On 28/09/2021 12:33, Lennart Poettering wrote:
On Di, 28.09.21 12:26, lejeczek (peljasz@xxxxxxxxxxx) wrote:
Hi guys.
I have 'clevis' set to get luks pin from 'tang' but unlock does not happen
at/during boot time and I wonder if someone can share thoughts on how to
investigate that?
I cannot see anything obvious fail during boot, moreover, manual
'clevis-luks-unlock' works no problems.
This is the systemd mailing list, not the clevis/tang mailing
list. Please contact the clevis/tang community instead.
May ask of any possible plans where systemd would, somehow
similarly to 'tpm', utilize 'tang'(or similar) technique to
unlock luks encrypted devices?
ps. clevis + tang seem "broken" in CentOS stream & f35,
unlocking @boot time to be specific, is not working.
many thanks, L.
Lennart
--
Lennart Poettering, Berlin