initrd: TPM DA-lockout detection, gating, and wait-by-default countdown UX - #2206

Draft

tlaurion wants to merge 17 commits into

linuxboot:masterfrom

tlaurion:tpm_da_lockout_rework

Commits on Sep 10, 2026

tpmr.sh: add da_state and bad_auth helpers for TPM1 and TPM2
tlaurion
committed
da810af
preflight: diagnose TPM DA lockout when rollback counter read fails
tlaurion
committed
86647c8
unseal: detect DA lockout in tpm1_unseal / tpm2_unseal and signal via marker file
tlaurion
committed
2efe8e1
increment_tpm_counter: preflight DA state, set marker, fail fast on lockout before reseal
tlaurion
committed
6f27623
recovery shell: display DA state summary so users can see remaining lockout time
tlaurion
committed
7d09080
gui-init.sh: surface DA lockout early on boot, fix preflight error menu UX, route lockout marker to dedicated dialog
tlaurion
committed
d6a5b80
doc/tpm.md: document DA state query, lockout behavior, marker-file protocol, early-status display
tlaurion
committed
5c740e6
bad_auth: state NV region + emit pre/post DA state for both TPM1 and TPM2
tlaurion
committed
3edce47
gui-init.sh: preflight error menu - auto-height and drop redundant content
tlaurion
committed
cee2083
doc/ux-patterns.md: document screen-size floor and the 0-height rule
tlaurion
committed
cd3c929
bad_auth: fix TPM2 NV region classification -- patterns had 0x prefix
tlaurion
committed
7ad4fa2
bad_auth: skip redundant nvread existence check; add STATUS-level progress
tlaurion
committed
230c149
bad_auth: STATUS-level progress lines so test status is visible in all log modes
tlaurion
committed
87d6ef8
bad_auth: emit progress via echo >&2 so it reaches /dev/kmsg; drop TPM1 lockout-exit check
tlaurion
committed
cc11fb5
bad_auth: dual-emit progress markers to DEBUG for /dev/kmsg visibility
tlaurion
committed
fac9233
bad_auth: fix TPM2 lockout detection hex constant and restructure for reliable detection
tlaurion
committed
a76df9c
DA lockout: canonical user copy, wait-by-default countdown dialogs, honest recovery docs
tlaurion
committed
2625de3

Navigation Menu

Uh oh!

initrd: TPM DA-lockout detection, gating, and wait-by-default countdown UX - #2206

initrd: TPM DA-lockout detection, gating, and wait-by-default countdown UX#2206
tlaurion wants to merge 17 commits into
linuxboot:masterfrom
tlaurion:tpm_da_lockout_rework

Commits on Sep 10, 2026

tpmr.sh: add da_state and bad_auth helpers for TPM1 and TPM2

preflight: diagnose TPM DA lockout when rollback counter read fails

unseal: detect DA lockout in tpm1_unseal / tpm2_unseal and signal via marker file

increment_tpm_counter: preflight DA state, set marker, fail fast on lockout before reseal

recovery shell: display DA state summary so users can see remaining lockout time

gui-init.sh: surface DA lockout early on boot, fix preflight error menu UX, route lockout marker to dedicated dialog

doc/tpm.md: document DA state query, lockout behavior, marker-file protocol, early-status display

bad_auth: state NV region + emit pre/post DA state for both TPM1 and TPM2

gui-init.sh: preflight error menu - auto-height and drop redundant content

doc/ux-patterns.md: document screen-size floor and the 0-height rule

bad_auth: fix TPM2 NV region classification -- patterns had 0x prefix

bad_auth: skip redundant nvread existence check; add STATUS-level progress

bad_auth: STATUS-level progress lines so test status is visible in all log modes

bad_auth: emit progress via echo >&2 so it reaches /dev/kmsg; drop TPM1 lockout-exit check

bad_auth: dual-emit progress markers to DEBUG for /dev/kmsg visibility

bad_auth: fix TPM2 lockout detection hex constant and restructure for reliable detection

DA lockout: canonical user copy, wait-by-default countdown dialogs, honest recovery docs