> TPM signatures are only useful for verifying the state of your own computers, and only because you control when and how the upgrades happen. And by “you” I really mean large enterprises with tens of thousands of computers (both real and virtual) to manage and a dedicated staff to keep track of everything.
Yes! And part of what makes this new systemd tooling so exciting to a sysadmin like me is that it’s making this very useful stuff available to less-enterprisey shops too.
Yes! And part of what makes this new systemd tooling so exciting to a sysadmin like me is that it’s making this very useful stuff available to less-enterprisey shops too.