SYSTEMD.PCRLOCK(5) systemd.pcrlock SYSTEMD.PCRLOCK(5) systemd.pcrlock, systemd.pcrlock.d - PCR /etc/pcrlock.d/*.pcrlock /etc/pcrlock.d/*.pcrlock.d/*.pcrlock /run/pcrlock.d/*.pcrlock /run/pcrlock.d/*.pcrlock.d/*.pcrlock /var/lib/pcrlock.d/*.pcrlock /var/lib/pcrlock.d/*.pcrlock.d/*.pcrlock /usr/local/lib/pcrlock.d/*.pcrlock /usr/local/lib/pcrlock.d/*.pcrlock.d/*.pcrlock /usr/lib/pcrlock.d/*.pcrlock /usr/lib/pcrlock.d/*.pcrlock.d/*.pcrlock .pcrlock PCR TPM2. systemd-pcrlock(8) pcrlock PCR TPM2. pcrlock JSON TCG (CEL-JSON)[1]. "recnum" "content" "content_type" . pcrlock PCR . .pcrlock .d/ ( ). ( ): pcrlock . pcrlock ( ) "NNN-.pcrlock" ( NNN ) 750-enter-initrd.pcrlock. pcrlock ( ""). . *.pcrlock.d/*.pcrlock pcrlock . : 650-kernel.pcrlock.d/6.5.5-200.fc38.x86_64.pcrlock 650-kernel.pcrlock.d/6.5.7-100.fc38.x86_64.pcrlock systemd-pcrlock list-components pcrlock . lock-* systemd-pcrlock pcrlock . . systemd. pcrlock . 240-secureboot-policy.pcrlock SecureBoot PCR 7. systemd-pcrlock lock-secureboot-policy. 255. 250-firmware-code-early.pcrlock PCR 0 2 ( 400-secureboot-separator.pcrlock ). systemd-pcrlock lock-firmware-code. 255. 250-firmware-config-early.pcrlock PCR 1 3 ( 400-secureboot-separator.pcrlock ). systemd-pcrlock lock-firmware-config. 255. 350-action-efi-application.pcrlock EFI "" . . 255. 400-secureboot-separator.pcrlock EFI "" PCR 7 / . . 255. 500-separator.pcrlock EFI "" PCRs 0-6 / . . 255. 550-firmware-code-late.pcrlock PCR 0 2 ( 400-secureboot-separator.pcrlock ). systemd-pcrlock lock-firmware-code. 255. 550-firmware-config-late.pcrlock PCR 1 3 ( 400-secureboot-separator.pcrlock ). systemd-pcrlock lock-firmware-config. 255. 600-gpt.pcrlock GPT PCR 5 . systemd-pcrlock lock-gpt. 255. 620-secureboot-authority.pcrlock SecureBoot PCR 7. systemd-pcrlock lock-secureboot-authority. 255. 700-action-efi-exit-boot-services.pcrlock EFI ExitBootServices() UEFI . PCR 5. . 255. 710-kernel-cmdline.pcrlock PCR 9. systemd-pcrlock lock-kernel-cmdline. 255. 720-kernel-initrd.pcrlock initrd PCR 9. systemd-pcrlock lock-kernel-initrd. 255. 750-enter-initrd.pcrlock PCR 11 systemd-pcrphase-initrd.service(8) initrd. . 255. 800-leave-initrd.pcrlock PCR 11 systemd-pcrphase-initrd.service(8) initrd. . 255. 820-machine-id.pcrlock PCR 15 systemd-pcrmachine.service(8) /etc/machine-id. systemd-pcrlock lock-machine-id. 255. 830-root-file-system.pcrlock PCR 15 systemd-pcrfs-root.service(8) . systemd-pcrlock lock-file-system. 255. 850-sysinit.pcrlock PCR 11 systemd-pcrphase-sysinit.service(8) . . 255. 900-ready.pcrlock PCR 11 systemd-pcrphase.service(8) . . 255. 950-shutdown.pcrlock PCR 11 systemd-pcrphase.service(8) . . 255. 990-final.pcrlock PCR 11 systemd-pcrphase-sysinit.service(8) . . 255. systemd(1), systemd-pcrlock(8) 1. TCG (CEL-JSON) https://trustedcomputinggroup.org/resource/canonical-event-log-format/ 3 . . : . systemd 260.2 SYSTEMD.PCRLOCK(5)