diff options
| author | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-09-30 08:54:59 +0100 |
|---|---|---|
| committer | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-09-30 08:54:59 +0100 |
| commit | c1f7133be790a972400ba63ca40f92ed699d216e (patch) | |
| tree | 12e36f95ff1e87998c1028a6e2c3242cad32aa3a /justfile | |
| parent | 76db86a22a23ccfed07d6160cfdab4ef60067ef0 (diff) | |
| download | dotfiles-c1f7133be790a972400ba63ca40f92ed699d216e.tar.gz dotfiles-c1f7133be790a972400ba63ca40f92ed699d216e.tar.bz2 dotfiles-c1f7133be790a972400ba63ca40f92ed699d216e.zip | |
Enable signed initrd and NvPCR measurements
Diffstat (limited to 'justfile')
| -rw-r--r-- | justfile | 15 |
1 files changed, 15 insertions, 0 deletions
@@ -149,6 +149,21 @@ nix-daemon-update: _require-canonical test: @python3 -m unittest discover -s tests -v +# Check the signed UKIs and NvPCR configuration. Pass staged UKIs to omit boot checks. +[positional-arguments] +tpm-nvpcr-check +images: _require-host + @sudo /usr/bin/python3 scripts/tpm_nvpcr.py "$@" + +# Remove only this repo's obsolete zero-byte NvPCR masks after recovery is ready. +tpm-nvpcr-unmask: _require-host + @sudo /usr/bin/python3 scripts/tpm_nvpcr_unmask.py + +_require-host: + #!/usr/bin/env bash + set -eu + source just-lib.sh + _require_host + # ═══════════════════════════════════════════════════════════════════ # Updates # ═══════════════════════════════════════════════════════════════════ |