Post #1496661
2026-02-05 07:00 UTC
@pid_eins super interesting. At @ffhl had been brainstorming with @cuechan a while back how one could provision an #OpenWrt based #Freifunk VM. Hadn't heard of #smbios before, but that seems elegant. On the other hand, it would also be interesting to provision an #OpenWrt WLAN router. For that the only option is a USB stick, I guess? Is systemd planing to add USB provisioning support? Is there a recommended/existing (file/filesystem) format for USB provisioning?
Replies (1)
-
@pid_eins@mastodon.social 2026-02-05 08:28
@T_X @ffhl @cuechan so the question is how to make trust work in that case, i.e. how to decide that importing provisioning from some USB medium is actually OK and safe. We kinda have three mechanisms there, either implemented, or planned. 1) systemd credentials: these can be locked to the TPM. Which means that for provisioning settings you need access to the TPM, which you can easily do in an installer, but not offline/remote. 2) systemd confext, which can be verity signed by some acceptable key