Re: A _good_ and valid use for TPM

[Vesa Jääskeläinen]

Jan Alsenz wrote:
> I agree too!
> 
> Multiple methods are interesting and everything that can be, should be placed 
> in
>  modules.
> But some parts of a trusted boot chain need to be in the MBR, etc. which is
> mainline code (regardless of how how you build it).
> 
> The way I have implemented my version of the MBR right now is with compile 
> flags:
> If you don't want/need TPM code it won't be on your system! If you compile it
> with TPM support, it won't boot if there is no TPM (I don't like silent 
> failures).

In case it will get some day in. I would propose that you make own MBR
code like that gets compiled to own img file like tpmboot.img (512
bytes). Then you can just provide img file for tool chain. You are
probably throwing code away anyway from normal mbr boot code.