SYSTEMD.PCRLOCK(5) systemd.pcrlock SYSTEMD.PCRLOCK(5) (NAME) systemd.pcrlock, systemd.pcrlock.d - PCR TPM2 (SYNOPSIS) /etc/pcrlock.d/*.pcrlock /etc/pcrlock.d/*.pcrlock.d/*.pcrlock /run/pcrlock.d/*.pcrlock /run/pcrlock.d/*.pcrlock.d/*.pcrlock /var/lib/pcrlock.d/*.pcrlock /var/lib/pcrlock.d/*.pcrlock.d/*.pcrlock /usr/local/lib/pcrlock.d/*.pcrlock /usr/local/lib/pcrlock.d/*.pcrlock.d/*.pcrlock /usr/lib/pcrlock.d/*.pcrlock /usr/lib/pcrlock.d/*.pcrlock.d/*.pcrlock (DESCRIPTION) *.pcrlock TPM2 PCR . systemd-pcrlock(8) pcrlock TPM2 PCR . pcrlock JSON TCG Canonical Event Log Format (CEL-JSON)[1] . "recnum" "content" "content_type" . pcrlock PCR . *.pcrlock (drop-in) .d/ ( ). ( ): pcrlock . pcrlock ( ) "NNN-component.pcrlock" ( NNN ) 750-enter-initrd.pcrlock. pcrlock ( <<>> "variants"). (boot loader). *.pcrlock.d/*.pcrlock pcrlock . : 650-kernel.pcrlock.d/6.5.5-200.fc38.x86_64.pcrlock 650-kernel.pcrlock.d/6.5.7-100.fc38.x86_64.pcrlock systemd-pcrlock list-components pcrlock . lock-* systemd-pcrlock pcrlock . (WELL-KNOWN COMPONENTS) . systemd . pcrlock . 240-secureboot-policy.pcrlock SecureBoot PCR 7 . systemd-pcrlock lock-secureboot-policy . 255 . 250-firmware-code-early.pcrlock PCR 0 2 (separator 400-secureboot-separator.pcrlock ). systemd-pcrlock lock-firmware-code . 255 . 250-firmware-config-early.pcrlock PCR 1 3 (separator 400-secureboot-separator.pcrlock ). systemd-pcrlock lock-firmware-config . 255 . 350-action-efi-application.pcrlock EFI "Application" . . 255 . 400-secureboot-separator.pcrlock <<>> (separator) EFI PCR 7 / . . 255 . 500-separator.pcrlock <<>> (separator) EFI PCR 0-6 / . . 255 . 550-firmware-code-late.pcrlock PCR 0 2 ( 400-secureboot-separator.pcrlock ). systemd-pcrlock lock-firmware-code . 255 . 550-firmware-config-late.pcrlock PCR 1 3 ( 400-secureboot-separator.pcrlock ). systemd-pcrlock lock-firmware-config . 255 . 600-gpt.pcrlock GPT PCR 5 . systemd-pcrlock lock-gpt . 255 . 620-secureboot-authority.pcrlock SecureBoot ( SecureBoot authority) PCR 7 . systemd-pcrlock lock-secureboot-authority . 255 . 700-action-efi-exit-boot-services.pcrlock EFI ExitBootServices() UEFI . PCR 5 . . 255 . 710-kernel-cmdline.pcrlock PCR 9 . systemd-pcrlock lock-kernel-cmdline . 255 . 720-kernel-initrd.pcrlock initrd PCR 9 . systemd-pcrlock lock-kernel-initrd . 255 . 750-enter-initrd.pcrlock PCR 11 systemd- pcrphase-initrd.service(8) initrd . . 255 . 800-leave-initrd.pcrlock PCR 11 systemd- pcrphase-initrd.service(8) initrd . . 255 . 820-machine-id.pcrlock PCR 15 systemd- pcrmachine.service(8) /etc/machine-id . systemd-pcrlock lock-machine-id . 255 . 830-root-file-system.pcrlock PCR 15 systemd- pcrfs-root.service(8) . systemd-pcrlock lock-file-system . 255 . 850-sysinit.pcrlock PCR 11 systemd- pcrphase-sysinit.service(8) . . 255 . 900-ready.pcrlock PCR 11 systemd- pcrphase.service(8) . . 255 . 950-shutdown.pcrlock PCR 11 systemd- pcrphase.service(8) . . 255 . 990-final.pcrlock PCR 11 systemd- pcrphase-sysinit.service(8) . . 255 . (SEE ALSO) systemd(1), systemd-pcrlock(8) (NOTES) 1. TCG Canonical Event Log Format (CEL-JSON) https://trustedcomputinggroup.org/resource/canonical-event-log- format systemd 261.2 SYSTEMD.PCRLOCK(5)