| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: tboot | Distribution: openSUSE Tumbleweed |
| Version: 20250417_1.11.10 | Vendor: openSUSE |
| Release: 2.2 | Build date: Wed Jan 21 12:21:41 2026 |
| Group: Productivity/Security | Build host: reproducible |
| Size: 837142 | Source RPM: tboot-20250417_1.11.10-2.2.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://sourceforge.net/projects/tboot/ | |
| Summary: Program for performing a verified launch using Intel TXT | |
Trusted Boot (tboot) is a pre-kernel/VMM module that uses Intel Trusted Execution Technology (Intel(R) TXT) to perform a measured and verified launch of an OS kernel/VMM.
BSD-3-Clause
* Wed Jan 21 2026 Matthias Gerstner <matthias.gerstner@suse.com>
- add gcc16-compat.patch (bsc#1256989): gcc16 complains about an unused
variable in strpbrk_s. It seems the `slen` parameter is not enforced at all.
The patch changes that, hopefully without causing regressions.
* Wed Jul 16 2025 Marcus Meissner <meissner@suse.com>
- updated to version 20250417: v1.11.10
- Fix the issue causing tboot to hang during waking up processors from
txt sleep on DMR simics
- add .gpg signature and tboot.keyring
- tboot-cet.patch: add a missing ENDBR64 instruction when kernel is
using CET (bsc#1246573)
* Wed Feb 19 2025 Matthias Gerstner <matthias.gerstner@suse.com>
- update to version 1.11.9 :
- Merge TXT Protected Range support branch.
- Remove unncessary OPENSSL_free from lcputils.c and add a functionality to
move ACM modules from the address range below TBOOT to above TBOOT, to
allow the usage of ACMs bigger than 256KB.
- Restore call to configure_vtd.
- refresh and adjust tboot-bsc#1207833-copy-mbi.patch
- refresh tboot-distributor.patch
- refresh tboot-fix-alloc-size-warning.patch
- refresh tboot-grub2-fix-menu-in-xen-host-server.patch
- refresh tboot-grub2-fix-xen-submenu-name.patch
- refresh tboot-grub2-refuse-secure-boot.patch
* Wed Aug 28 2024 Matthias Gerstner <matthias.gerstner@suse.com>
- add tboot-fix-alloc-size-warning.patch: newest GCC spits out this error:
```
pconf_legacy.c: In function ‘create’:
pconf_legacy.c:327:16: error: allocation of insufficient size ‘20’ for type ‘tb_hash_t’ with size ‘64’ [-Werror=alloc-size]
327 | digest = malloc(SHA1_DIGEST_SIZE);
| ^
```
There's a union data type behind this. It's not an actual error. To get rid
of the warning, the patch allocates the full union size, thereby wasting a
bit of memory.
* Tue Jun 25 2024 Matthias Gerstner <matthias.gerstner@suse.com>
- add tboot-bsc#1207833-copy-mbi.patch: correctly move MBI from a lower
address above tboot (bsc#1207833). This fixes a broken boot situation in
some configurations stopping with log line "TBOOT: loader context was moved
from 0x<address> to 0x<address>".
this patch syncs the Factory package with the SLE package. For some reason I
forgot to add the patch to Factory first. Also upstream did not react to the
patch, that I posted to their mailing list, so it's not contained in the
upstream tarball.
* Mon Jun 17 2024 Matthias Gerstner <matthias.gerstner@suse.com>
- add tboot.rpmlintrc: suppress warning about missing %check section. There's
no testsuite for tboot.
- mark grub.d snippets as %config (noreplace) to satisfy rpmlint warning
(the grub2 package itself marks its snippets this way, so it seems to be
common standard to do so).
- update to v1.11.4:
* v1.11.4
Increase the TBOOT log size from 32 KB to 64 KB. For some Intel server
platforms, it was noticed that TBOOT_SERIAL_LOG memory section was too
small to hold all of the print logs, produced by TBOOT. Due to this
reason TBOOT log section memory size had to be increase to 64KB.
* v1.11.3
Fix the hanging TBOOT issue, which appeared during the RLPs wakeup process
on the Intel's multisocket platform. This problem appeared during the AP
stacks allocations for these RLPs. TBOOT allocated memory for them depending
on the woken-up CPUs X2 APIC values. When some of them exceeded the NR_CPUS (1024),
then the RLP wakeup process execution halted. For the current moment,
the maximal X2 APID value was increased from 1024 to 8192. This kind of
solution fixed the given problem.
* v1.11.2
Fix the RAM memory allocation algorithm for the initrd.
