I'm trying to get a LUKS volume unlocked by the TPM-module on a Dell Optiplex 3060. The binding seems to work fine:
Code: Select all
clevis luks bind -d /dev/nvme0n1p3 tpm2 '{"pcr_ids":"7"}'
Code: Select all
$ luksmeta show -d /dev/nvme0n1p3
0 active empty
1 active cb6e8904-81ff-40da-a84a-07ab9ab5715e
2 inactive empty
(...)
Code: Select all
Reached target Basic System
Code: Select all
dracut -fv --regenerate-all -o "clevis"
So my questions are how I can get the system to boot with the clevis module enabled respectively how I can find the information I need to solve the stop while booting and if anyone has clevis-dracut installed (and the clevis-kernel-module enabled) and can boot.
Thanks beforehands,
Markus