From c1f7133be790a972400ba63ca40f92ed699d216e Mon Sep 17 00:00:00 2001
From: sommerfeld <sommerfeld@sommerfeld.dev>
Date: Wed, 30 Sep 2026 08:54:59 +0100
Subject: Enable signed initrd and NvPCR measurements

---
 etc/initcpio/install/nvpcr | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 etc/initcpio/install/nvpcr

(limited to 'etc/initcpio/install')

diff --git a/etc/initcpio/install/nvpcr b/etc/initcpio/install/nvpcr
new file mode 100644
index 0000000..2fbc4ec
--- /dev/null
+++ b/etc/initcpio/install/nvpcr
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+
+build() {
+    # mkinitcpio 42 does not include these systemd 262 initrd services.
+    map add_systemd_unit \
+        systemd-tpm2-setup-early.service \
+        systemd-pcrnvdone.service \
+        systemd-pcrextend.socket \
+        systemd-pcrextend@.service
+}
+
+help() {
+    echo 'Include systemd NvPCR initialization and PCR extension services.'
+}
-- 
cgit v1.3.1