Skip to content

canonical/secboot

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1,658 Commits
.github/workflows
.github/workflows
 
 
bootscope
bootscope
 
 
cmd
cmd
 
 
efi
efi
 
 
hooks
hooks
 
 
internal
internal
 
 
luks2
luks2
 
 
plainkey
plainkey
 
 
tools
tools
 
 
tpm2
tpm2
 
 
.gitignore
.gitignore
 
 
COPYING
COPYING
 
 
Makefile
Makefile
 
 
README.md
README.md
 
 
activate.go
activate.go
 
 
activate_external_keys.go
activate_external_keys.go
 
 
activate_options.go
activate_options.go
 
 
activate_options_test.go
activate_options_test.go
 
 
activate_state.go
activate_state.go
 
 
activate_state_test.go
activate_state_test.go
 
 
activate_test.go
activate_test.go
 
 
argon2.go
argon2.go
 
 
argon2_out_of_process_support.go
argon2_out_of_process_support.go
 
 
argon2_out_of_process_support_sync.go
argon2_out_of_process_support_sync.go
 
 
argon2_out_of_process_support_sync_test.go
argon2_out_of_process_support_sync_test.go
 
 
argon2_out_of_process_support_test.go
argon2_out_of_process_support_test.go
 
 
argon2_test.go
argon2_test.go
 
 
auth_requestor.go
auth_requestor.go
 
 
auth_requestor_auto.go
auth_requestor_auto.go
 
 
auth_requestor_auto_test.go
auth_requestor_auto_test.go
 
 
auth_requestor_plymouth.go
auth_requestor_plymouth.go
 
 
auth_requestor_plymouth_test.go
auth_requestor_plymouth_test.go
 
 
auth_requestor_systemd.go
auth_requestor_systemd.go
 
 
auth_requestor_systemd_test.go
auth_requestor_systemd_test.go
 
 
auth_requestor_test.go
auth_requestor_test.go
 
 
container.go
container.go
 
 
container_test.go
container_test.go
 
 
crypt.go
crypt.go
 
 
crypt_test.go
crypt_test.go
 
 
entropy.go
entropy.go
 
 
entropy_test.go
entropy_test.go
 
 
export_test.go
export_test.go
 
 
get-deps
get-deps
 
 
go.mod
go.mod
 
 
go.sum
go.sum
 
 
kdf.go
kdf.go
 
 
keydata.go
keydata.go
 
 
keydata_file.go
keydata_file.go
 
 
keydata_file_test.go
keydata_file_test.go
 
 
keydata_legacy.go
keydata_legacy.go
 
 
keydata_legacy_test.go
keydata_legacy_test.go
 
 
keydata_luks.go
keydata_luks.go
 
 
keydata_luks_test.go
keydata_luks_test.go
 
 
keydata_test.go
keydata_test.go
 
 
keyring.go
keyring.go
 
 
keyring_test.go
keyring_test.go
 
 
pbkdf2.go
pbkdf2.go
 
 
pbkdf2_test.go
pbkdf2_test.go
 
 
pin.go
pin.go
 
 
pin_test.go
pin_test.go
 
 
platform.go
platform.go
 
 
platform_test.go
platform_test.go
 
 
run-tests
run-tests
 
 
secboot_test.go
secboot_test.go
 
 
snap.go
snap.go
 
 
storage.go
storage.go
 
 
storage_test.go
storage_test.go
 
 

Repository files navigation

secboot

A Go library for managing TPM-backed encrypted disks on Linux operating systems.

Features

  • System installation & maintenance:

    • Do pre-install platform compatibility checks
    • Initialize the TPM
    • Seal a LUKS passphrase within the TPM
    • Update sealing policy (typically after platform or software update)
    • Manage TPM lockout (set authValue, reset)
    • Compute PCR profiles
    • Manage recovery keys of LUKS containers (create, list, delete)

  • System boot:

    • Unseal
    • Attempt various unlocking paths (TPM-backed, with PIN, with passphrase, recovery...)

  • Other useful functions

    • Get entropy of a PIN or passphrase
    • Access to UEFI variables PK, KEK, Db, Dbx

License

Secboot is licensed under the GNU General Public License version 3.

See the COPYING file for more details.

About

No description, website, or topics provided.

Resources

Readme

License

GPL-3.0 license
Activity
Custom properties

Stars

21 stars

Watchers

4 watching

Forks

24 forks
Report repository

Releases 1

test-efi-fde-compat v1 Latest
Oct 21, 2025

Packages

 
 
 

Contributors

Languages