sbctl
sbctl copied to clipboard
Foxboron
:computer: :lock: :key: Secure Boot key manager
Bonjour, I have a system that had Secure Boot previously set up with sbctl. I disabled it, cleared all the keys from my UEFI setup utility (to enter Setup mode),...
A common name of just `Platform Key`, `Database Key`, or `Key Exchange Key` isnʼt very descriptive. If you might have multiple sets of keys for some reason (multiple computers, different...
Adding support for PKCS11 Still need to work out how to actually reference the key objects and generate them. I am currently only testing with a Yubikey but [SoftHSMv2](https://github.com/opendnssec/SoftHSMv2) could...
Allowing drop-in configs (i.e.`/etc/sbctl/sbct.conf.d/*.conf`) would be nice for use in bigger setups, where sbctl is used on different machines with different requirements. For example all machines should get custom db...
After updating to the latest version (0.15.4) and running `sbctl setup --migrate` as instructed, if the PK and/or KEK is not present, the `list-files`, `sign`, `sign-all` and `verify` operations fail...
For systems dual-booting Windows, there are a large number of signed EFI files. Avoid outputting "File has already been signed" for each of them.
The latest (0.15.0+) update runs into breaking tests when vendoring. ``` [ 10s] go test -v ./... [ 10s] # github.com/google/go-tpm-tools/simulator/internal [ 10s] vendor/github.com/google/go-tpm-tools/simulator/internal/internal_cgo.go:44:11: fatal error: Platform.h: No such file...
`Stat` doesn't return `ErrExist` error, so this line is always false. We also don't need any stats for the output file, so we can just try to open the file,...
See: https://github.com/actions/toolkit/blob/main/packages/artifact/docs/faq.md#supported-characters
I've been trying to install sbctl on Fedora Silverblue, but it errors out due to the read-only file system. I managed to add the copr repo by creating a file...
