Provider for Plainbox - TPM2

Merge ~sylvain-pineau/plainbox-provider-tpm2:pcr0_mismatch into plainbox-provider-tpm2:master

  1. Git
  2. lp:~sylvain-pineau/plainbox-provider-tpm2
  3. pcr0_mismatch
  4. Merge into master
Proposed by Sylvain Pineau
Status: Merged
Approved by: Sylvain Pineau
Approved revision: 19f6e100eaee247660b87df9ceefdd6120aab4f5
Merged at revision: bce389deee004f3df8a1f3b61734bbdd24e1e2b1
Proposed branch: ~sylvain-pineau/plainbox-provider-tpm2:pcr0_mismatch
Merge into: plainbox-provider-tpm2:master
Diff against target: 20 lines (+12/-0)
1 file modified
units/tpm2_4.1.1.pxu (+12/-0)
Reviewer Review Type Date Requested Status
Sylvain Pineau (community) Approve
Review via email: mp+383402@code.launchpad.net

Description of the change

Add a new tpm2 test to check the PCR0 reconstruction from bios event logs

See https://github.com/fwupd/fwupd/wiki/TPM-PCR0-differs-from-reconstruction

To post a comment you must log in.
Revision history for this message
Sylvain Pineau (sylvain-pineau) wrote :

self-approved

review: Approve

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1diff --git a/units/tpm2_4.1.1.pxu b/units/tpm2_4.1.1.pxu
2index a092629..c09a617 100644
3--- a/units/tpm2_4.1.1.pxu
4+++ b/units/tpm2_4.1.1.pxu
5@@ -734,3 +734,15 @@ command:
6 INTEGRATION_TEST_PATH=$PLAINBOX_PROVIDER_DATA/tpm2-tools-4.1.1/integration
7 export PATH=$INTEGRATION_TEST_PATH:$PATH
8 TPM2TOOLS_TEST_TCTI="device:/dev/tpmrm0" bash -x $INTEGRATION_TEST_PATH/tests/verifysignature.sh
9+
10+id: tpm2.0_4.1.1/pcr0_mismatch_check
11+category_id: tpm2
12+plugin: shell
13+imports: from com.canonical.plainbox import manifest
14+requires: manifest.has_tpm2_chip == 'True'
15+estimated_duration: 2
16+_summary: Check the reconstruction of PCR0 using TPM event log
17+user: root
18+command:
19+ fwupdmgr get-devices
20+ fwupdmgr get-devices | ( grep 'TPM PCR0 differs from reconstruction' || exit 0 && exit 1)

Subscribers

People subscribed via source and target branches

to all changes: