
My disk is encrypted with LUKS and I wanted to make it auto-unlock using TPM.
I can’t enter UEFI as I have fastboot enabled.
Could anyone help me please? 🫡

My disk is encrypted with LUKS and I wanted to make it auto-unlock using TPM.
I can’t enter UEFI as I have fastboot enabled.
Could anyone help me please? 🫡
Do you have GRUB? If yes you can edit your kernel command line and append “init=/bin/bash”, see if at least this gives you a prompt, this has saved me a couple of time in the past. Else booting on a USB and mounting your boot partition may help to fix it.
BTW I also have LUKS and I’m using TPM, using tpm2-initramfs-tool, first, it failed because I forgot the tpm modules in initrd, but I always have 2 kernels installed and only modify one initrd at a time to have a safe boot if I have a problem, like I had!
I tested tpm2-initramfs-tool with proper tpm2 modules and it worked.
I also tested with clevis-initramfs and clevis-tpm2 and it’s even easier, no messing with crypttab.
Also, as long as you can break GRUB and append “init=/bin/bash” it is not secure of course, you can then prevent grub editing or not using grub at all.