Enable signed initrd and NvPCR measurements

1 files changed, 14 insertions, 0 deletions

diff --git a/etc/initcpio/install/nvpcr b/etc/initcpio/install/nvpcr
new file mode 100644
index 0000000..2fbc4ec
--- /dev/null
+++ b/etc/initcpio/install/nvpcr
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+
+build() {
+    # mkinitcpio 42 does not include these systemd 262 initrd services.
+    map add_systemd_unit \
+        systemd-tpm2-setup-early.service \
+        systemd-pcrnvdone.service \
+        systemd-pcrextend.socket \
+        systemd-pcrextend@.service
+}
+
+help() {
+    echo 'Include systemd NvPCR initialization and PCR extension services.'
+}