linux/meta-security.git/meta-tpm/recipes-tpm2, branch master

tpm2-pkcs11: upgrade 1.9.1 -> 1.9.2

2026-05-25T14:11:19+00:00

This contains fix for building native recipe with security flags enabled: * https://github.com/tpm2-software/tpm2-pkcs11/commit/be97b21ae641303ce83a8fbb54002701c1aede31 Signed-off-by: Peter Marko Signed-off-by: Scott Murray

tpm2-tools: make efivar optional

2026-05-17T14:44:55+00:00

Previous commit made this a hard dependency because it's autodetected. Instead of that, make it configurable so it can be disabled (roughtly equivalent to behavior before that commit). Signed-off-by: Peter Marko Signed-off-by: Scott Murray

tpm2-pkcs11: fix build failure

2026-04-14T21:18:23+00:00

Use patch submitted upstream to fix build error: | src/lib/tpm.c: In function ‘tpm_unseal’: | src/lib/tpm.c:1040:16: error: incompatible types when returning type ‘_Bool’ but ‘twist’ {aka ‘const char *’} was expected | 1040 | return false; | | ^~~~~ Signed-off-by: Peter Marko Signed-off-by: Scott Murray

python3-tpm2-pytss: BBCLASSEXTEND native and nativesdk

2026-03-04T10:12:48+00:00

Commit cd729862f68152bc76db02cd4a93ca12a9424f88 added native/nativesdk possibility to tpm2-pkcs11. After 784ca4b6584101e971b2d5d76ec7b716ad1301b5 which added rdepends on python3-tpm2-pytss, there are errors like: Missing or unbuildable dependency chain was: ['', 'swtpm-native', 'tpm2-pkcs11-tools-native', 'python3-tpm2-pytss-native'] Signed-off-by: Peter Marko Signed-off-by: Scott Murray

tpm2-tss-engine: remove libgcrypt dependency

2025-09-10T22:08:38+00:00

There is no hint of libgcrypt in the upstream code and distro packages like Debian and Fedora do not have this dependency either. Signed-off-by: Patrick Wicki

Adapt to S/UNPACKDIR changes

2025-07-04T16:41:20+00:00

Remove or update S definitions as required to work with oe-core S/UNPACKDIR changes. Signed-off-by: Scott Murray

recipes: fix whitespace warnings

2025-06-23T13:05:21+00:00

Since OE bitbake commit 24772dd2ae6c ("parse/ConfHandler: Add warning for deprecated whitespace usage"), the current build generates the following warning (as example): | WARNING: ...meta-security/meta-tpm/recipes-core/systemd/systemd-boot_%.bbappend:7 | has a lack of whitespace around the assignment: | 'EXTRA_OEMESON:append= " ${@bb.utils.contains('DISTRO_FEATURES', 'tpm2', '-Dtpm2=true', '', d)} "' Fix all the warnings. Signed-off-by: Max Krummenacher Signed-off-by: Armin Kuster

tpm2-pkcs11: Add tools python runtime dependencies

2025-04-13T18:07:57+00:00

The tpm2-pkcs11-tools python module is importing several modules which are not currently included in it's dependencies. This causes the script invocation to fail. The current commit adds the relevant dependencies, to ensure that the python module is always able to run. The relevant dependencies are: * python3-fcntl: To add the fcntl module, imported in db.py. * python3-sqlite3: To add the sqlite3 module, imported in db.py. * python3-tpm2-pytss: To add the tpm2_pytss module, imported in utils.py. * python3-compression: To add the zipfile module, imported through "importlib.metadata import distribution" in tpm2_ptool. Signed-off-by: Omri Sarig Signed-off-by: Armin Kuster

tpm2-pytss: Add python3-asn1crypto runtime dependency

2025-04-13T18:07:57+00:00

The tpm2-pytss module is importing the module asn1crypto in tsskey.py, however, the current bitbake recipe is not including this python package as runtime dependency. This causes the module invocation to fail at the moment. The commit adds this dependency to the bitbake recipe, to make the recipe self contained. Signed-off-by: Omri Sarig Signed-off-by: Armin Kuster

tpm2-tss-engine: add .so symmlink to engines package

2025-04-13T18:07:57+00:00

Without the symlink, the engine is not found by openssl: openssl engine -t -c tpm2tss 20F0C5BDFFFF0000:error:12800067:DSO support routines:dlfcn_load:could not load the shared library:/usr/src/debug/openssl/3.2.4/crypto/dso/dso_dlfcn.c:118: filename(/usr/lib/engines-3/tpm2tss.so): /usr/lib/engines-3/tpm2tss.so: cannot open shared object file: No such file or directory ... With sym-link it works (also without extra configuration for openssl) cd /usr/lib/engines-3/ ln -s libtpm2tss.so tpm2tss.so openssl engine -t -c tpm2tss (tpm2tss) TPM2-TSS engine for OpenSSL [RSA, RAND] [ available ] For exmample also the Fedora package has the symlink. Signed-off-by: Adrian Freihofer Signed-off-by: Armin Kuster