summaryrefslogtreecommitdiff
path: root/mkosi.conf.d
diff options
context:
space:
mode:
Diffstat (limited to 'mkosi.conf.d')
-rw-r--r--mkosi.conf.d/10-systemd.conf7
1 files changed, 7 insertions, 0 deletions
diff --git a/mkosi.conf.d/10-systemd.conf b/mkosi.conf.d/10-systemd.conf
index 41a8c2e856..ec0f690d4e 100644
--- a/mkosi.conf.d/10-systemd.conf
+++ b/mkosi.conf.d/10-systemd.conf
@@ -11,6 +11,11 @@ OutputDirectory=mkosi.output
BuildDirectory=mkosi.builddir
CacheDirectory=mkosi.cache
+[Validation]
+SecureBoot=yes
+# Disabled until systemd-measure can operate without a TPM device.
+SignExpectedPcr=no
+
[Host]
QemuMem=2G
ExtraSearchPaths=build/
@@ -29,3 +34,5 @@ KernelCommandLineExtra=systemd.crash_shell
ip=enp0s1:any
# Make sure sulogin works even with a locked root account.
SYSTEMD_SULOGIN_FORCE=1
+ # Make sure /sysroot is mounted rw in the initrd.
+ rw