initrd/gpg: add reprovision smartcard from GPG key backup flow - #2158

Draft

tlaurion wants to merge 10 commits into

linuxboot:masterfrom

tlaurion:reprovision-smartcard-from-backup

Commits on Aug 7, 2026

initrd/gpg: refactor OEM card management into shared functions for reuse, add reprovision flow
tlaurion
committed
cf13670
build: reorganize clean targets into nuclear and dev variants
tlaurion
committed
fcfc78d
initrd/bin/gui-init.sh: propose smartcard reprovision when keyring empty
tlaurion
committed
9d8e695
initrd/bin/kexec-select-boot.sh: accept uppercase Y/D in boot confirmation
tlaurion
committed
325eb06
initrd/etc/gui_functions.sh: offer smartcard reprovision in integrity report
tlaurion
committed
80d6ee8
initrd/bin/gui-init.sh: offer smartcard reprovision in remaining recovery menus
tlaurion
committed
5d73bef
initrd/etc/gpg_functions.sh: skip TPM counter create during smartcard reprovision when TPM reset is required
tlaurion
committed
6a66b12
initrd/etc/gui_functions.sh: direct TPM reset guidance in integrity report when marker set
tlaurion
committed
73a7da2
doc/configuring-keys.md: document reprovision entry points and TPM reset guidance
tlaurion
committed
76f1a62

Commits on Aug 8, 2026

boards: move EOL t420/x220 hotp-maximized variants to unmaintained
tlaurion
committed
918dff7