[Task]: Add OP-TEE for storage encryption

armbian / build

Armbian Linux build framework generates custom Debian or Ubuntu image for x86, aarch64, riscv64 & armhf

https://www.armbian.com

GNU General Public License v2.0

3.98k stars 2.24k forks source link

Open Manouchehri opened 1 year ago

Manouchehri commented 1 year ago

[ ] Add OP-TEE build scripts
[ ] Add signed bootloader (will not be perfect, but useful when #4316 is done)
[ ] Enable CFG_PKCS11_TA=y
[ ] Configure systemd-homed to use fscrypt with PKCS#11
[ ] Get systemd-cryptenroll (might be too challenging) working for FDE
[ ] Add fTPM - https://elinux.org/images/f/f3/OP-TEE_ELCE.pdf

ColorfulRhino commented 2 months ago

This looks interesting. @Manouchehri are you still interested in working on this?