All pull requests

Pull requests

• change tpm2.PropertyHRPersistentMin from 7 to 2 for some non PC-Client TPMs

  #587·antlassagne opened Nov 12, 2026Collaborator·

  ·
  1

  1

• efi,efi/preinstall: Support firmware that implements timestamp revocation or OS recovery

  #580·cbguder opened Oct 19, 2026·

  ·
  1

  4

• luks2: allow discard on activated containers

  #577·valentindavid opened Oct 7, 2026Member·

  ·
  1

  

• Add reencryption

  #569·frederic-hoerni opened Sep 8, 2026Collaborator·

  ·
  56

  

• efi/preinstall: support NVIDIA DGX Spark and RTX Spark

  #568·alexclewontin opened Sep 4, 2026Member·3/3·

  ·
  4

• efi: implement platform-agnostic arm64 host security checks

  #566·alexclewontin opened Sep 4, 2026Member·2/3·

  ·
  12

• efi: prefer firmware db for shim image verification

  #561·sevenuthsky opened Aug 20, 2026·

  ·
  1

• efi: support AMD TSME and HP pre-OS PCR measurements

  #556·ebrig opened Jul 26, 2026·

  ·
  13

• Changes going from 77bc2457cc76 (2.75.2) to 3f8b98c2db70 (2.74.1)

  #545·ernestl opened Apr 30, 2026Member·

  ·
  4

• [WIP] efi,efi/preinstall: Add support for systems that support timestamp revocation

  #544·chrisccoulson opened Apr 29, 2026Contributor·

  ·

• Add AuthRequestor that can return credentials from systemd creds

  #523·chrisccoulson opened Mar 6, 2026Contributor·

  ·
  2

• fix: update systemd-cryptsetup path for snap environments

  #505·gabelluardo opened Feb 9, 2026Member·

  ·
  3

• fix: check stderr output deactivating luks volume

  #500·gabelluardo opened Feb 2, 2026Member·

  ·

• Add the new tpm2-fido2 platform

  #446·sespiros opened Jul 16, 2025·3 tasks·

  ·

• preinstall: Return warnings as errors if RunChecks is already going to return an error

  blockedpreinstall-checks
  #404·chrisccoulson opened Apr 16, 2025Contributor·

  ·
  5

• tpm2: Make it possible to customize the name algorithm for TPM sealed keys

  nth-26.04.1
  #374·kukrimate opened Jan 29, 2025·

  ·
  2

• build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0

  dependencies
  #335·dependabot[bot] opened Oct 1, 2024Bot·

  ·

• Replace xerrors

  #292·sespiros opened Mar 14, 2024·

  ·

• Keydata testsuite mockPlatformKeyDataHandler use GCM

  #285·sespiros opened Feb 20, 2024·

  ·

• Print part of TCG log when we could not unseal

  #218·alfonsosanchezbeato opened Nov 11, 2022Contributor·

  ·
  3

• tpm2: Refactor unsealing code

  #214·sespiros opened Sep 26, 2022·

  ·

• doc: introduce documentation

  #169·stulluk opened Aug 21, 2021·

  ·
  1

• Expose the TPM error when the public part of the elliptic key is invalid *debug only PR*

  #146·chrisccoulson opened Apr 30, 2021Contributor·

  ·
  2

• Add validate api and clean up unseal errors

  #112·chrisccoulson opened Sep 22, 2020Contributor·

  ·

• Remove some explicit conversions that aren't necessary

  #94·chrisccoulson opened Aug 24, 2020Contributor·

  ·