LXD tpm devices

LXD supports creating virtual TPM (Trusted Platform Module) devices which can be used by both containers and virtual machines. The most common use for those these days is to enable the installation of Windows 11 but they can also be used to help with boot security, full disk encryption or to hold certificates.

RESOURCES:

[stevebrumby]

Thanks for an informative vlog. I was embarking on trying to get swtpm to work with LXD for a Win11VM and then discovered (thankfully) you guys have done the hard work already! Great news. I have an old i7-4500U notebook PC (no tpm module) I am using to test out some LXD configs before I apply to a new dev machine. I ran into the tpm problem for the Win11 VM but then the problem just went away with with one line of config. More LXD excellence! Many thanks.

[jairunet]

Interesting to dig more into security 🤔I am familiar with the hsm_secret file we deal with in the different bitcoin lightning implementations. But interesting stuff nonetheless. Merci Stephane.

[alvinbee]

I have a question how do I expose and lxd in lxd? I have an lxd container which has an lxd container running a service (httpd) how can I allow this to be exposed to the host. The host can see the first lxd but it cannot reach the child lxd.