Toolkit for preparing Linux OS images for confidential virtual machines
Re-seals LUKS volume keys on a running system when PCR measurements change (e.g., after kernel or UKI updates). Reads current Secure Boot state, discovers boot chains, compares predicted PCR policies against existing LUKS tokens, and manages token lifecycle.
| Release | Stable | Testing |
|---|---|---|
| Fedora Rawhide | 0.3.2-1.fc46 | - |
| Fedora 45 | 0.3.2-1.fc45 | - |
You can contact the maintainers of this package via email at
python-cvmutils dash maintainers at fedoraproject dot org.