Noel Georgi 895133de99

feat: support configuring PCR states to bind disk encryption ...

See 4b840414be for more information.

Talos versions prior to 1.12 locked to PCR 7 state and PCR 11 for signed policies.

In-order for backwards compatibility newer installs will still default to PCR 7 state. Locking to PCR 7 can be disabled by passing an empty list.

Fixes: #10677

Signed-off-by: Noel Georgi <git@frezbo.dev>

2025-09-05 20:08:01 +05:30

..

testdata

chore(ci): add more nvidia test matrix

2025-07-22 23:17:36 +05:30

api.go

feat: add e2e-aws for nvidia extensions

2023-08-24 17:43:36 +05:30

apid.go

fix: bump apid memory limit

2025-05-20 22:54:56 +04:00

apply-config.go

feat: unify disk encryption configuration

2025-07-24 19:08:48 +04:00

cgroups.go

feat: remove cgroupsv1 in non-container mode

2024-12-18 18:48:11 +04:00

common.go

fix: uki boot detection

2025-04-08 09:02:02 +05:30

constants.go

chore: update dependencies

2025-09-02 14:14:53 +04:00

containers.go

fix: update the CRI sandbox image reference

2024-10-28 14:52:19 +04:00

discovery.go

feat: support configuring PCR states to bind disk encryption

2025-09-05 20:08:01 +05:30

diskusage.go

chore: bump dependencies

2024-08-29 20:44:37 +04:00

dmesg.go

feat: update dependencies, Kubernetes 1.34.0-alpha.2

2025-06-30 19:05:22 +04:00

etcd-recover.go

feat: update dependencies, Kubernetes 1.34.0-alpha.2

2025-06-30 19:05:22 +04:00

etcd.go

feat: add etcd downgrade API

2025-07-16 15:33:51 +02:00

ethernet.go

fix: disable automatic MAC assignment to bridge interfaces

2025-05-15 18:45:16 +04:00

events.go

refactor: rewrite code to include preliminary support for multi-doc

2023-05-31 18:38:05 +04:00

extensions_nvidia.go

chore(ci): add more nvidia test matrix

2025-07-22 23:17:36 +05:30

extensions_qemu.go

chore: refactor how tools are being installed

2025-08-14 17:45:39 +04:00

firewall.go

fix: block NodePort services with ingress firewall

2025-02-28 19:56:52 +04:00

generate-config.go

feat: rewrite install disk selector to use CEL expressions

2024-11-11 17:23:15 +04:00

hardware.go

fix: sync PCR extension with volume provisioning lifecycle

2025-04-25 17:41:29 +04:00

kernel.go

feat: expose kernel cmdline as a resource

2025-07-02 15:31:10 +02:00

logs.go

feat: add auditd service

2024-11-02 22:25:04 +05:30

machine-status.go

chore: re-enable nolintlint and typecheck linters

2023-08-25 01:05:41 +04:00

monitoring.go

feat: display current CPU frequency on dashboard

2024-11-08 12:05:48 +04:00

node-annotations.go

test: use node informer instead of raw watch

2024-12-25 18:52:07 +04:00

node-labels.go

test: use node informer instead of raw watch

2024-12-25 18:52:07 +04:00

node-taints.go

test: use node informer instead of raw watch

2024-12-25 18:52:07 +04:00

pci_driver_rebind.go

feat: pcirebind controller

2024-12-20 17:35:37 +05:30

platform.go

test: replace platform metadata test

2025-04-30 16:56:12 +04:00

process.go

feat: remove cgroupsv1 in non-container mode

2024-12-18 18:48:11 +04:00

reboot.go

test: cleanup failed Kubernetes pods

2024-12-16 16:48:30 +04:00

reset.go

feat: implement encryption locking to STATE

2025-08-01 18:24:56 +04:00

resources.go

feat: update dependencies

2024-10-17 22:12:50 +04:00

rotate.go

feat: update dependencies, Kubernetes 1.34.0-alpha.2

2025-06-30 19:05:22 +04:00

sbom.go

feat: add SBOMs to the imager container

2025-07-11 17:05:26 +04:00

selinux.go

test: add negative tests for SELinux

2025-04-11 14:15:20 +02:00

serviceaccount.go

test: wait for service account test job longer

2025-07-28 20:06:03 +04:00

siderolink.go

fix: reconnect on SideroLink tunnel on/off change

2025-03-13 15:08:09 +04:00

trusted-roots.go

feat: provide machine config document to update trusted CA roots

2024-07-12 19:28:31 +04:00

trustedboot.go

feat: support configuring PCR states to bind disk encryption

2025-09-05 20:08:01 +05:30

uki.go

fix: uki boot detection

2025-04-08 09:02:02 +05:30

update-hostname.go

test: cleanup failed Kubernetes pods

2024-12-16 16:48:30 +04:00

version.go

feat: update dependencies, Kubernetes 1.34.0-alpha.2

2025-06-30 19:05:22 +04:00

volumes.go

feat: implement ExistingVolumeConfig

2025-07-22 14:32:31 +04:00

watchdog.go

chore: better lvm2 tests

2024-10-01 16:08:44 +04:00

wipe.go

feat: support running with SELinux enforcing

2025-03-22 14:39:48 +01:00