tpm2-clear: optionally reset TPM during a factory reset

2025-03-05 12:37:51 +01:00
parent daae8f858d
commit 73e53d2ee4
11 changed files with 309 additions and 0 deletions
@@ -767,3 +767,10 @@ Tools using the Varlink protocol (such as `varlinkctl`) or sd-bus (such as
  `process`, `session`, `user`, `user-session`, or `group`. Controls the kernel
  keyring in which `systemd-ask-password` caches the queried password. Defaults
  to `user`.
+
+`systemd-tpm2-clear`:
+
+* `SYSTEMD_TPM2_ALLOW_CLEAR` – takes a boolean. Overrides the effect of the
+  `systemd.factory_reset=` kernel command line option: if set to false,
+  requesting a TPM clearing is skipped, and the command immediately exits
+  successfully.