3 ms·
Systemd 255 Released with a "Blue Screen of Death" for Linux Systems
- jauntywundrkind 3y agoThis release is ~75% Brave New Trusted Boot World stuff. https://0pointer.net/blog/brave-new-trusted-boot-world.html https://0pointer.net/blog/brave-new-trusted-boot-world.html The most obvious: > A "systemd-pcrlock" has been added that allows managing local TPM2 PCR policies for PCRs 0-7 and similar. This seems to be for configuring the TPM to release or withhold secrets at boot, depending on system configuration. Oh you swapped hard drives? No, you may not see A or B key (which are perhaps the keys for Y and Z hard drives). There's docs at: https://www.freedesktop.org/software/systemd/man/latest/systemd-pcrlock.html https://www.freedesktop.org/software/systemd/man/latest/syst... There's also UKI support (a cornerstone of Brave new trusted boot world) in systemd-boot. And quite a number of other UKI and TPM tweaks. Unrelated-ish to Trusted Boot world, somewhat surprised to see varlink is still alive? It's wild to me that Varlink is kind of stealth creating a new JSON-powered DBus alternative. And only systemd really has privileges to this app control bus; it works as a filedescriptor passed in at startup. One big advantage is it's available in early early boot; that's mostly what it was tauted for. I'd noticed varlink getting created, but wasn't aware there was anyone who cared about it at all or was really using it for stuff: interesting to see some activity surrounding it (a util for working with it) after not seeing much for a while. https://varlink.org/ https://varlink.org/