diff --git a/SOURCES/0005-Include-tpm2_getcap-as-dracut-required-binary.patch b/SOURCES/0005-Include-tpm2_getcap-as-dracut-required-binary.patch new file mode 100644 index 0000000..69d248b --- /dev/null +++ b/SOURCES/0005-Include-tpm2_getcap-as-dracut-required-binary.patch @@ -0,0 +1,36 @@ +From fc371d25a72806109e9a5c0205d67ba2232a6f17 Mon Sep 17 00:00:00 2001 +From: rpm-build +Date: Wed, 20 Nov 2024 18:45:56 +0100 +Subject: [PATCH] Include tpm2_getcap as dracut required binary + +--- + src/luks/dracut/clevis-pin-tpm2/module-setup.sh.in | 6 ++++-- + 1 file changed, 4 insertions(+), 2 deletions(-) + +diff --git a/src/luks/dracut/clevis-pin-tpm2/module-setup.sh.in b/src/luks/dracut/clevis-pin-tpm2/module-setup.sh.in +index 5ff0640..723df7a 100755 +--- a/src/luks/dracut/clevis-pin-tpm2/module-setup.sh.in ++++ b/src/luks/dracut/clevis-pin-tpm2/module-setup.sh.in +@@ -19,7 +19,8 @@ + # + + check() { +- require_binaries clevis-decrypt-tpm2 tpm2_createprimary tpm2_flushcontext tpm2_load tpm2_unseal || return 1 ++ require_binaries clevis-decrypt-tpm2 tpm2_createprimary tpm2_flushcontext \ ++ tpm2_load tpm2_unseal tpm2_pcrread tpm2_getcap || return 1 + require_any_binary tpm2_pcrread tpm2_pcrlist || return 1 + return 0 + } +@@ -30,7 +31,8 @@ depends() { + } + + install() { +- inst_multiple clevis-decrypt-tpm2 tpm2_createprimary tpm2_flushcontext tpm2_load tpm2_unseal ++ inst_multiple clevis-decrypt-tpm2 tpm2_createprimary tpm2_flushcontext \ ++ tpm2_load tpm2_unseal tpm2_getcap + inst_multiple -o tpm2_pcrread tpm2_pcrlist + inst_libdir_file "libtss2-tcti-device.so*" + } +-- +2.47.0 + diff --git a/SPECS/clevis.spec b/SPECS/clevis.spec index 4dc2288..b9b70fe 100644 --- a/SPECS/clevis.spec +++ b/SPECS/clevis.spec @@ -2,7 +2,7 @@ ## (rpmautospec version 0.6.5) ## RPMAUTOSPEC: autorelease, autochangelog %define autorelease(e:s:pb:n) %{?-p:0.}%{lua: - release_number = 6; + release_number = 7; base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}")); print(release_number + base_release_number - 1); }%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}} @@ -22,6 +22,7 @@ Patch0: 0001-PKCS-11-pin-fix-dracut-for-unconfigured-device.patch Patch1: 0002-Fix-potential-race-condition.patch Patch2: 0003-Fix-to-start-pcscd-appropriately.patch Patch3: 0004-tpm2-use-first-pcr-algorithm-bank-supported-by.patch +Patch4: 0005-Include-tpm2_getcap-as-dracut-required-binary.patch BuildRequires: git-core BuildRequires: gcc @@ -230,6 +231,9 @@ systemctl preset %{name}-luks-askpass.path >/dev/null 2>&1 || : %changelog ## START: Generated by rpmautospec +* Fri Nov 22 2024 Sergio Arroutbi - 21-7 +- Include tpm2_getcap as dracut required binary + * Tue Nov 05 2024 Sergio Arroutbi - 21-6 - TPM2 use first PCR algorithm bank supported by TPM