mirror of
https://github.com/xcat2/confluent.git
synced 2026-08-28 17:46:42 +00:00
730f645dc0
If someone wants to seal to a PCR explicitly to prevent booting rescue, the PCR is likely to extend differently during install. Leave the volume sealed to the tpm without any PCRs until first boot. Then wipe the bindings without PCR specified, and seal according to user preferred values.