Paweł Szaga home page
PCR registers: 0 - Core system firmware executable code 1 - Core system firmware data/host platform configuration 4 - Boot loader and additional drivers 5 - GPT/Partition table 7 - SecureBoot state 8 - GRUB - Commands and kernel command line 9 - GRUB - All files read (including kernel image) Check if SecureBoot is… Continue reading Using TPM 2.0 on Ubuntu 26.04 to unlock LUKS encrypted volumes during boot
Change prisivioning model to unmap to enable TRIM for USB disk: echo unmap > /sys/block/sda/device/scsi_disk/*/provisioning_mode verify settings: # cat /sys/block/sda/device/scsi_disk/*/provisioning_mode unmap during LUKS volumen mounting add --allow-discards: cryptsetup luksOpen --allow-discards /dev/sda encrypted_disk verify, both device and encrypted volume should shows non-zero values: # lsblk --discard /dev/sda NAME DISC-ALN DISC-GRAN… Continue reading Enabling TRIM for LUKS encrypted USB disk
To check SSH host public key (Ed25519 key, MD5 checksum): ssh-keygen -l -E md5 -f /etc/ssh/ssh_host_ed25519_key.pub
Use below command to disable TCP Offload for a network device: ethtool -K eth0 tx off Settings verification: ethtool --show-offload eth0 You can see results before (left) and after (right) making changes:
Check CPU Vulnerabilities under Linux cat /sys/devices/system/cpu/vulnerabilities/spectre_v2 cat /sys/devices/system/cpu/vulnerabilities/l1tf cat /sys/devices/system/cpu/vulnerabilities/spec_store_bypass cat /sys/devices/system/cpu/vulnerabilities/spectre_v1 cat /sys/devices/system/cpu/vulnerabilities/meltdown