Package cvm-encrypt-image

Toolkit for preparing Linux OS images for confidential virtual machines

https://gitlab.com/vkuznets/cvmutils

Pre-encrypts root volumes and seals encryption keys to a target vTPM using
predicted PCR values. Converts root partitions to LUKS2 encryption, predicts
PCR values by analyzing boot chains and Secure Boot configurations, and seals
keys to TPM with predicted PCR policies.

Version: 0.3.2

General Commands

cvm-encrypt-image manual page for cvm-encrypt-image 0.3.2