Support for newer Linux distros?

sundhaug92 commented 6 years ago

For example Ubuntu 18.04

ghost commented 4 years ago

up! is linux shielded vm for windows rip?

stianfro commented 2 years ago

Would love to see support for newer distros, the current ones are starting to get quite old and are all way past their EOL dates.

Avamander commented 1 year ago

I think there's nothing fundamentally that stops one from using LSVM on newer distributions.

The prerequisite seems to be:

GPT
Two partitions (LUKSv1, it seems)
Two passphrases less than 128 (- some overhead) characters long in total, one for each partition
Serialize the keys lsvmtool serializekeys ./bootkey ./rootkey ./outfile
Seal the keys sudo lsvmtool seallsvmloadpolicy --secureboot /boot/efi/EFI/BOOT/lsvmload/lsvmload.efi ./outfile /boot/efi/EFI/BOOT/lsvmload/sealedkeys
Create a lvsmconfig (script shows quite well what is generated there), validate will help with some aspects (albeit it is outdated and does a few paths different, namely the config is in the wrong location)
Add lsvmload.efi using efibootmgr to list of bootable devices.
???
Shielded Open-Source VM? (There seems to be an undocumented assumption with the UUIDs I can't figure out just yet)

microsoft / lsvmtools