8 Dec
2025
8 Dec
'25
2:32 a.m.
From: Simon Glass <simon.glass@canonical.com> Update the bootctl settings to use a TKey with sandbox. Signed-off-by: Simon Glass <simon.glass@canonical.com> --- include/bootctl.dtsi | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/include/bootctl.dtsi b/include/bootctl.dtsi index 4070fa32c5f..36e2be04be9 100644 --- a/include/bootctl.dtsi +++ b/include/bootctl.dtsi @@ -31,6 +31,11 @@ measure; #endif + /* use TKey for unlocking encrypted volumes */ +#ifdef CONFIG_SANDBOX + tkey; +#endif + /* restrict labels to boot (separated by space) */ #ifdef CONFIG_QEMU labels = "virtio"; -- 2.43.0