tboot-1.11.12-1.el10 RPM for x86_64

From CentOS Stream 10 BaseOS for x86_64

Trusted Boot (tboot) is an open source, pre-kernel/VMM module that uses
Intel Trusted Execution Technology (Intel TXT) to perform a measured
and verified launch of an OS kernel/VMM.

Provides

• tboot
• config(tboot)
• tboot(x86-64)

Requires

• /bin/sh
• /bin/sh
• /usr/bin/sh
• config(tboot) = 1:1.11.12-1.el10
• grub2-efi-x64-modules
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_ABI_DT_RELR)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libz.so.1()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)

License

BSD-3-Clause

Changelog

* Mon May 18 2026 Tony Camuso <tcamuso@redhat.com> - 1:1.11.12-1
  - Rebase to upstream tboot 1.11.12
    Drop tboot-gcc14.patch (fix absorbed upstream)
    Resolves: RHEL-177574
* Fri Feb 13 2026 Tony Camuso <tcamuso@redhat.com> - 1:1.11.10-2
  - Remove downstream tboot-disa-ibt.patch workaround .(RHEL-149438)
    Previous builds appended "ibt=off" to GRUB_CMDLINE_LINUX_TBOOT to avoid
    shutdown crashes on CET-enabled systems. With RHEL-10 kernels enabling
    CET/IBT, the tboot > firmware shutdown path triggered #CP faults because
    firmware shutdown_entry code lacks ENDBR instructions and is not CET-safe.
    The global disable was a temporary mitigation.
    Upstream discussion continues to debate a final fix, but the solution
    posted in https://sourceforge.net/p/tboot/mailman/message/59247821/
    surgically disables CET only around the tboot shutdown_entry call,
    preventing the crash without disabling IBT system-wide.
    RHEL commit 358ed91e4c8a2eb2ab0df50d0e6b71b01dc7e1ed incorporates this fix
    in kernel kernel-6.12.0-205.el10, so the downstream workaround is no longer
    required.
    Update gating.yaml: remove infeasible automated test requirement
    (tboot requires physical TPM and manual GRUB interaction)
    Resolves: RHEL-149438
* Tue Sep 16 2025 Tony Camuso <tcamuso@redhat.com> - 1:1.11.10-1
  - Update to latest upstream
    Add tboot-disa-ibt.patch (see https://issues.redhat.com/browse/RHEL-109479)
    Resolves: RHEL-99209
* Thu Dec 12 2024 Tony Camuso <tcamuso@redhat.com> - 1:1.11.9-1
  - Update to latest upstream.
    Resolves: RHEL-71190
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 1:1.11.3-4
  - Bump release for October 2024 mass rebuild:
    Resolves: RHEL-64018
* Thu Aug 15 2024 Tony Camuso <tcamuso@redhat.com> - 1:1.11.3-3
  - Add gating.yaml
    Resolves: RHEL-54412
* Tue Aug 13 2024 Tony Camuso <tcamuso@redhat.com> - 1:1.11.3-2
  - Stop using OpenSSL ENGINE API in tboot
    Resolves: RHEL-54172
* Tue Jun 25 2024 Tony Camuso <tcamuso@redhat.com> - 1:1.11.3-1
  - Latest version of tboot.
    Resolves: RHEL-34500
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 1:1.11.1-7
  - Bump release for June 2024 mass rebuild

Files

/boot/tboot-syms
/boot/tboot.gz
/etc/grub.d/20_linux_tboot
/etc/grub.d/20_linux_xen_tboot
/usr/lib/.build-id
/usr/lib/.build-id/03
/usr/lib/.build-id/03/4fee9a03bd14c0486fdd2474703eda7b04d97e
/usr/lib/.build-id/17
/usr/lib/.build-id/17/d16e2bf23d28ca7f809872efad6eb56caf68bd
/usr/lib/.build-id/67
/usr/lib/.build-id/67/3c6e9b9a881537d1c92bebf1d05cf3e703d327
/usr/lib/.build-id/85
/usr/lib/.build-id/85/d1295312acee79576db89a03ce4d2cc9445beb
/usr/lib/.build-id/93
/usr/lib/.build-id/93/8450ad4750a415b3cfd3cc8a57281e603239b9
/usr/lib/.build-id/e0
/usr/lib/.build-id/e0/fa54091ea36e62627c2a41fcb2a2f57573c35a
/usr/lib/.build-id/e5
/usr/lib/.build-id/e5/480dfb70a99e9f28ab1fb394f6810d6b01873a
/usr/lib/.build-id/ff
/usr/lib/.build-id/ff/de0a8ab8c507d13d2432d15c9e45575c33cf60
/usr/sbin/lcp2_crtpol
/usr/sbin/lcp2_crtpolelt
/usr/sbin/lcp2_crtpollist
/usr/sbin/lcp2_mlehash
/usr/sbin/tb_polgen
/usr/sbin/txt-acminfo
/usr/sbin/txt-parse_err
/usr/sbin/txt-stat
/usr/share/doc/tboot
/usr/share/doc/tboot/Makefile
/usr/share/doc/tboot/howto_use.md
/usr/share/doc/tboot/man
/usr/share/doc/tboot/man/lcp2_crtpol.8
/usr/share/doc/tboot/man/lcp2_crtpolelt.8
/usr/share/doc/tboot/man/lcp2_crtpollist.8
/usr/share/doc/tboot/man/lcp2_mlehash.8
/usr/share/doc/tboot/man/tb_polgen.8
/usr/share/doc/tboot/man/txt-acminfo.8
/usr/share/doc/tboot/man/txt-parse_err.8
/usr/share/doc/tboot/man/txt-stat.8
/usr/share/doc/tboot/policy_v1.txt
/usr/share/doc/tboot/policy_v2.txt
/usr/share/doc/tboot/tboot_flow.md
/usr/share/doc/tboot/txt-info.txt
/usr/share/doc/tboot/vlp.txt
/usr/share/licenses/tboot
/usr/share/licenses/tboot/COPYING
/usr/share/man/man8/lcp2_crtpol.8.gz
/usr/share/man/man8/lcp2_crtpolelt.8.gz
/usr/share/man/man8/lcp2_crtpollist.8.gz
/usr/share/man/man8/lcp2_mlehash.8.gz
/usr/share/man/man8/tb_polgen.8.gz
/usr/share/man/man8/txt-acminfo.8.gz
/usr/share/man/man8/txt-parse_err.8.gz
/usr/share/man/man8/txt-stat.8.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Tue Aug 4 03:05:32 2026