tpmd-backend-linux-tpm (0.1.1~nightly20261108.r48+ge278c9a)

Published 2026-11-08 11:35:14 +01:00 by Xowap

Installation

sudo curl  -o /etc/apt/keyrings/forgejo-OffworldNexus.asc
echo "deb [signed-by=/etc/apt/keyrings/forgejo-OffworldNexus.asc]  $distribution $component" | sudo tee -a /etc/apt/sources.list.d/forgejo.list
sudo apt update

Choose $distribution and $component from the list below.

sudo apt install tpmd-backend-linux-tpm=0.1.1~nightly20261108.r48+ge278c9a

Repository info

Distributions
any-distro
Components
nightly
Architectures
amd64, arm64

About this package

Linux TPM 2.0 backend for tpmd tpmd owns private signing keys and signs on behalf of local applications. . This package provides the `sealed` and `hardware` rungs of tpmd's security ladder, through a TPM 2.0 device: at `sealed` the key scalar is wrapped by the TPM and inert anywhere else, and at `hardware` the key never leaves the TPM at all, not even to sign. . The backend is a plugin, loaded by tpmd from /usr/lib/tpmd/backends. It owns nothing but that file and works whatever the daemon's version, so installing or removing it never disturbs the agent's own files, and a machine whose TPM cannot be opened simply does not offer these rungs. Access to the device is granted by the daemon's package (the tss user and the udev rule), not here.

Dependencies

libc6 (>= 2.34)
libgcc-s1 (>= 4.2)