You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Secboot currently accesses the default TPM using the /dev/tpm0 path directly, which it uses to open an implementation of tpm2.Transport which is then passed to the deprecated tpm2.NewTPMContext API.
It should be ported to make use of the tpm2.TPMDevice interface which represents a device and is passed to the newer tpm2.OpenTPMDevice API. The github.com/canonical/go-tpm2/linux package has methods for iterating devices or accessing the default device, and its implementation of tpm2.TPMDevice provides methods to access the in-kernel resource manager and the physical presence interface (using the ppi.PPI interface) exposed via sysfs. This removes the need for secboot to pass around paths like /dev/tpm0or/dev/tpmrm0`.
Whilst the github.com/canonical/go-tpm2/testutil package has been updated to work with tpm2.TPMDevice, and it will be relatively trivial to port secboot to using it, the largest amount of work in secboot will be updating the test harness components to be compatible with it (those in internal/tpm2test).
The text was updated successfully, but these errors were encountered:
Secboot currently accesses the default TPM using the
/dev/tpm0
path directly, which it uses to open an implementation oftpm2.Transport
which is then passed to the deprecatedtpm2.NewTPMContext
API.It should be ported to make use of the
tpm2.TPMDevice
interface which represents a device and is passed to the newertpm2.OpenTPMDevice
API. Thegithub.com/canonical/go-tpm2/linux
package has methods for iterating devices or accessing the default device, and its implementation oftpm2.TPMDevice
provides methods to access the in-kernel resource manager and the physical presence interface (using theppi.PPI
interface) exposed via sysfs. This removes the need for secboot to pass around paths like
/dev/tpm0or
/dev/tpmrm0`.Whilst the
github.com/canonical/go-tpm2/testutil
package has been updated to work withtpm2.TPMDevice
, and it will be relatively trivial to port secboot to using it, the largest amount of work in secboot will be updating the test harness components to be compatible with it (those ininternal/tpm2test
).The text was updated successfully, but these errors were encountered: