.
- `tpm2-measure-bank=` deprecated/dropped. Same reason as above.
- `tpm2-device=` now only affects unlocking. The device for measurements
is selected by pcrextend.
- Measuring requires the presence of `systemd-pcrextend.socket` in the
initrd, should be already given as systemd-veritysetup relies on it,
too.
- Logs are done on the pcrextend side.
2026-07-29 07:21:08 +02:00
..
2026-07-18 05:29:59 +09:00
2026-05-18 02:44:46 +09:00
2026-07-29 03:47:58 +09:00
2026-01-19 22:41:33 +09:00
2025-11-06 07:33:56 +09:00
2026-05-18 02:44:46 +09:00
2026-05-18 02:44:46 +09:00
2026-07-10 14:01:24 +02:00
2026-05-16 09:38:25 +09:00
2026-02-23 16:43:09 +00:00
2025-11-23 18:09:11 +01:00
2026-07-28 14:59:02 +02:00
2026-07-02 17:19:18 +02:00
2026-01-27 13:43:33 +01:00
2026-01-18 15:50:54 +09:00
2026-06-30 09:00:11 +02:00
2025-12-20 15:27:22 +01:00
2025-11-23 18:09:11 +01:00
2026-07-21 14:50:02 +01:00
2026-07-09 13:09:52 +01:00
2026-06-20 14:26:41 +02:00
2026-07-23 12:19:48 +09:00
2026-02-19 15:08:20 +01:00
2025-11-13 16:14:25 +01:00
2025-11-23 18:09:11 +01:00
2025-11-13 00:08:31 +01:00
2026-07-09 16:48:26 +02:00
2026-03-26 14:28:22 +01:00
2026-07-02 17:04:07 +01:00
2025-12-05 11:57:18 +01:00
2026-06-19 23:05:36 +02:00
2026-05-06 10:30:17 +02:00
2026-07-20 14:35:04 +09:00
2026-05-21 16:55:59 +09:00
2026-05-18 02:44:46 +09:00
2025-12-18 10:53:27 +01:00
2026-05-18 21:42:56 +02:00
2026-06-01 10:56:16 +02:00
2026-02-19 15:05:15 +01:00
2026-07-14 09:43:12 +01:00
2026-04-15 14:20:32 +00:00
2026-02-10 13:40:13 +00:00
2026-06-30 10:21:18 +01:00
2026-05-21 11:51:21 +01:00
2026-07-14 22:32:27 +02:00
2026-06-20 09:57:42 +01:00
2026-02-13 11:40:11 +01:00
2026-07-16 07:05:39 +02:00
2026-05-18 11:45:03 +01:00
2026-06-28 13:48:02 +09:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-25 04:11:29 +09:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-01 09:40:31 +01:00
2026-03-18 10:28:11 +00:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-07-02 17:04:07 +01:00
2026-05-05 17:22:26 +02:00
2026-04-08 16:33:20 +02:00
2026-05-18 10:39:04 +01:00
2026-05-15 13:46:08 +01:00
2026-04-20 15:01:17 +01:00
2026-02-17 15:27:24 +01:00
2026-07-12 22:44:03 +02:00
2026-05-22 14:55:28 +01:00
2026-07-12 22:44:03 +02:00
2026-06-23 23:10:02 +02:00
2026-03-18 10:28:11 +00:00
2026-06-28 00:00:11 +09:00
2026-02-17 15:27:24 +01:00
2026-06-23 22:55:23 +02:00
2026-07-14 09:43:12 +01:00
2026-03-20 13:56:44 +00:00
2025-11-23 18:09:11 +01:00
2026-06-21 18:20:53 +01:00
2026-04-29 12:25:47 +02:00
2025-12-24 07:37:58 +01:00
2025-12-12 21:54:47 +09:00
2026-01-07 00:47:53 +01:00
2026-07-14 09:43:12 +01:00
