pancakes :nonbinary_cat: (@pancakes)

epic games store and fortnite coming to linux is pointless if nobody's hardware or distro meets epic's arbitrary requirements btw

who actually has TPM2 in their PC?
and from what i understand it needs to be an approved distro such as ubuntu, fedora, or bazzite so no fort on debian, arch, cachyos

to clarify:

Here is a current list of keys that are considered well-known for use as Secure Boot signature database (db) keys and Machine Owner Keys (MOKs), which we plan to expand over time:
- Canonical Ltd. Master Certificate Authority - used by Ubuntu and derived distros like Linux Mint
- Fedora Secure Boot CA - used by Fedora and derived distros like Silverblue
- Universal Blue - used by Bazzite, Bluefin, Aurora, and derived distros
- Debian Secure Boot CA - used by Debian and derived distros
- openSUSE Secure Boot CA - used by openSUSE and derived distros
- SUSE Linux Enterprise Secure Boot CA
- Rocky Linux Secure Boot Root CA
- Microsoft UEFI CA - used to sign non-Microsoft components like the Linux bootloader shim project
- AlmaLinux Secure Boot CA

@pancakes almost every CPU manufactured by Intel and AMD since 2016 has firmware TPM2 built-in

@pancakes the "approved distro" thing i anticipate will get in a better situation as the general consensus around Trusted Computing on Linux improves, it isn't exactly rocket science to get in a signable trusted state for something like this to work

Gentoo, Arch (-derivatives) and Nix (-derivatives) are in a bit of a shitty spot here as well as tinkerer distros but i do anticipate that it will be possible to just use a Different Kernel

@ipg ok well that might be my bad

@pancakes mine might have tpm2 but if it does i cant use it for anything