agama-project / agama / 25854708271

77%

master: 81%

push

github

Add TPM BLS encryption method support (#3448)

Implements TPM-based encryption for BLS bootloaders (grub2-bls,
systemd-boot) alongside the existing TPM FDE for grub2.

In the config file, the TPM unlocking is configured as follows:

~~~json
{
  "encryption": {
    "luks2": {
      "password": "notsecret",
      "tpm": true
    }
  }
}
~~~

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Notes for reviewers:

* Tests are failing because they require changes in
https://github.com/yast/yast-storage-ng/pull/1426.
* The target is a feature branch and the changelog entry will be added
later.

146 of 146 new or added lines in 26 files covered. (100.0%)

8381 of 9435 relevant lines covered (88.83%)

111.33 hits per line