2026-06-30 10:21:18 +01:00
2025-11-23 18:09:11 +01:00
2026-03-31 09:47:27 +01:00
2026-07-14 10:12:50 +02:00
2026-04-24 14:09:54 +01:00
2026-04-16 16:48:17 +02:00
2026-07-10 14:01:24 +02:00
2026-07-10 14:22:17 +01:00
2026-05-19 08:28:53 +00:00
2026-07-11 15:37:46 +01:00
2026-07-12 23:31:29 +02:00
2026-02-20 21:20:45 +01:00
2026-07-26 13:20:55 +09:00
2026-07-09 13:09:52 +01:00
2026-07-09 13:09:52 +01:00
2026-07-14 14:05:57 +02:00
2025-11-23 18:09:11 +01:00
2026-07-19 10:59:59 +01:00
2026-06-22 22:03:12 +02:00
2026-07-21 11:43:52 +01:00
2025-11-23 18:09:11 +01:00
2025-12-17 23:23:44 +00:00
2026-04-22 20:05:38 +02:00
2025-12-18 13:57:32 +01:00
2026-04-07 20:38:40 +02:00
2026-06-01 10:56:16 +02:00
2026-07-02 21:28:42 +02:00
2026-04-23 15:39:29 +02:00
2026-02-20 01:18:54 +09:00
2026-07-09 13:09:52 +01:00
2026-05-15 13:46:08 +01:00
2026-02-24 18:29:37 +01:00
2026-07-29 03:47:58 +09:00
2026-07-28 08:35:39 +02:00
2026-07-29 03:47:58 +09:00
2026-06-19 05:23:18 +02:00
2026-06-19 05:23:18 +02:00
2026-06-22 20:42:35 +02:00
2026-06-19 05:23:18 +02:00
2026-03-24 21:24:48 +01:00
2026-07-14 12:03:22 +08:00
2026-02-05 10:28:47 +01:00
2026-05-20 04:29:59 +09:00
2026-04-17 11:54:47 +02:00
2025-11-13 14:45:51 +01:00
2026-04-29 12:25:47 +02:00
2026-04-29 12:25:47 +02:00
2026-06-09 09:33:59 +02:00
2026-06-19 22:15:43 +02:00
2026-05-05 15:09:47 +02:00
2026-05-15 14:01:57 +09:00
2026-07-28 16:24:29 +09:00
2026-07-29 03:47:58 +09:00
2026-07-29 03:47:58 +09:00
2026-03-26 16:11:34 +01:00
2026-07-28 08:35:39 +02:00
2026-03-26 16:11:34 +01:00
2026-07-18 05:29:59 +09:00
2026-03-25 02:02:23 +01:00
2026-03-31 09:47:27 +01:00
2026-05-11 21:10:11 +02:00
2026-07-06 11:04:11 +02:00
2026-02-16 11:09:48 +01:00
2026-06-28 13:40:07 +09:00
2026-01-16 22:56:28 +09:00
2025-11-23 18:09:11 +01:00
2025-12-19 09:17:41 +00:00
2026-06-19 20:38:13 +02:00
2026-06-17 08:34:02 +02:00
2026-05-19 14:39:20 +02:00
2026-07-09 13:09:52 +01:00
2026-07-28 21:35:25 +09:00
2026-04-13 11:14:11 +02:00
2026-05-19 15:48:05 +09:00
2026-03-24 21:24:48 +01:00
2026-07-22 12:24:15 +01:00
2026-06-23 22:55:23 +02:00
2026-07-02 17:19:18 +02:00
2026-04-08 11:51:09 +01:00
2026-06-20 14:26:41 +02:00
2026-07-10 12:02:54 +02:00
2025-11-23 18:09:11 +01:00
2026-07-09 16:48:26 +02:00
2026-07-15 13:27:48 +02:00
2026-07-15 13:27:48 +02:00
2026-07-15 13:27:48 +02:00
2026-01-06 07:21:37 +09:00
2026-06-21 18:20:53 +01:00
2026-07-18 05:29:59 +09:00
2026-07-28 08:35:39 +02:00
2026-05-21 04:24:55 +09:00
2026-03-06 18:39:07 +01:00
2026-07-09 13:09:52 +01:00
2026-05-11 21:10:11 +02:00
2026-02-17 22:00:14 +01:00
2026-03-06 09:52:37 +09:00