Lennart Poettering
056c21aaeb
For TPM-less systems it's sometimes valuable to have a fill-in software TPM running from early boot on, so that TPM-based functionality can "just work" and rely on TPM semantics, even if it's at a substantially weaker security level. This adds a wrapper around swtpm. It's a binary that chainloads swtpm but does a few preparatory steps and integrates into systemd's logic otherwise. All this is then exposed as systemd-tpm2-swtpm.service. The service is not hooked into much yet, that is added in later commits.
21 lines
329 B
Plaintext
21 lines
329 B
Plaintext
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
|
|
[Include]
|
|
Include=
|
|
%D/mkosi/mkosi.sanitizers
|
|
%D/mkosi/mkosi.coverage
|
|
|
|
[Build]
|
|
Environment=SYSTEMD_REQUIRED_DEPS_ONLY=1
|
|
|
|
[Content]
|
|
ExtraTrees=%D/mkosi/mkosi.extra.common
|
|
|
|
Packages=
|
|
coreutils
|
|
findutils
|
|
grep
|
|
sed
|
|
swtpm
|
|
tar
|