From 533aa457f6d9e01b6e0f76ab26ccfecb1dafb579 Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@amutable.com>
Date: Thu, 21 May 2026 14:21:02 +0200
Subject: [PATCH] nvpcr: define some reasonable priorities for the nvpcrs we
 already defined

---
 src/tpm2-setup/nvpcr/cryptsetup.nvpcr.in | 3 ++-
 src/tpm2-setup/nvpcr/hardware.nvpcr.in   | 3 ++-
 src/tpm2-setup/nvpcr/verity.nvpcr.in     | 3 ++-
 3 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/src/tpm2-setup/nvpcr/cryptsetup.nvpcr.in b/src/tpm2-setup/nvpcr/cryptsetup.nvpcr.in
index acec95206f..3f01ef34eb 100644
--- a/src/tpm2-setup/nvpcr/cryptsetup.nvpcr.in
+++ b/src/tpm2-setup/nvpcr/cryptsetup.nvpcr.in
@@ -1,5 +1,6 @@
 {
     "name" : "cryptsetup",
     "algorithm" : "sha256",
-    "nvIndex" : {{TPM2_NVPCR_BASE + 1}}
+    "nvIndex" : {{TPM2_NVPCR_BASE + 1}},
+    "priority" : 700
 }
diff --git a/src/tpm2-setup/nvpcr/hardware.nvpcr.in b/src/tpm2-setup/nvpcr/hardware.nvpcr.in
index ddeb7f99e5..bb4a3afa69 100644
--- a/src/tpm2-setup/nvpcr/hardware.nvpcr.in
+++ b/src/tpm2-setup/nvpcr/hardware.nvpcr.in
@@ -1,5 +1,6 @@
 {
     "name" : "hardware",
     "algorithm" : "sha256",
-    "nvIndex" : {{TPM2_NVPCR_BASE + 0}}
+    "nvIndex" : {{TPM2_NVPCR_BASE + 0}},
+    "priority" : 500
 }
diff --git a/src/tpm2-setup/nvpcr/verity.nvpcr.in b/src/tpm2-setup/nvpcr/verity.nvpcr.in
index b4fb62bd76..7d1630d6cd 100644
--- a/src/tpm2-setup/nvpcr/verity.nvpcr.in
+++ b/src/tpm2-setup/nvpcr/verity.nvpcr.in
@@ -1,5 +1,6 @@
 {
     "name" : "verity",
     "algorithm" : "sha256",
-    "nvIndex" : {{TPM2_NVPCR_BASE + 2}}
+    "nvIndex" : {{TPM2_NVPCR_BASE + 2}},
+    "priority" : 300
 }