| 18 Jul 2021 |
 @grahamc:nixos.org | I wonder why getplatformcertificates is suddenly part of tss and not the tpm2 command | 20:21:23 |
 andi- | the developers of tss needed it before they started the tpm2 tool? | 20:22:09 |
| @grahamc:nixos.org | hm | 20:22:21 |
| 19 Jul 2021 |
 manveru | does anyonne know if there's some way to turn tpm emulation on for a nixos test? | 06:23:46 |
| andi- | The current VM infrastructure doesnt allow that. You have to run an additional daemon | 07:13:39 |
 Mic92 (Old) | Could you run two VMs for that? | 11:48:55 |
| andi- | No, you have to pass a socket to one of the daemons to QEMUs CLI. Forking off the software TPM before starting QEMU is probably good enough in a sandboxed test. For interactive testing you want more process control. | 11:49:44 |
| Mic92 (Old) | There is some bridging possible with vsockets, but I guess it would get hacky | 11:50:04 |
| Mic92 (Old) | Maybe socat? | 11:50:10 |
| andi- | Yeah, probably but not very elegant. Would be nicer to teach our test driver to take care of "sidecars" | 11:50:31 |
| Mic92 (Old) | vsocket also need root with qemu I just remeber | 11:51:07 |
| Mic92 (Old) | *remember | 11:51:12 |
| Mic92 (Old) | It would be also nice for virtiofsd to have qemu side cars | 11:51:38 |
| andi- | yeah but that also requires root access IIRC | 11:51:58 |
| Mic92 (Old) | Why because virtiofsd needs to change uids? | 11:53:58 |
