update TODO

diff --git a/TODO b/TODO
index 77da63aa05ae75154bc016f82282c4eb81ec55a9..479bd94d6646314f5653c3947122166e8a28424f 100644 (file)
--- a/TODO
+++ b/TODO
@@ -132,6 +132,10 @@ Deprecations and removals:
 
 Features:
 
+* vmspawn: to speed up boot let's disable all PCR banks in swtpm except for
+  SHA256. Probably means running swtpm_setup --state-dir … --tpm2 --pcr-banks
+  sha256.
+
 * in os-release define a field that can be initialized at build time from
   SOURCE_DATE_EPOCH (maybe even under that name?). Would then be used to
   initialize the timestamp logic of ConditionNeedsUpdate=.