mirror of
https://github.com/systemd/systemd-stable.git
synced 2024-12-22 13:33:56 +03:00
2d495affef
If everything points to the fact that TPM2 should work, but then the
driver fails to initialize we should handle this gracefully and not
cause failing services all over the place.
Fixes: #25700
(cherry picked from commit 0318d54539)
24 lines
849 B
SYSTEMD
24 lines
849 B
SYSTEMD
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
#
|
|
# This file is part of systemd.
|
|
#
|
|
# systemd is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU Lesser General Public License as published by
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
|
# (at your option) any later version.
|
|
|
|
[Unit]
|
|
Description=TPM2 PCR Barrier (User)
|
|
Documentation=man:systemd-pcrphase.service(8)
|
|
After=remote-fs.target remote-cryptsetup.target
|
|
Before=systemd-user-sessions.service
|
|
AssertPathExists=!/etc/initrd-release
|
|
ConditionSecurity=tpm2
|
|
ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
RemainAfterExit=yes
|
|
ExecStart={{ROOTLIBEXECDIR}}/systemd-pcrphase --graceful ready
|
|
ExecStop={{ROOTLIBEXECDIR}}/systemd-pcrphase --graceful shutdown
|