Repository navigation
doc: remove unsupported client PCR 0 measurement claim - #2210
Merged
tlaurion merged 1 commit intoSep 17, 2026
Merged
Conversation
tlaurion
force-pushed
the
doc/pcr0-measurement-qualifier
branch
from
September 17, 2026 23:04
0ccdc4d to
cac970f
Compare
The claim that most client machines ship verified boot only, so PCR 0 stays zero, is not backed by any code or source. No code in initrd/ relies on it and the document cites nothing that states it, so remove it rather than reword it into another generalization. What remains is checkable: PCR 0 receives a Boot Guard ACM measurement when the platform is provisioned with a profile that includes measurement, and a platform provisioned without such a profile leaves PCR 0 unchanged. The wording originated in linuxboot/heads-wiki#249 and was propagated into doc/tpm.md by linuxboot#2203. Signed-off-by: Thierry Laurion <insurgo@riseup.net>
tlaurion
force-pushed
the
doc/pcr0-measurement-qualifier
branch
from
September 17, 2026 23:06
cac970f to
4be8d69
Compare
tlaurion
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Removes the unsupported assertion that most client machines ship verified boot only, so PCR 0 stays zero. Nothing supports it: no code in
initrd/reads or depends on it, and no source cited in the document states it.The text now states only what is checkable: PCR 0 receives a measurement from the Boot Guard ACM when the platform is provisioned with a profile that includes measurement, and a platform provisioned without such a profile leaves PCR 0 unchanged.
The claim originated in linuxboot/heads-wiki#249 and was propagated into
doc/tpm.mdby #2203.Documentation only; no code changes.