From 77791214a39bec80675411c24793c34278ae6c48 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Thu, 25 Apr 2024 14:59:39 -0400
Subject: [PATCH] libvirt: Enable a software TPM by default

To test out e.g. the bootc `tpm2-luks` backend; also this is
just a general best practice.

Signed-off-by: Colin Walters <walters@verbum.org>
---
 pkg/vm/domain-template.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/pkg/vm/domain-template.xml b/pkg/vm/domain-template.xml
index 304ca908..33388cee 100644
--- a/pkg/vm/domain-template.xml
+++ b/pkg/vm/domain-template.xml
@@ -25,6 +25,13 @@
       <target bus="virtio" dev="vda"></target>
       <transient/>
     </disk>
+    <tpm model='tpm-tis'>
+      <backend type='emulator' version='2.0'>
+        <active_pcr_banks>
+            <sha256/>
+        </active_pcr_banks>
+      </backend>
+    </tpm>
     {{.CloudInitCDRom}}
   </devices>
   <qemu:commandline>