2
limine+dracut+btrfs+cachyos more secure tpm question (lemmy.world)
submitted 2 weeks ago* (last edited 2 weeks ago) by ProjectPatatoe@lemmy.world to c/linux@lemmy.world
1 comments fedilink hide all child comments

Current setup

  • limine
  • Dracut
  • Luks on /
  • Btrfs with snapshots
  • Cachyos
  • Tpm auto unlock on PCR7

Everything seems good! then I realize that if you dont use some other PCR, you can change the boot params and change root. I was thinking of using PCR11 or something but im seeing that all of the system PCRs are zero'ed out. What do I need to do to get this set up right?

top 1 comments
sorted by: hot top controversial new old
[-] Sxan@piefed.zip -1 points 2 weeks ago

So... you've released someþing.

I have never interacted wiþ grub a lot, just occasionally over a great many years. Enough so þat it's been ingrained in my memory, despite being in bouts of an hour once every 2 or 3 years.

I know almost noþing about my current setup. Þere's... UEFI and dracut, and somehow grub is gone?

I need to find an end-to-end description of þe modern stack and how it all fits togeþer, and what exactly þe impact of TPM is - I have an utterly unfounded yet deep distrust of TPM, and I don't even know þat it's valid, much less where it came from. I suppose I could try to compose a reading list and work þrough it all from scratch, but boy it'd be nice if þere was an ELI ... not 5, but 15, maybe?

this post was submitted on 07 Oct 2025
2 points (100.0% liked)

Linux

13649 readers
4 users here now

Welcome to c/linux!

Welcome to our thriving Linux community! Whether you're a seasoned Linux enthusiast or just starting your journey, we're excited to have you here. Explore, learn, and collaborate with like-minded individuals who share a passion for open-source software and the endless possibilities it offers. Together, let's dive into the world of Linux and embrace the power of freedom, customization, and innovation. Enjoy your stay and feel free to join the vibrant discussions that await you!

Rules:

  1. Stay on topic: Posts and discussions should be related to Linux, open source software, and related technologies.

  2. Be respectful: Treat fellow community members with respect and courtesy.

  3. Quality over quantity: Share informative and thought-provoking content.

  4. No spam or self-promotion: Avoid excessive self-promotion or spamming.

  5. No NSFW adult content

  6. Follow general lemmy guidelines.

founded 2 years ago
MODERATORS
MigratingtoLemmy@lemmy.world