| # Copyright 2021 The Chromium OS Authors. All rights reserved. |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| |
| description "Chromium OS tpm2-simulator daemon" |
| author "chromium-os-dev@chromium.org" |
| |
| stop on stopping boot-services and stopped trunksd |
| |
| # This daemon should very unlikely to be killed by the OOM killer otherwise |
| # the other TPM related daemons(trunksd/chapsd/cryptohomed...) may crash. |
| oom score -100 |
| |
| # The limit for this task is 1000MB. |
| limit as 1000000000 unlimited |
| |
| respawn |
| |
| # mount-encrypted need this TPM simulator to create the encstateful, and |
| # the TPM simulator need to store its data in the persistent location. |
| env SIMULATOR_DIR=/mnt/stateful_partition/unencrypted/tpm2-simulator |
| env DEV_VTPMX=/dev/vtpmx |
| |
| pre-start script |
| modprobe tpm_vtpm_proxy |
| mkdir -p -m 755 "${SIMULATOR_DIR}" |
| chown -R tpm2-simulator:tpm2-simulator "${SIMULATOR_DIR}" |
| end script |
| |
| expect stop |
| |
| # We would initialize the minijail seccomp when this daemon is already started. |
| # And it need root permission to create vTPM device. |
| exec /usr/bin/tpm2-simulator |
| |
| post-start exec /usr/bin/tpm2-simulator-init |
| |
| pre-stop exec /usr/bin/tpm2-simulator-stop |
