Re: [RFC] Make hibernation work with lockdown

[Jarkko Sakkinen <jarkko@kernel.org>]

On Fri, Oct 23, 2026 at 06:28:56PM +0300, Jarkko Sakkinen wrote:
> Now I have finally all priority stuff out of the way. I'll start by
> refining my test harness to always have regular hibernate enabled and
> fully working. Once I get that out of the way this patch set should
> become low-effort to test.

We have some luck with this actually.

At work I've been doing a bootc based operating system for vLLM workloads
and for no any particular good reason I converted my test environment to
build bootc/UKI based hybrid ISO images. It's exactly like any other
live ISO.

As the next step I'll expand the bootc OS installer that I did to have an
option for hibernate so that it does partition layout and all the wiring
required. I can then integrate that to my test environment and test it
in a libvirtd VM.

It's not as tedious as it sounds :-)

There would be faster routes but this is the only one that is not a
tower of cards. I'll just shovel it through.

I'd figure that it's also modelling quite well any possible production
environment where this feature might be ever used (reproducible build,
read-only rootfs, bootc container).

1. https://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd-test.git/
2. https://github.com/puu-os/installer

Br, Jarkko