dualfroz
fdb92fde7d
Disks can be excluded from backups with the 'backup' flag, but the TPM state does not support it. Guests can keep secrets in the TPM, like the key to automatically unlock disk encryption, so a backup that includes the TPM state can be enough to get at the data. Users might want to keep the TPM state out of the backup and rely on a recovery key after restoring instead. Add the 'backup' flag to the TPM state, like for other disks. Backups already honor it for all volumes of the configuration, so a TPM state with 'backup=0' is skipped and logged as excluded in the backup task log, and on restore, its line is commented out like for other excluded disks. Signed-off-by: Michal Fox <me@dualfroz.com>