Accepting request 1144843 from home:gary_lin:branches:devel:openSUSE:Factory

- Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)
  92d0f4305df73 Set the SRK algorithm for the TPM2 protector

OBS-URL: https://build.opensuse.org/request/show/1144843
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=208
This commit is contained in:
Joey Lee 2024-02-15 08:29:23 +00:00 committed by Git OBS Bridge
parent e4f7469733
commit 05ae7fe0d8
2 changed files with 13 additions and 1 deletions

View File

@ -384,8 +384,14 @@ prepare_cryptodisk () {
fi
fi
tpm_srk_alg="${GRUB_TPM2_SRK_ALG}"
if [ -z "$tpm_srk_alg" ]; then
tpm_srk_alg="RSA"
fi
cat <<EOF
tpm2_key_protector_init -T \$prefix/$tpm_sealed_key
tpm2_key_protector_init -a $tpm_srk_alg -T \$prefix/$tpm_sealed_key
if ! cryptomount -u $uuid --protector tpm2; then
cryptomount -u $uuid
fi

View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Wed Feb 7 08:54:52 UTC 2024 - Gary Ching-Pang Lin <glin@suse.com>
- Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)
92d0f4305df73 Set the SRK algorithm for the TPM2 protector
-------------------------------------------------------------------
Fri Feb 2 05:57:07 UTC 2024 - Gary Ching-Pang Lin <glin@suse.com>