pcrextend: automatically measure SMBIOS product ID at boot

Now that PCRs are not that expensive anymore, let's use them to measure
the SMBIOS product ID to one.
This commit is contained in:
Lennart Poettering
2025-11-02 21:14:35 +01:00
parent 2b90bf1730
commit 0196abbd10
10 changed files with 111 additions and 11 deletions
+1 -1
View File
@@ -35,7 +35,7 @@ executables += [
]
if conf.get('ENABLE_BOOTLOADER') == 1 and conf.get('HAVE_OPENSSL') == 1 and conf.get('HAVE_TPM2') == 1
nvpcrs = []
nvpcrs = [ 'hardware' ]
foreach n : nvpcrs
custom_target(
input : 'nvpcr/' + n + '.nvpcr.in',
+5
View File
@@ -0,0 +1,5 @@
{
"name" : "hardware",
"algorithm" : "sha256",
"nvIndex" : {{TPM2_NVPCR_BASE + 0}}
}