tboot in Fedora 19: Don’t worry, it’s just a bug

After installing Fedora 19 beta and rebooting my test computer, I noticed that one of the options available in GRUB’s menu is tboot 1.7.0. Not sure what it’s for, I selected it and hit the Enter key.
Fedora 19 tBoot Trusted boot Intel TXT

On the next GRUB screen, is the option to boot into Fedora GNU/Linux, with tboot 1.7.0. But what does tboot do? Well, one way to find out is to boot into the system and see what dmesg can tell me. Nothing.
Fedora 19 tBoot Trusted boot Intel TXT

Fedora’s official page on tboot has very little useful information, but a search of Apper, the graphical package manager, returns an entry for a tboot package. The description for tboot goes like this:

Trusted Boot (tboot) is an open source, pre-kernel/VMM module that uses Intel Trusted Execution Technology (Intel TXT) to perform a measured and verified launch of an OS kernel/VMM.

Ok, so tboot is the open source package for taking advantage of Intel Trusted Execution Technology (Intel TXT). Intel TXT requires a software and hardware component to work. Here, the software component is obviously tboot. The hardware component is a chip on the motherboard called the Trusted Platform Module (TPM). So if our computer does not have a TPM chip, tboot is of no use to you.

Related Post:  How to speedup Ansible

TPM chips are embedded in the hardware of Intel processors. But most of those are server processors, such as the Intel Xeon E3 v3, Intel Xeon E5 and Intel Xeon E7, and the latest Intel Core vPro processors.

Still not sure what to make of tboot in Fedora 19 beta, I sent an email to Adam Williamson, a Red Hat dude and publisher of happyassassin.net. His reply copied another Red Hat dude who said that tboot appearing by default in GRUB’s menu is a bug, and gave the following reasons why it should not be in the default installation.

1. We don’t really have the infrastructure for doing useful things with it, so it’s really mostly just something an interested party could do development on.

2. Sinit (the method for entering TXT mode) runs a pile of closed source code provided by the firmware on the host CPU effectively as the kernel, and a lot of people aren’t too keen on that. This is especially true since the code is doing things like turning on special processor modes and doing cryptographic verification, which is exactly the sort of thing open review of code often finds tons of bugs in…

3. There are some cases right now where it doesn’t really work right (for instance, UEFI). Obviously these are just bugs, so this is the least important of this list.

So, if you have installed Fedora 19 beta and were/are wondering what the heck that tboot entry in the boot menu is for, don’t worry about it. It’s just a bug. It will not show up in Fedora 19 final.

Related Post:  Android on a Stick, or how to install Android-x86 on a USB stick

Here’s an introductory video about Intel Trusted Execution Technology.

Share:

Share on facebook
Facebook
Share on twitter
Twitter
Share on pinterest
Pinterest
Share on linkedin
LinkedIn

Hola! Did you notice that LinuxBSDos.com no longer run network ads?  Yep, no more ads from the usual suspects that track and annoy you across the Internet. But since I still need to pay to keep the site running, feel free to make a small donation by PayPal or your favorite cryptocurrency.

  • Bitcoin
  • Ethereum
  • Xrp
  • Bitcoin cash
  • Bitcoin sv
  • Litecoin
  • Binance coin
  • Cardano
  • Ethereum classic
Scan to Donate Bitcoin to bc1qzvlte2m224zkayhdc7fdfjkp2rsgt0l5a496ua

Donate Bitcoin to this address

Scan the QR code or copy the address below into your wallet to send some Bitcoin

Scan to Donate Ethereum to 0x0F4362DFF77F3Ba0Dc637F5f3Eba35D09a2fA60C

Donate Ethereum to this address

Scan the QR code or copy the address below into your wallet to send some Ethereum

Scan to Donate Xrp to r4ggjvL36njsMCYTkJ3S7cTHscPsMsSGQv

Donate Xrp to this address

Scan the QR code or copy the address below into your wallet to send some Xrp

Scan to Donate Bitcoin cash to qrs0dedzp9t55af3nfwypydghp29r0xguy9s20fz2k

Donate Bitcoin cash to this address

Scan the QR code or copy the address below into your wallet to send some Bitcoin cash

Scan to Donate Bitcoin sv to 15K9TLyVDBtLuG9cYvXCX9SSkq9C9oUKHK

Donate Bitcoin sv to this address

Scan the QR code or copy the address below into your wallet to send some Bitcoin sv

Scan to Donate Litecoin to LetJ9QQMb7u2LMZ9Tu6rtHwcBcQFW98fbG

Donate Litecoin to this address

Scan the QR code or copy the address below into your wallet to send some Litecoin

Scan to Donate Binance coin to bnb1ga8trq08ssqepd90v6225nzfgy448pu5pw8gxp

Donate Binance coin to this address

Scan the QR code or copy the address below into your wallet to send some Binance coin

Scan to Donate Cardano to addr1qx2354yw49etstfljpdhwja3ajjlt487lg95vu9ngy2q6vu4rf2ga2tjhqknlyzmwa9mrm997h20a7stgectxsg5p5esq5l7d9

Donate Cardano to this address

Scan the QR code or copy the address below into your wallet to send some Cardano

Scan to Donate Ethereum classic to 0xcD6CC972a2297FcafACDcfE042C55C69516a9264

Donate Ethereum classic to this address

Scan the QR code or copy the address below into your wallet to send some Ethereum classic

Subscribe for updates. Trust me, no spam!

Sponsored links

1. Attend Algorithm Conference, a top AI and ML event.
2. Reasons to use control panel for your server.
3. DHgate Computers Electronics, Cell Phones & more.

Upcoming events

7 Responses

  1. Hi,
    I managed to remove tboot menu from grub2 by,

    su
    yum -y remove tboot
    grub2-mkconfig -o /boot/grub2/grub.cfg

    1. I was told that tboot will not be in the final, but that obviously is not the case. On a test installation, I reinstalled GRUB and tboot showed up in the boot menu.

  2. The TPM is a processor and vault on a chip. In other words, a smart card chip. I can provide truly random numbers from its generator, it can do encryption, it can store, lockbox style, passwords etc. and it is hardware.
    The TPM can work with the bios to prevent a bios load and it can be used in wonderful ways to augment security. Hardware based security is it. By the way, you cannot slice the chip to discover its innards or memory. It is built to be distructable. My mother board has a slot to where I can plug one in.

  3. > Not sure what it’s for, I selected it and hit the Enter key.
    «Enter» too dangerous. For such cases most suitable «e» key.

Leave a Reply

Your email address will not be published. Required fields are marked *

Get the latest

On social media
Via my newsletter

Partner links

1. Attend Algorithm Conference, a top AI and ML event for 2021.
2. Reasons to use control panel for your server.
3. DHgate Computers Electronics, Cell Phones & more.
Hacking, pentesting distributions

Linux Distributions for Hacking

Experts use these Linux distributions for hacking, digital forensics, and pentesting.

Categories
Archives

The authors of these books are confirmed to speak during

Algorithm Conference

T-minus AI

Author was the first chairperson of AI for the U.S. Air Force.

The case for killer robots

Author is the Director of the Center for Natural and Artificial Intelligence.

Why greatness cannot be planned

Author works on AI safety as a Senior Research Scientist at Uber AI Labs.