Support for newer Linux distros?

[sundhaug92]

For example Ubuntu 18.04

up! is linux shielded vm for windows rip?

[stianfro]

Would love to see support for newer distros, the current ones are starting to get quite old and are all way past their EOL dates.

[Avamander]

I think there's nothing fundamentally that stops one from using LSVM on newer distributions.

The prerequisite seems to be:

• GPT
• Two partitions (LUKSv1, it seems)
• Two passphrases less than 128 (- some overhead) characters long in total, one for each partition
• Serialize the keys lsvmtool serializekeys ./bootkey ./rootkey ./outfile
• Seal the keys sudo lsvmtool seallsvmloadpolicy --secureboot /boot/efi/EFI/BOOT/lsvmload/lsvmload.efi ./outfile /boot/efi/EFI/BOOT/lsvmload/sealedkeys
• Create a lvsmconfig (script shows quite well what is generated there), validate will help with some aspects (albeit it is outdated and does a few paths different, namely the config is in the wrong location)
• Add lsvmload.efi using efibootmgr to list of bootable devices.
• ???
• Shielded Open-Source VM? (There seems to be an undocumented assumption with the UUIDs I can't figure out just yet)