GNU bug report logs - #63637
[PATCH] gnu: tpm2-tools: New variable

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 63637 in the body.
You can then email your comments to 63637 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Felix Lechner <felix.lechner <at> lease-up.com>
To: guix-patches <at> gnu.org
Cc: Felix Lechner <felix.lechner <at> lease-up.com>
Subject: [PATCH] gnu: tpm2-tools: New variable
Date: Sun, 21 May 2023 23:27:36 -0700

* gnu/packages/hardware.scm (tpm-tools): New variable.
---
 gnu/packages/hardware.scm | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/gnu/packages/hardware.scm b/gnu/packages/hardware.scm
index c23299d1db..f20657cdef 100644
--- a/gnu/packages/hardware.scm
+++ b/gnu/packages/hardware.scm
@@ -61,6 +61,7 @@ (define-module (gnu packages hardware)
   #:use-module (gnu packages gnome)
   #:use-module (gnu packages gtk)
   #:use-module (gnu packages guile)
+  #:use-module (gnu packages haskell-xyz)
   #:use-module (gnu packages high-availability)
   #:use-module (gnu packages libusb)
   #:use-module (gnu packages linux)
@@ -1313,6 +1314,36 @@ (define-public tpm2-tss
 and libtss2-tcti-mssim.")
     (license license:bsd-2)))
 
+(define-public tpm2-tools
+  (package
+    (name "tpm2-tools")
+    (version "5.5")
+    (source
+     (origin
+       (method url-fetch)
+       (uri (string-append "https://github.com/tpm2-software/tpm2-tools/"
+                           "releases/download/" version "/"
+                           "tpm2-tools-" version ".tar.gz"))
+       (sha256
+        (base32 "08y16q92dh7frsyw0zlm3q9gsfqyls0li248s2pgsysk633lknqz"))))
+    (build-system gnu-build-system)
+    (native-inputs (list autoconf
+                         automake
+                         curl
+                         libtool
+                         gnu-gettext
+                         openssl
+                         pandoc
+                         pkg-config
+                         tpm2-tss))
+    (home-page "https://github.com/tpm2-software/tpm2-tools")
+    (synopsis "Tools for the Trusted Platform Module (TPM 2.0)")
+    (description
+     "User tools for the Trusted Computing Group's (TCG) TPM2 Software Stack
+(TSS).  These programs hepl with common tasks such as key management,
+attestation, encryption, and signing.")
+    (license license:bsd-3)))
+
 (define-public libcpuid
   ;; We need to remove blobs from the source, first we have to isolate the blob
   ;; source in build system.

base-commit: 849286ba66c96534bddc04df1a47d5692cbc977e
-- 
2.40.1

Message #8 received at 63637 <at> debbugs.gnu.org (full text, mbox):

From: Felix Lechner <felix.lechner <at> lease-up.com>
To: 63637 <at> debbugs.gnu.org
Subject: For boot-time signature checks (aka "secure boot")
Date: Mon, 22 May 2023 07:46:20 -0700

Hi,

I should have mentioned that the programs can help analyze the TPM 2.0
event log that shows the hashes of so-called Option ROMs. After the
Microblows keys are removed, such embedded firmwares (including,
possibly, on video cards) will only run after their hashes were
enrolled. Not doing so can soft-brick a device.

Kind regards
Felix

Message #11 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Nicolas Goaziou <mail <at> nicolasgoaziou.fr>
To: Felix Lechner via Guix-patches via <guix-patches <at> gnu.org>
Cc: 63637-done <at> debbugs.gnu.org, Felix Lechner <felix.lechner <at> lease-up.com>
Subject: Re: [bug#63637] [PATCH] gnu: tpm2-tools: New variable
Date: Sat, 01 Jul 2023 13:15:10 +0200

Hello,

Felix Lechner via Guix-patches via <guix-patches <at> gnu.org> writes:

> * gnu/packages/hardware.scm (tpm-tools): New variable.

Applied, with the change below. Thank you.

> +    (description
> +     "User tools for the Trusted Computing Group's (TCG) TPM2 Software Stack
> +(TSS).  These programs hepl with common tasks such as key management,
> +attestation, encryption, and signing.")

Descriptions should consist of complete sentences:

  "This package provides user tools for..."

Regards,
-- 
Nicolas Goaziou

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.