Package cvm-reseal

Toolkit for preparing Linux OS images for confidential virtual machines

Re-seals LUKS volume keys on a running system when PCR measurements change
(e.g., after kernel or UKI updates). Reads current Secure Boot state, discovers
boot chains, compares predicted PCR policies against existing LUKS tokens, and
manages token lifecycle.

Version: 0.3.2

General Commands
cvm-reseal	manual page for cvm-reseal 0.3.2

General Commands