* Mon Feb 06 2023 Matthias Gerstner <matthias.gerstner@suse.com>
- required update due to openSSL 3.0 deprecation errors in current version
- updated to v1.11.1 / 20230125:
20230125: v1.11.1
- Revert log memory range extension (caused memory overlaps and boot failures)
20221223: v1.11.0
- Fixed TPM handling to flush objects after integrity measurement (Intel PTT limitations)
- Exteded low memory range for logs (HCC CPUs had issue with not enough memory)
- "agile" removed from PCR Extend policy options (requested deprecation)
- Added handling for flexible ACM Info Table format
- lcptools: CPPFLAGS use by environment in build
- lcptools: removed __DATE__ refs to make build reproducible
- Only platform-matchin SINIT modules can be selected
- txt-acminfo: Map TXT heap using mmap
- Typo fix in man page
20220304: v1.10.5
- Fixed mlehash.c to bring back functionality and make it GCC12 compliant
- Reverted change for replacing EFI memory to bring back Tboot in-memory logs
20220224: v1.10.4
- Fix hash printing for SHA384, SHA512 and SM3
- Touch ups for GCC12
- Set GDT to map CS and DS to 4GB before jumping to Linux
- make efi_memmap_reserve handle gaps like e820_protect_region
- Ensure that growth of Multiboot tags does not go beyond original area
- Replace EFI memory map in Multiboot2 info
- Fix endianness of pcr_info->pcr_selection.size_of_select
- Don't ignore locality in PCR file
- Fix composite hashing algorithm for PCONF elements to match lcptools-1
20211210: v1.10.3
- Add UNI-VGA license information
- Remove poly1305 object files on clean
- Support higher resolution monitors
- Use SHA256 as default hashing algorithm in lcp2_mlehash and tb_polgen
- Add OpenSSL 3.0.0 support in lcptools-v2
- Increase number of supported CPUs to 1024 to accomodate for larger units
- tboot-grub2-fix-menu-in-xen-host-server.patch: refreshed to match new
upstream version.
- tboot-grub2-fix-xen-submenu-name.patch: refreshed to match new upstream
version.
* Fri Jun 11 2021 Marcus Meissner <meissner@suse.com>
- updated to v1.10.2 / 20210614
Fix ACM chipset/processor list validation
Check for client/server match when selecting SINIT
Fix issues when building with GCC11
Default to D/A mapping when TPM1.2 and CBnT platform
- updated to 1.10.1 / 20210330
- Indicate to SINIT that CBnT is supported by TBOOT
- lcptools: Fix issues from static code analysis
* Tue Jan 19 2021 Matthias Gerstner <matthias.gerstner@suse.com>
- release 1.10.0 ramifications:
- README is now README.md
- acminfo and parse_err now are called txt-acminfo and txt-parse_err
- lcptools are deprecated (tpm 1.2, TrouSerS dependency) and are no longer
packaged.
- no longer needs TrouSerS dependency due to deprecation
* Tue Jan 19 2021 Matthias Gerstner <matthias.gerstner@suse.com>
- tboot-grub2-fix-menu-in-xen-host-server.patch: refreshed to match new
upstream version.
- tboot-grub2-fix-xen-submenu-name.patch: refreshed to match new upstream
version.
/boot/tboot-syms /boot/tboot.gz /etc/grub.d /etc/grub.d/20_linux_tboot /etc/grub.d/20_linux_xen_tboot /usr/sbin/lcp2_crtpol /usr/sbin/lcp2_crtpolelt /usr/sbin/lcp2_crtpollist /usr/sbin/lcp2_mlehash /usr/sbin/tb_polgen /usr/sbin/txt-acminfo /usr/sbin/txt-parse_err /usr/sbin/txt-stat /usr/share/doc/packages/tboot /usr/share/doc/packages/tboot/COPYING /usr/share/doc/packages/tboot/Makefile /usr/share/doc/packages/tboot/README.md /usr/share/doc/packages/tboot/howto_use.md /usr/share/doc/packages/tboot/lcptools.txt /usr/share/doc/packages/tboot/man /usr/share/doc/packages/tboot/man/lcp2_crtpol.8 /usr/share/doc/packages/tboot/man/lcp2_crtpolelt.8 /usr/share/doc/packages/tboot/man/lcp2_crtpollist.8 /usr/share/doc/packages/tboot/man/lcp2_mlehash.8 /usr/share/doc/packages/tboot/man/tb_polgen.8 /usr/share/doc/packages/tboot/man/txt-acminfo.8 /usr/share/doc/packages/tboot/man/txt-parse_err.8 /usr/share/doc/packages/tboot/man/txt-stat.8 /usr/share/doc/packages/tboot/policy_v1.txt /usr/share/doc/packages/tboot/policy_v2.txt /usr/share/doc/packages/tboot/tboot_flow.md /usr/share/doc/packages/tboot/txt-info.txt /usr/share/doc/packages/tboot/vlp.txt /usr/share/man/man8/lcp2_crtpol.8.gz /usr/share/man/man8/lcp2_crtpolelt.8.gz /usr/share/man/man8/lcp2_crtpollist.8.gz /usr/share/man/man8/lcp2_mlehash.8.gz /usr/share/man/man8/tb_polgen.8.gz /usr/share/man/man8/txt-acminfo.8.gz /usr/share/man/man8/txt-parse_err.8.gz /usr/share/man/man8/txt-stat.8.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 01:54:38 2026