Merge pull request #1861 from flatcar/kai/grub-tpm

build_library/grub.cfg: Enable TPM module by default
This commit is contained in:
Kai Lüke 2024-04-10 13:20:27 +02:00 committed by GitHub
commit de3a39b39c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 3 additions and 2 deletions

View File

@ -60,7 +60,7 @@ case "${FLAGS_target}" in
CORE_NAME="core.img" CORE_NAME="core.img"
;; ;;
x86_64-efi) x86_64-efi)
CORE_MODULES+=( serial linux efi_gop efinet pgp http tftp ) CORE_MODULES+=( serial linux efi_gop efinet pgp http tftp tpm )
CORE_NAME="core.efi" CORE_NAME="core.efi"
SBAT_ARG=( --sbat "${BOARD_ROOT}/usr/share/grub/sbat.csv" ) SBAT_ARG=( --sbat "${BOARD_ROOT}/usr/share/grub/sbat.csv" )
;; ;;
@ -68,7 +68,7 @@ case "${FLAGS_target}" in
CORE_NAME="core.elf" CORE_NAME="core.elf"
;; ;;
arm64-efi) arm64-efi)
CORE_MODULES+=( serial linux efi_gop efinet pgp http tftp ) CORE_MODULES+=( serial linux efi_gop efinet pgp http tftp tpm )
CORE_NAME="core.efi" CORE_NAME="core.efi"
BOARD_GRUB=1 BOARD_GRUB=1
SBAT_ARG=( --sbat "${BOARD_ROOT}/usr/share/grub/sbat.csv" ) SBAT_ARG=( --sbat "${BOARD_ROOT}/usr/share/grub/sbat.csv" )

View File

@ -0,0 +1 @@
- Enabled the GRUB TPM2 module to measure the boot code path and files into PCR 8+9 in UEFI ([scripts#1861](https://github.com/flatcar/scripts/pull/1861))