initrd/gpg: add reprovision smartcard from GPG key backup flow - #2158

Draft

tlaurion wants to merge 15 commits into

linuxboot:masterfrom

tlaurion:reprovision-smartcard-from-backup

Commits on Aug 22, 2026

initrd: add reprovision smartcard from GPG key backup flow
tlaurion
committed
afbd307
doc: document reprovision flow, QEMU testing, and entry points
tlaurion
committed
c3e7576
initrd/etc/functions.sh: fix print_tree hang by breaking find-into-sort pipe
tlaurion
committed
99c1549
initrd: fix print_tree CWD regression in reprovision hash generation
tlaurion
committed
86fa257
initrd/etc/functions.sh: name offending /boot entries in assert_signable error
tlaurion
committed
0103992
initrd: guard reprovision menu calls against set -e exit
tlaurion
committed
a50df63
initrd/bin/gui-init.sh: re-run rollback preflight after K-case reprovision
tlaurion
committed
b3a9fa6
initrd/etc/gpg_functions.sh: require OpenPGP PW3 admin PIN minimum of 8 chars
tlaurion
committed
64c5799
initrd/etc/gpg_functions.sh: reset TPM and sign /boot atomically during reprovision
tlaurion
committed
953a296
doc: align reprovision docs with automatic TPM reset and atomic signing
tlaurion
committed
ab5d0ba
doc/modules.md: re-add remove_canary_files helper target row
tlaurion
committed
9566706
initrd/etc/gpg_functions.sh: cap admin PIN at Secrets-app limit
tlaurion
committed
0048770
doc/qemu.md: make daily dev cycle use ~/Qemu_img consistently
tlaurion
committed
34c198d
initrd/etc/functions.sh: keep print_tree fallback output sorted
tlaurion
committed
3033b2b

Commits on Aug 23, 2026

refactor(gpg): consolidate repeated patterns; tighten secret-file handling
tlaurion
committed
12e66fb