Understanding NvPCRs in systemd v262
Summary
Deep dive into systemd v262 NvPCRs: how NvPCRs extend PCR-like registers in TPM, how policies control the first write via a signed initrd-state policy, and how policy constructs like PolicyPCR, PolicyAuthorize, and PolicyOR enable secure measured boot and attestation. Includes hands-on commands, examples, and security considerations.