agama-project / agama / 25854708271

77%

master: 84%

Build Type

push

github

Committed by web-flow

Commit Message

Add TPM BLS encryption method support (#3448)

Implements TPM-based encryption for BLS bootloaders (grub2-bls,
systemd-boot) alongside the existing TPM FDE for grub2.

In the config file, the TPM unlocking is configured as follows:

~~~json
{
  "encryption": {
    "luks2": {
      "password": "notsecret",
      "tpm": true
    }
  }
}
~~~

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Notes for reviewers:

* Tests are failing because they require changes in
https://github.com/yast/yast-storage-ng/pull/1426.
* The target is a feature branch and the changelog entry will be added
later.

Coverage Stats

146 of 0 new or added lines in 0 files covered. (NaN%)

3 existing lines in 2 files now uncovered.

8381 of 9435 relevant lines covered (88.83%)

111.33 hits per line