tree 1e4f582b8c2272b73970e4727171175320aeab7c
parent 57d06a7cfa461f367d4362ccecf4a2d66068a1f9
author Lorenz Brun <lorenz@monogon.tech> 1642080076 +0100
committer Lorenz Brun <lorenz@monogon.tech> 1642092366 +0000

m/n/core: only warn if no TPM 2.0 has been found

Currently the TPM is basically unused. The only user is the generator of
node and cluster unlock keys, which get fed with both TPM and local entropy
which marginally increases security.
This converts a missing TPM 2.0 into a warning and falls back to generating
both of those keys purely with Linux entropy, allowing Metropolis to boot
on hardware without a TPM 2.0.

Change-Id: I910f9768ede554e5ec2c3a35079a6799d1ee9c8c
Reviewed-on: https://review.monogon.dev/c/monogon/+/514
Reviewed-by: Sergiusz Bazanski <serge@monogon.tech>