Difference between revisions of "Tpm2"
Jump to navigation
Jump to search
(Created page with "Ubuntu 24.04 ls -l /dev/tpm* sudo apt install libtss2-rc0t64 libtss2-esys-3.0.2-0t64 tpm2-tools systemd-cryptenroll --tpm2-device=list lsblk -f | grep -i luk sudo systemd-cryp...") |
|||
| Line 1: | Line 1: | ||
Ubuntu 24.04 | Ubuntu 24.04 | ||
ls -l /dev/tpm* | ls -l /dev/tpm* | ||
| − | sudo apt install | + | |
| − | + | ||
| − | + | ``` | |
| − | sudo | + | # 1. Update your package lists and install the Clevis toolset |
| − | + | sudo apt update | |
| + | sudo apt install clevis clevis-tpm2 clevis-luks clevis-initramfs | ||
| + | |||
| + | # 2. Bind your LUKS partition to the TPM (specifying sha256 to prevent errors) | ||
| + | sudo clevis luks bind -d /dev/nvme0n1p3 tpm2 '{"pcr_bank":"sha256","pcr_ids":"1,4,7"}' | ||
| + | |||
| + | # 3. Rebuild the boot image so the Clevis decryption hooks load during early boot | ||
sudo update-initramfs -u -k all | sudo update-initramfs -u -k all | ||
| + | ``` | ||
| + | |||
| + | reboot | ||
Latest revision as of 01:03, 31 July 2026
Ubuntu 24.04 ls -l /dev/tpm*
# 1. Update your package lists and install the Clevis toolset
sudo apt update
sudo apt install clevis clevis-tpm2 clevis-luks clevis-initramfs
# 2. Bind your LUKS partition to the TPM (specifying sha256 to prevent errors)
sudo clevis luks bind -d /dev/nvme0n1p3 tpm2 '{"pcr_bank":"sha256","pcr_ids":"1,4,7"}'
# 3. Rebuild the boot image so the Clevis decryption hooks load during early boot
sudo update-initramfs -u -k all
reboot