2025-01-05 20:04:46 +03:00
|
|
|
# dracut-sshd-tpm
|
|
|
|
|
|
|
|
TPM sealing of [dracut-sshd](https://github.com/gsauthof/dracut-sshd) host keys
|
|
|
|
|
|
|
|
## Configuration
|
|
|
|
|
|
|
|
The default configuration is placed into /etc/default/dracut-sshd-tpm. You will
|
|
|
|
need to configure, at minimum, which registers to use while sealing the host
|
|
|
|
keys (the `tpm_pcrs` value).
|
|
|
|
|
|
|
|
## Building
|
|
|
|
|
|
|
|
```sh
|
|
|
|
dnf install rpkg git
|
|
|
|
git clone https://git.slonk.ing/slonk/dracut-sshd-tpm
|
|
|
|
cd dracut-sshd-tpm
|
|
|
|
rpkg local
|
|
|
|
```
|
2025-01-05 23:40:46 +03:00
|
|
|
|
|
|
|
The resulting package's path will be output to the console.
|