From 74abe2fea2efd642956a8ef24586a57a730185dd Mon Sep 17 00:00:00 2001 From: r-vdp Date: Mon, 13 Jul 2026 12:35:00 +0200 Subject: [PATCH] nixos/systemd/tpm2: add systemd-pcrlogin@.service systemd v261 added systemd-pcrlogin@.service, which logind starts on first login of a user to measure the user record into the 'login' NvPCR. NixOS does not install the unit, so every first login logs: systemd-logind: Failed to start user measurement service 'systemd-pcrlogin@1000.service', ignoring: Unit not found. Install the unit on systems with systemd.tpm2.enable. The unit has ConditionSecurity=measured-os and does nothing elsewhere. --- nixos/modules/system/boot/systemd/tpm2.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/nixos/modules/system/boot/systemd/tpm2.nix b/nixos/modules/system/boot/systemd/tpm2.nix index de0f72e5a543..3537dab80f13 100644 --- a/nixos/modules/system/boot/systemd/tpm2.nix +++ b/nixos/modules/system/boot/systemd/tpm2.nix @@ -45,6 +45,7 @@ "systemd-tpm2-setup.service" "systemd-pcrextend.socket" "systemd-pcrextend@.service" + "systemd-pcrlogin@.service" ]; } )