FS#70247 - [systemd] add tpm2-tss in make dependencies for systemd 248

Attached to Project: Arch Linux
Opened by Damjan Georgievski (damjan) - Wednesday, 31 March 2021, 17:04 GMT
Last edited by Christian Hesse (eworm) - Thursday, 01 April 2021, 19:43 GMT
Task Type Feature Request
Category Packages: Testing
Status Closed
Assigned To Christian Hesse (eworm)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

systemd 248 can now use fido2 or tpm2 devices to unlock LUKS2 volumes.

these features will be enabled if we add tpm2-tss and libfido2 as make-dependencies. However, only libfido2 is enabled in testing/systemd 248-1
the libraries are used with dlopen(), so they are not hard runtime dependencies, but should be optional.

more info at:
http://0pointer.net/blog/unlocking-luks2-volumes-with-tpm2-fido2-pkcs11-security-hardware-on-systemd-248.html
https://github.com/systemd/systemd/blob/v248/NEWS#L99

tpm2-tss should be added as well.
This task depends upon

Closed by  Christian Hesse (eworm)
Thursday, 01 April 2021, 19:43 GMT
Reason for closing:  Implemented
Additional comments about closing:  systemd 248-2
Comment by loqs (loqs) - Wednesday, 31 March 2021, 17:28 GMT
libfido2 support was added in [1].

See also  FS#68823 

[1] https://github.com/archlinux/svntogit-packages/commit/232976442653afac8c702f57978c5f30d71a30de
Comment by Damjan Georgievski (damjan) - Wednesday, 31 March 2021, 18:39 GMT
  • Field changed: Percent Complete (100% → 0%)
> Please check the current package in testing to see if features are already implemented, before reporting feature requests to implement them.

sorry. I did check the testing package and it failed for my TPM2 use-case.

I've opportunistically added fido2 in my bug report too. I shouldn't have.

can we edit this RFE for tpm2 only?
Comment by Eli Schwartz (eschwartz) - Wednesday, 31 March 2021, 18:42 GMT
  • Field changed: Summary ([systemd] add tpm2/fido2 in make dependencies for systemd 248 → [systemd] add fido2 in make dependencies for systemd 248)
  • Field changed: Details
OK, thanks for clarifying.
Comment by Eli Schwartz (eschwartz) - Wednesday, 31 March 2021, 18:43 GMT
  • Field changed: Summary ([systemd] add fido2 in make dependencies for systemd 248 → [systemd] add tpm2-tss in make dependencies for systemd 248)
Wrong summary change...

Loading...