slightly larger main images since we'll be rebuilding initramfs, but users can use them to auto-unlock luks with TPM and not require rebuilding initramfs
Describe the package Currently a user will have to create a local initramfs if they wish to use tpm2, fido, and pkcs11 for LUKs deceyption. Information on the package We've been building a cust...
Describe the package Currently a user will have to create a local initramfs if they wish to use tpm2, fido, and pkcs11 for LUKs deceyption. Information on the package We've been building a cust...
@M2 @Robert (p5) @j0rge any thoughts on this before I implement?
@Kyle Gospo already weighed in and I think I correctly state his concern as wishing to avoid the extra ~200MB of a custom initramfs in main images ... which I agree with.
With this change any regenerated initramfs, either at runtime when configured by a user, or at build time for downstreams like hwe, bazzite, bluefin/aurora, the resulting initramfs image will be co...
Clevis is another scheme for supporting LUKS decryption via tpm2 and/or a network based decryption scheme. Clevis is already included in our images; however, clevis-dracut is not. We've recentl...