swtpm
mortar
swtpm | mortar | |
---|---|---|
14 | 17 | |
526 | 208 | |
- | - | |
7.6 | 5.9 | |
12 days ago | 5 months ago | |
C | Shell | |
GNU General Public License v3.0 or later | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
swtpm
-
Is it possible to run a Windows 11 Virtual Machine on Linux?
Or you can just add a virtual tpm device in virt-manager while setting up the vm using swtpm. It seems to ha e packages on most major distro's.
-
Creating a Qemu Windows 10 VM on Linux
If you want Windows 11 instead for whatever reason, swtpm can emulate a TPM chip for QEMU to use.
-
Work Revived On Parallel CPU Bring-Up To Boot Linux Faster On Large Systems/Servers
You can find the source of software TPM implementations which abide to the official spec such as: https://github.com/stefanberger/swtpm but that has no real bearings on the TPM used on real hardware
-
Windows 11's current .iso file not working on qemu.
I install swtpm and in virt-manager add a TPM 2.0 emulated device and set the secure boot image before I install. This seems to work well enough.
-
Ryzen 7 [email protected], 32 GB RAM... I'm officially ditching Windows
I don't know either, but apparently Microsoft didn't guarantee that 'unsupported' systems would continue to receive system updates. I just use a QEMU VM and swtpm.
-
"vPub v5" opensource online Party! - this Thursday at 4 PM UTC
swtpm - a software Trusted Platform Module emulator and the ways of using it;
-
Fedora considers deprecating legacy BIOS
Seems there are two such projects for that:
https://github.com/stefanberger/swtpm
-
TPM using qemu?
This should work: https://github.com/stefanberger/swtpm/wiki
-
Tpm simulator?
Linux has several TPM emulators. This one is probably the most popular. But here's another for TPM 1.2 only. The main use-case is to emulate TPMs for use with Virtual Machine guests.
-
swtpm-localca exit with status 256:
Other GitHub posts from previous versions seem to have the issue described here but maybe I missed something, https://github.com/stefanberger/swtpm/issues/572 I'm on an arch install and just installed it from pacman.
mortar
-
WTF is a KDF? A startling revelation from a French prison
Bruteforce of such random password is just not plausible and talks about KDF "weakness" is just a distraction. I think most likely it was evil maid attack.
Here are projects which try to mitigate some of evil maid attack risks:
https://github.com/noahbliss/mortar
https://safeboot.dev/
-
Installation with full-disk, two-factor encryption, secure boot, and TPM
Secure boot and TPM support (à la Mortar: https://github.com/noahbliss/mortar)
-
Complying with the future: Secure Boot and TPM unclocking
There are tools that look to be able to automate it: https://github.com/noahbliss/mortar/blob/master/docs/proxmox-install.md
-
Prevent backup of vTPM2.0 state?
I just went through the process of setting up new ubuntu VM's using full root disk LUKS encryption and auto-unlock via Proxmox's vTPM2.0 and UEFI ( via this extremely helpful resource https://github.com/noahbliss/mortar )
-
tpm2 + luks + ubuntu 18 setup?
I have used this project with Debian+proxmox and it's been working great. https://github.com/noahbliss/mortar but I did read the arch wiki a bit which helped my understanding.
-
What do you don't like about Linux? What is Windows doing better?
There's a project called "mortar" (as in, gluing all these bricks together) that was attempting to simplify this. Though it's lost steam, reading through it's simple bash scripts was a great place to start for me. This guide for Fedora also helped a lot.
-
Authenticated Boot and Disk Encryption on Linux
There have been a number of attempts to solve this problem, but the most complete appear to be Mortar (a project I head) and safeboot.dev
I highly recommend taking a look at either of these projects if you want be able to improve both your convenience through auto unlocking, and security through broadened scope of audit.
https://github.com/noahbliss/mortar
https://safeboot.dev
-
Best Evil Maid prototcol for Linux?
Check out mortar. It uses secure boot and TPM along with LUKS. The creator is super helpful and available on the telegram.
-
Mount encrypted volume at boot?
A more advanced approach would be something like mortar to chain-load signed stuff.
-
Will Proxmox be able to run Windows 11?
There seems to be a workable solution out there for 2.0: https://github.com/noahbliss/mortar/blob/master/docs/proxmox-install.md
What are some alternatives?
tpm-emulator - The famous tpm-emulator by Mario Strasser, previously hosted on BerliOs. It supports TPM1.2 only!
sbctl - :computer: :lock: :key: Secure Boot key manager
tpm2-tools - The source repository for the Trusted Platform Module (TPM2.0) tools
clevis - Automated Encryption Framework
tpm2-tss - OSS implementation of the TCG TPM2 Software Stack (TSS2)
linux-secureboot-kit - Tool for complete hardening of Linux boot chain with UEFI Secure Boot
libtpms - The libtpms library provides software emulation of a Trusted Platform Module (TPM 1.2 and TPM 2.0)
solo1 - Solo 1 firmware in C
CloverBootloader - Bootloader for macOS, Windows and Linux in UEFI and in legacy mode
qubes-antievilmaid - Qubes component: antievilmaid
panda - Platform for Architecture-Neutral Dynamic Analysis
better-initramfs - Small and reliable initramfs solution supporting (remote) rescue shell, lvm, dmcrypt luks, software raid, tuxonice, uswsusp and more.