diff options
| author | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-09-30 08:54:59 +0100 |
|---|---|---|
| committer | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-09-30 08:54:59 +0100 |
| commit | 6739045b173cc1be1f46bdf4b6167cbf9a883089 (patch) | |
| tree | 955161ee64eba8d06cf1492b8c903bae76b967b6 /justfile | |
| parent | c6cf3bc7e20e43c61b48d417b9291e5d7d115b1d (diff) | |
| download | dotfiles-6739045b173cc1be1f46bdf4b6167cbf9a883089.tar.gz dotfiles-6739045b173cc1be1f46bdf4b6167cbf9a883089.tar.bz2 dotfiles-6739045b173cc1be1f46bdf4b6167cbf9a883089.zip | |
Require signed PCR 11 policy for TPM root unlock
Diffstat (limited to 'justfile')
| -rw-r--r-- | justfile | 5 |
1 files changed, 5 insertions, 0 deletions
@@ -154,6 +154,11 @@ test: tpm-nvpcr-check *images: _require-host @sudo /usr/bin/python3 scripts/tpm_nvpcr.py "$@" +# Audit the combined LUKS TPM token. Use --trial until the old slot is removed. +[positional-arguments] +tpm-unlock-check *args: _require-host + @sudo /usr/bin/python3 -m scripts.tpm_unlock "$@" + # Remove only this repo's obsolete zero-byte NvPCR masks after recovery is ready. tpm-nvpcr-unmask: _require-host @sudo /usr/bin/python3 scripts/tpm_nvpcr_unmask.py |