Arch Linux

kezyr

Member

Registered: Yesterday

Posts: 1

mkinitcpio 42 PCR7 change should have been announced in Arch News

I think the mkinitcpio 42 change that added systemd-pcrosseparator.service to the initramfs deserved an Arch Linux News / manual-intervention notice.

systemd-pcrosseparator.service extends PCRs 0-7, 9 and 12-14. For systems using TPM2-bound LUKS with direct bindings to any of these PCRs, this changes the measured state and invalidates the existing TPM enrollment.

The upgrade itself completes normally and provides no warning that the next reboot may no longer unlock the root volume automatically. Depending on the setup, this may force the user into whatever fallback recovery mechanism is configured.

The same issue is discussed here:
https://bbs.archlinux.org/viewtopic.php?id=314912

The mkinitcpio 42 release notes mention that install/systemd now includes systemd-pcrosseparator.service, but the consequence for existing PCR-bound TPM enrollments is far from obvious.

Could the Arch maintainers consider announcing changes like this on archlinux.org and also emitting a visible warning during the package upgrade? A package update that deliberately changes measured boot state and invalidates existing TPM-bound root-volume unlocking seems significant enough to warrant an explicit warning before reboot.

killertofus

Member

Registered: 2025-02-10

Posts: 237

Re: mkinitcpio 42 PCR7 change should have been announced in Arch News

make a feature request https://gitlab.archlinux.org/archlinux/ … work_items

---

I Have Linux Perl Can i Download Gnome???