Post #1496662
2026-02-05 08:28 UTC
@T_X @ffhl @cuechan so the question is how to make trust work in that case, i.e. how to decide that importing provisioning from some USB medium is actually OK and safe. We kinda have three mechanisms there, either implemented, or planned. 1) systemd credentials: these can be locked to the TPM. Which means that for provisioning settings you need access to the TPM, which you can easily do in an installer, but not offline/remote. 2) systemd confext, which can be verity signed by some acceptable key
Replies (1)
-
@pid_eins@mastodon.social 2026-02-05 08:29
@T_X @ffhl @cuechan – but that of course requires that there's agreement that settings can be signed with that key and that the OS accepts exactly that key. Which is difficult to bootstrap everywhere where owner of the OS and owner of the config are different people. Option 3) is hence probably the most relevant for many "tinkerer" situations: we intend to add a switch to systemd that says that during first boot (and only during first boot) we'll import certain systemd credentials even without…