From f2b1010d99ce567fdb770812fa91b20cbf5b8078 Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@amutable.com>
Date: Thu, 5 Mar 2026 14:28:14 +0100
Subject: [PATCH] update TODO

---
 TODO | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/TODO b/TODO
index 71af3a5390..dc37ecb79f 100644
--- a/TODO
+++ b/TODO
@@ -137,6 +137,13 @@ Features:
 
 * on first login of a user, measure its identity to some nvpcr
 
+* optionally spawn an swtpm instance if a system doesn't have a native tpm, do
+  it via the tpm generator
+
+* add a secret key logic to sd-stub, that uses early-boot efi variables for
+  storing, that can be used as fallback logic for tpm-less systems for disk
+  encryption, and swtpm state encryption.
+
 * sd-lldp: pick up 802.3 maximum frame size/mtu, to be able to detect jumbo
   frame capable networks