mirror of
https://github.com/xcat2/confluent.git
synced 2024-11-22 09:32:21 +00:00
3c41c52d77
For one, need to detect stale TPM value and clear them. For another, seal to PCR 15 and extend after unlock, so that the booted system is unable to retrieve the data from the TPM (e.g. a plain user by default is allowed to unseal data if there's no policy, so use a policy and extend the state away before boot) |
||
|---|---|---|
| .. | ||
| common/opt/confluent/bin | ||
| coreos | ||
| el7 | ||
| el8 | ||
| el8-diskless | ||
| esxi7 | ||
| genesis | ||
| rhvh4 | ||
| suse15 | ||
| suse15-diskless | ||
| ubuntu20.04 | ||
| utils | ||
| buildrpm | ||
| confluent_osdeploy.spec.tmpl | ||