mutantmonkey/mkinitcpio-antievilmaid
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity
Anti Evil Maid support for Arch Linux's mkinitcpio
10 commits 1 branch 0 tags 29 KiB
  • Shell 100%
Find a file
Exact
mutantmonkey 0cf16a2305 remove PKGBUILD 
This is tracked separately now.
2015-06-08 21:47:36 -07:00
69-anti-evil-maid.rules initial commit 2012-10-16 02:24:26 -04:00
hook_antievilmaid initial commit 2012-10-16 02:24:26 -04:00
hosts initial commit 2012-10-16 02:24:26 -04:00
install_antievilmaid initial commit 2012-10-16 02:24:26 -04:00
passwd initial commit 2012-10-16 02:24:26 -04:00
README.md update readme for new mkinitcpio hooks 2013-03-30 03:29:35 -04:00
shadow initial commit 2012-10-16 02:24:26 -04:00

README.md

mkinitcpio-antievilmaid

This mkinitcpio hook allows for Anti Evil Maid support for devices with a TPM on Arch Linux and other distributions that build their initramfs using mkinitcpio. It is essentially a port of the Dracut module by Invisible Things Lab to mkinitcpio.

Prerequisites

Usage

  1. Prepare a USB stick using the Anti Evil Maid utility.
  2. Add the antievilmaid hook to your /etc/mkinitcpio.conf. It needs to be placed before the encrypt hook to be effective, and you should also make sure that you have the udev and usb hooks before it. For example,
HOOKS="base consolefont keymap udev autodetect block antievilmaid encrypt lvm2 filesystems keyboard fsck"
  1. Reboot, mount your USB stick at /boot, and then seal a secret passphrase. This process will need to be repeated each time you do a kernel upgrade.
echo "This is my secret passphrase." | tpm_sealdata -z -o /boot/antievilmaid/sealed_secret.blob --pcr 0 --pcr 1 --pcr 2 --pcr 3 --pcr 4 --pcr 8 --pcr 9 --pcr 12 --pcr 14