Re: [RFC] Make hibernation work with lockdown

[Jarkko Sakkinen <jarkko@kernel.org>]

On Tue, Nov 10, 2026 at 03:36:38AM +0200, Jarkko Sakkinen wrote:
> I have a rebased branch of these patches with all the merge conflicts
> sorted out:
> 
> https://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd.git/log/?h=hibernate
> 
> And I'm finishing up refining my test environment:
> 
> https://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd-test.git/
> 
> The build recipe is:
> 
> 	export LINUX_OVERRIDE_SRCDIR=<kernel tree path>
> 	make build BOARD=tpmdd_amd64
> 
> This results build/tpmdd_amd64/images/tpmdd_amd64.iso, which is a live
> ISO. Once I get remaining commits pushed (not all of them yet are),
> the image can be installed by typing:
> 
> 	sudo npx @puu/install
> 
> The TUI installer duplicates the bootc image of the live ISO  to the
> target hard drive. It has a checkbox for hibernate as part of the
> installation flow.
> 
> I'll report the results later, and at that time my testing harness
> should be fully available in public.
> 
> I think this is pretty much the lcd for the required testing machinery.
> It is neither a feature very popular nor well maintained among popular
> Linux distributions.

To my surprise both my refined (installable) testing harness and the
kernel patches worked on first trial :-) This has probably looked more
like building an ivory tower and making noise than getting anything
done.

I also verified and traced that:

1. The expected call paths are actually exercised.
2. Secure boot is active.

The next step is to review the patches properly and try to see what
needs to be done to eventually land these patches.

As far as I'm concerned it is force majeure situation with accepting the
idea at least, as without lockdown support hibernate is a bricked
feature overall.

Br, Jarkko