Skip to content

Dracut module to unseal TPM and retrieve password to pass to LUKS

License

Notifications You must be signed in to change notification settings

mihirlad55/dracut-luks-tpm2

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

dracut-luks-tpm2

Dracut module to unseal TPM and retrieve password to pass to LUKS

Requirements

dracut tpm2-tools cryptsetup

Commandline Arguments

The following should be set in the kernel commandline:

rd.luks.key             # Default: /crypto_keyfile.bin
rd.luks_tpm2_auth       # Default: pcr:sha1:0,2,4,7
rd.luks_tpm2_handle     # Default: 0x81000000

How to Install

Arch Linux Users

The package is available on the AUR as dracut-luks-tpm2.

The Manual Method

$ git clone https://github.com/mihirlad55/dracut-luks-tpm2
$ cd dracut-luks-tpm2
$ ./install.sh

Credits

This was adapted from the mkinitcpio hook by pawitp which can be found at https://github.com/pawitp/arch-luks-tpm.

For more info on setting up the TPM, I highly recommend checking out pawitp's articles on Medium:

About

Dracut module to unseal TPM and retrieve password to pass to LUKS

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages