Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity

escrow snapd TPM-backed FDE recovery keys from orbit (#48452)

Browse Source 
**Related issue:** Resolves #44428
This commit is contained in:
Dante Catalfamo
2026-07-07 16:25:20 -04:00
committed by GitHub
parent 57dc28991a
commit 4351f4cee5
23 changed files with 1567 additions and 55 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/44428-tpm-backed-disk-encryption.md
+1
View File
@@ -0,0 +1 @@
- Added support for escrowing disk encryption recovery keys from Linux hosts that use TPM-backed full-disk encryption (e.g. Ubuntu 26). On these hosts, orbit escrows a dedicated Fleet-owned snapd recovery key silently, without prompting the end user for a passphrase.