From a67a50e8f4a3d19713fe9b84653616fcba5ae14c Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Fri, 14 Oct 2022 21:21:46 +0200 Subject: [PATCH] update TODO --- TODO | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/TODO b/TODO index d95cbfaeb78..e78cfa15962 100644 --- a/TODO +++ b/TODO @@ -451,9 +451,8 @@ Features: and via the time window TPM logic invalidated if node doesn't keep itself updated, or becomes corrupted in some way. -* Always measure the LUKS rootfs volume key into PCR 15, and derive the machine - ID from it securely. This would then allow us to bind secrets a specific - system securely. +* in the initrd, once the rootfs encryption key has been measured to PCR 15, + derive default machine ID to use from it, and pass it to host PID 1. * tree-wide: convert as much as possible over to use sd_event_set_signal_exit(), instead of manually hooking into SIGINT/SIGTERM