Tpm2

Ubuntu 24.04 ls -l /dev/tpm*

# 1. Update your package lists and install the Clevis toolset
sudo apt update
sudo apt install clevis clevis-tpm2 clevis-luks clevis-initramfs

# 2. Bind your LUKS partition to the TPM (specifying sha256 to prevent errors)
sudo clevis luks bind -d /dev/nvme0n1p3 tpm2 '{"pcr_bank":"sha256","pcr_ids":"1,4,7"}'

# 3. Rebuild the boot image so the Clevis decryption hooks load during early boot
sudo update-initramfs -u -k all

reboot