Skip to content

Commit

Permalink
Merge 'master' of git@github.com:savchenko/debian-qemu-tpm
Browse files Browse the repository at this point in the history
  • Loading branch information
savchenko committed Apr 15, 2021
2 parents d5058ed + 7c4d607 commit b1dfe1f
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
Static builds of `libtpms` v0.7.7 and `swtpm` v0.5.2 for Debian Bullseye.

#### Configuration details
- libtpms: `--prefix=/usr --enable-static --with-tpm2 --with-openssl --enable-sanitizers`.
- libtpms: `--prefix=/usr --enable-static --with-tpm2 --with-openssl`
- swtpm: `--prefix=/usr --enable-static --with-seccomp`

`/usr` prefix is neccessary so that everything works with the bundled AppArmor profile: `/etc/apparmor.d/abstractions/libvirt-qemu`.
Expand All @@ -19,7 +19,6 @@ Static builds of `libtpms` v0.7.7 and `swtpm` v0.5.2 for Debian Bullseye.
3. Install the Python modules system-wide:
- `./swtpm-0.5.2/src/swtpm_setup/`
- `./swtpm-0.5.2/samples/`
4. Adjust `libvirt` AppArmor profile so that it can launch `swtpm*` binaries.

If you stumble upon "permission denied" errors - enable log level 3+ in `/etc/libvirt/libvirtd.conf` and trace where it fails.

Expand Down

0 comments on commit b1dfe1f

Please sign in to comment.