My disk is encrypted with LUKS and I wanted to make it auto-unlock using TPM.

I can’t enter UEFI as I have fastboot enabled.

Could anyone help me please? 🫡

  • Magister@lemmy.world
    link
    fedilink
    arrow-up
    8
    ·
    9 hours ago

    Do you have GRUB? If yes you can edit your kernel command line and append “init=/bin/bash”, see if at least this gives you a prompt, this has saved me a couple of time in the past. Else booting on a USB and mounting your boot partition may help to fix it.

    BTW I also have LUKS and I’m using TPM, using tpm2-initramfs-tool, first, it failed because I forgot the tpm modules in initrd, but I always have 2 kernels installed and only modify one initrd at a time to have a safe boot if I have a problem, like I had!

    I tested tpm2-initramfs-tool with proper tpm2 modules and it worked.

    I also tested with clevis-initramfs and clevis-tpm2 and it’s even easier, no messing with crypttab.

    Also, as long as you can break GRUB and append “init=/bin/bash” it is not secure of course, you can then prevent grub editing or not using grub at all.