<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <style type="text/css" style="display:none;"></style> </head> <body dir="ltr"> <style type="text/css" style="display:none;"></style> <div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr"> <p>I found the answer in the source code (it reuses secure boot key) and submitted a PR to clarify the manpage: <a href="https://github.com/systemd/mkosi/pull/2464" class="OWAAutoLink" id="LPlnk855787"> https://github.com/systemd/mkosi/pull/2464</a></p> <p><br> </p> <p>Thank you,</p> <p>Aaron VerDow<br> </p> </div> <hr style="display:inline-block;width:98%" tabindex="-1"> <div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> VerDow, Aaron<br> <b>Sent:</b> Tuesday, March 5, 2024 10:58:15 AM<br> <b>To:</b> systemd-devel@lists.freedesktop.org<br> <b>Subject:</b> mkosi: define key used by SignExpectedPcr</font> <div> </div> </div> <div> <div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr"> <p>I'm looking for a bit of clarification on how to define within mkosi the private key used by <span>SignExpectedPcr. </span>The mkosi manpage mentions a few keys but I'm not sure which one is used (or which other options are required) for the PCR signature specifically.</p> <p><br> </p> <p>Thank you,</p> <p>Aaron VerDow<br> </p> </div> </div> </body> </html>