tpmd (0.1.1~nightly20261108.r48+ge278c9a)

Published 2026-11-08 11:35:18 +01:00 by Xowap

Installation

sudo curl  -o /etc/apt/keyrings/forgejo-OffworldNexus.asc
echo "deb [signed-by=/etc/apt/keyrings/forgejo-OffworldNexus.asc]  $distribution $component" | sudo tee -a /etc/apt/sources.list.d/forgejo.list
sudo apt update

Choose $distribution and $component from the list below.

sudo apt install tpmd=0.1.1~nightly20261108.r48+ge278c9a

Repository info

Distributions
any-distro
Components
nightly
Architectures
amd64, arm64

About this package

local key agent that signs on behalf of local applications tpmd owns private signing keys and signs on behalf of local applications over a local socket, so that a consumer never sees key material: it asks for a signature and gets one, or gets a refusal that says why. . Keys live at a security level — file, keyring, sealed or hardware — and the daemon selects the strongest level the machine can actually reach. It refuses to serve anything below the floor it was started with rather than quietly handing out a weaker key, it never re-keys a device to satisfy a request, and it never replaces a lost key with a weaker one. . This package installs the system-wide agent: a socket-activated service that serves every local user and authorises each caller from kernel peer credentials. A per-user agent can also be run by hand; the toy consumer used for end-to-end checks is built from the source tree rather than shipped. . The backends above the guaranteed `file` level are installed separately, one package each (recommended above), and are loaded by the daemon from /usr/lib/tpmd/backends at run time. The `file` backend is built in and is the floor: a machine with nothing else installed still serves, at the level that promises least.

Dependencies

libc6 (>= 2.34)
libgcc-s1 (>= 4.2)
Details
Debian
2026-11-08 11:35:18 +01:00
14
Rémy Sanchez
4.2 MiB
Assets (2)
Versions (5) View all