koszewscy/tpm2-linux
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Enhance tpm-bootstrap-1password.sh with progress logging for key creation and sealing

Browse Source
This commit is contained in:
slawek
2026-08-29 19:23:29 +02:00
parent 91f1abef8a
commit 949b5763fc
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tpm-bootstrap-1password.sh
+5
View File
@@ -88,13 +88,16 @@ PASSWORD="$(op read "$OP_SECRET_REFERENCE")"
exit 1 exit 1
} }
echo "Creating primary key..." >&2
tpm2_createprimary -C o -c "$WORKDIR/primary.ctx" -Q tpm2_createprimary -C o -c "$WORKDIR/primary.ctx" -Q
echo "Creating PCR policy for ${PCR_LIST}..." >&2
tpm2_createpolicy -Q \ tpm2_createpolicy -Q \
--policy-pcr \ --policy-pcr \
-l "$PCR_LIST" \ -l "$PCR_LIST" \
-L "$WORKDIR/policy.digest" -L "$WORKDIR/policy.digest"
echo "Sealing password..." >&2
printf '%s' "$PASSWORD" | tpm2_create \ printf '%s' "$PASSWORD" | tpm2_create \
-C "$WORKDIR/primary.ctx" \ -C "$WORKDIR/primary.ctx" \
-L "$WORKDIR/policy.digest" \ -L "$WORKDIR/policy.digest" \
@@ -105,6 +108,7 @@ printf '%s' "$PASSWORD" | tpm2_create \
unset PASSWORD unset PASSWORD
echo "Loading sealed object..." >&2
tpm2_load \ tpm2_load \
-C "$WORKDIR/primary.ctx" \ -C "$WORKDIR/primary.ctx" \
-u "$WORKDIR/seal.pub" \ -u "$WORKDIR/seal.pub" \
@@ -112,6 +116,7 @@ tpm2_load \
-c "$WORKDIR/seal.ctx" \ -c "$WORKDIR/seal.ctx" \
-Q -Q
echo "Persisting sealed object at ${HANDLE}..." >&2
tpm2_evictcontrol -C o -c "$WORKDIR/seal.ctx" "$HANDLE" >/dev/null tpm2_evictcontrol -C o -c "$WORKDIR/seal.ctx" "$HANDLE" >/dev/null
echo "Password from ${OP_SECRET_REFERENCE} sealed and persisted at handle ${HANDLE}, bound to PCRs ${PCR_LIST}" echo "Password from ${OP_SECRET_REFERENCE} sealed and persisted at handle ${HANDLE}, bound to PCRs ${PCR_LIST}"