Jarkko Sakkinen
Posts
5017Following
329Followers
499OpenPGP: 3AB05486C7752FE1
Jarkko Sakkinen
jarkko
Edited yesterday
Now it hit me what I was doing wrong in TPM2 asymmetric keys.
Introducing new key types was a wrong strategy. Instead, pre-existing ECC and RSA key types should be layered i.e., you turn "TPM2 magic switch" on and kernel generates import blob etc. dance behind the curtains.
This has numerous benefits. E.g., there can be then also "TEE magic switch" depending on platform and generally speaking this is the best for users as they don't need to overturn their configuration.
#linux #kernel #tpm
Introducing new key types was a wrong strategy. Instead, pre-existing ECC and RSA key types should be layered i.e., you turn "TPM2 magic switch" on and kernel generates import blob etc. dance behind the curtains.
This has numerous benefits. E.g., there can be then also "TEE magic switch" depending on platform and generally speaking this is the best for users as they don't need to overturn their configuration.
#linux #kernel #tpm
0
0
1
Jarkko Sakkinen
jarkko
My friend Tuomo wrote a window manager called 'pwm' during early 00's. I liked the idea of attaching multiple client windows to a single frame much more than tiling window managers. I used that wm for quite a while and wish that someone would bring that concept back.
2
1
2
Jarkko Sakkinen
jarkko
@pinkforest nope, i know it exist but have not had any use on what i do :-)
0
0
0
Jarkko Sakkinen
jarkko
Edited 3 days ago
One reason I've stuck on ext4 is that I also run Bitwig Studio on my Linux machine, and generally speaking ext4 has more predictable latency (and more options for recovering data). Ultimately the choice file system is a throughput vs latency question, and this is probably also why Apple never migrated from HFS(+) to ZFS :-)
1
0
0
Jarkko Sakkinen
jarkko
Edited 4 days ago
Applied a largeish patch [1] to my master:
1. 11 files changed, 508 insertions(+), 566 deletions(-)
2. https://lore.kernel.org/linux-integrity/20251206113110.1793407-4-jarkko@kernel.org/
There's no really sane way to split this so thus I thought it is good idea to early merge it in the beginning of the release cycle in order to maximize coverage :-)
1. 11 files changed, 508 insertions(+), 566 deletions(-)
2. https://lore.kernel.org/linux-integrity/20251206113110.1793407-4-jarkko@kernel.org/
There's no really sane way to split this so thus I thought it is good idea to early merge it in the beginning of the release cycle in order to maximize coverage :-)
0
0
0
Jarkko Sakkinen
jarkko
Phew, total 4 separate pull requests for 6.19, all landed without complains :-)
0
0
1
Jarkko Sakkinen
jarkkoAwesome, it went through first time. Finally had time to actually enable secure boot with sbctl.
Here’s what I did:
- Enabled secure boot in custom mode (i.e., not standard mode) from BIOS settings.
- Erased all keys. This triggers so called “setup mode” for the next boot.
- Typed bunch of random commands :-)
I did the script couple of weeks ago but did not have time to test it live (until now).
1
0
2
Jarkko Sakkinen
jarkko
Just like there is this half-insulting term "SJW", or "social justice warrior", there should another term "NWW" aka "non-woke warrior" IMHO.
... when I was young IDEs had NON-WOKE names such as "Code Warrior" ;-)
... when I was young IDEs had NON-WOKE names such as "Code Warrior" ;-)
0
0
0
Jarkko Sakkinen
jarkko
alias readelf='readelf -W'
like the first thing to ever do with readelf ;-)
like the first thing to ever do with readelf ;-)
0
0
0
Fixed some low-hanging fruit: https://lore.kernel.org/linux-integrity/20251205040021.207369-1-jarkko@kernel.org/T/#t
1
0
0
Jarkko Sakkinen
jarkko
This kernel patch embeds an extension for the TPMKey specification:
https://lore.kernel.org/linux-integrity/20251205030205.140842-3-jarkko@kernel.org/
I.e. optional 'parentName' attribute. It also populates kernel's ASN.1 definition with the full spec. It's a bottleneck in the ASN.1 format.
#linux #kernel #tpm
https://lore.kernel.org/linux-integrity/20251205030205.140842-3-jarkko@kernel.org/
I.e. optional 'parentName' attribute. It also populates kernel's ASN.1 definition with the full spec. It's a bottleneck in the ASN.1 format.
#linux #kernel #tpm
1
0
0
Jarkko Sakkinen
jarkko
UserHasNoMailboxAndNoLicenseAssignedError
Microsoft clearly makes the best error codes.
Microsoft clearly makes the best error codes.
0
0
2