feat(tpm): add read-only TPM validation

2026-08-26 17:13:50 +03:00
parent 9e466b8a70
commit af95216c6f
27 changed files with 434 additions and 10 deletions
@@ -23,6 +23,11 @@ Generic engineering rules live in `bible/rules/patterns/`.
  - `lscpu`
  - `sensors`
  - `stress-ng`
+- TPM check (read-only)
+  - `tpm2_getcap properties-fixed`
+  - `tpm2_getcap pcrs`
+  - `tpm2_pcrread`
+  - `tpm2_gettestresult` (reads the existing result; does not start `TPM2_SelfTest`)
 - Memory check
  - `free`
  - `timeout <timeout_sec> memtester`