Post #460927
2026-02-27 16:04 UTC
It's that time again! The systemd v260 release is coming closer. Let's restart the "what's new" series of posts for this iteration! Hence:
1️⃣ Here's the 1st post highlighting key new features of the upcoming v260 release of systemd. #systemd260 #systemd
In v259 we introduced the concept of "NvPCRs", i.e. additional TPM PCRs, that are implemented based on TPM NV Indexes in PCR mode, rather than true PCRs. PCRs are scarce, and this relieves the pressure a bit (not too much though, NV index…
Replies (1)
-
@pid_eins@mastodon.social 2026-02-27 16:09
…space is very scarce too). This opens things up so that we can start measuring more resources. There's one type of resource that is probably the most important one to measure on a modern image-based OSes: the images the OS is composed of, as they are activated. With v260 we are filling this gap, finally, using a new NvPCR defined for this purpose. Whenever a DDI is activated, we'll ensure the root hash and information about the used signing keys for it are measured. This means the…