diff options
| author | Lennart Poettering <lennart@poettering.net> | 2020-12-07 17:18:52 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2020-12-17 20:02:32 +0100 |
| commit | cf1e172d58b0c0fb3e09ba9b5e6c60093b5b896c (patch) | |
| tree | 5c18a7fd9a5a26e7ca16b2b7d17698e8955ddae4 /man/tpm2-crypttab.sh | |
| parent | 1abaa197814f21fa452eee2f9cf32cfc770908f4 (diff) | |
| download | systemd-cf1e172d58b0c0fb3e09ba9b5e6c60093b5b896c.tar.gz | |
man: document new features
Diffstat (limited to 'man/tpm2-crypttab.sh')
| -rw-r--r-- | man/tpm2-crypttab.sh | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/man/tpm2-crypttab.sh b/man/tpm2-crypttab.sh new file mode 100644 index 0000000000..41db2aeddd --- /dev/null +++ b/man/tpm2-crypttab.sh @@ -0,0 +1,10 @@ +# Enroll the TPM2 security chip in the LUKS2 volume, and bind it to PCR 7 +# only. Replace /dev/sdXn by the partition to use (e.g. /dev/sda1). +sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=7 /dev/sdXn + +# Test: Let's run systemd-cryptsetup to test if this worked. +sudo /usr/lib/systemd/systemd-cryptsetup attach mytest /dev/sdXn - tpm2-device=auto + +# If that worked, let's now add the same line persistently to /etc/crypttab, +# for the future. +sudo bash -c 'echo "mytest /dev/sdXn - tpm2-device=auto" >> /etc/crypttab' |