Skip to content

Commit 39584f5

Browse files
committed
Add swtpm package for easier TPM usage
This doesn't make using a TPM with QEMU any more ergonomic, but it does make it a lot easier to pre-launch a TPM sidecar container that shares a unix socket with a QEMU container such that running a VM with a TPM *is* easier (and it's really tiny / low storage cost). See also https://qemu-project.gitlab.io/qemu/specs/tpm.html#the-qemu-tpm-emulator-device
1 parent 36643f0 commit 39584f5

11 files changed

+33
-0
lines changed

7.2/Dockerfile

+3
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

7.2/Dockerfile.native

+3
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

8.2/Dockerfile

+3
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

8.2/Dockerfile.native

+3
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

9.0/Dockerfile

+3
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

9.0/Dockerfile.native

+3
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

9.1/Dockerfile

+3
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

9.1/Dockerfile.native

+3
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

9.2-rc/Dockerfile

+3
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

9.2-rc/Dockerfile.native

+3
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

Dockerfile.template

+3
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,9 @@ RUN set -eux; \
2626
riscv64: "opensbi u-boot-qemu",
2727
# TODO add u-boot-qemu to more arches? https://packages.debian.org/bookworm/u-boot-qemu
2828
} -}}
29+
# include "swtpm" for TPM emulation -- not automatically launched, but small and useful for running a TPM sidecar container (https://qemu-project.gitlab.io/qemu/specs/tpm.html#the-qemu-tpm-emulator-device)
30+
apt-get install -y --no-install-recommends swtpm; \
31+
# install "firmware" packages (easier UEFI, etc)
2932
{{ if env.variant == "native" then ( -}}
3033
arch="$(dpkg --print-architecture)"; \
3134
case "$arch" in \

0 commit comments

Comments
 (0)