diff options
| author | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-09-30 08:54:59 +0100 |
|---|---|---|
| committer | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-09-30 08:54:59 +0100 |
| commit | 76db86a22a23ccfed07d6160cfdab4ef60067ef0 (patch) | |
| tree | 777d78d3bc017a21a8ba453fbd258c3be947e678 /etc/mkinitcpio.conf.d | |
| parent | 78a74ad7b930b2136dbb4b77a0ed545141b4ad2e (diff) | |
| download | dotfiles-76db86a22a23ccfed07d6160cfdab4ef60067ef0.tar.gz dotfiles-76db86a22a23ccfed07d6160cfdab4ef60067ef0.tar.bz2 dotfiles-76db86a22a23ccfed07d6160cfdab4ef60067ef0.zip | |
Mask unused NvPCR measurements on the Arch host
Diffstat (limited to 'etc/mkinitcpio.conf.d')
| -rw-r--r-- | etc/mkinitcpio.conf.d/60-no-nvpcr.conf | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/etc/mkinitcpio.conf.d/60-no-nvpcr.conf b/etc/mkinitcpio.conf.d/60-no-nvpcr.conf new file mode 100644 index 0000000..06b94ff --- /dev/null +++ b/etc/mkinitcpio.conf.d/60-no-nvpcr.conf @@ -0,0 +1,9 @@ +# Keep the unused NvPCR definitions and consumers masked in the initramfs. +FILES+=( + /etc/nvpcr/cryptsetup.nvpcr + /etc/nvpcr/hardware.nvpcr + /etc/nvpcr/login.nvpcr + /etc/nvpcr/verity.nvpcr + /etc/systemd/system/systemd-pcrlogin@.service + /etc/systemd/system/systemd-pcrproduct.service +) |