Skip to content

Instantly share code, notes, and snippets.

@richard-scott

richard-scott/ubuntu-systemd-cryptenroll-tpm.sh

Forked from itsuki-hayashi/ubuntu-systemd-cryptenroll-tpm.sh
Created March 1, 2024 12:07
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save richard-scott/4f8d6d30be32fd8c935a6c407211f9ea to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save richard-scott/4f8d6d30be32fd8c935a6c407211f9ea to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. @itsuki-hayashi itsuki-hayashi revised this gist Jul 24, 2023. 1 changed file with 3 additions and 1 deletion.
    4 changes: 3 additions & 1 deletion ubuntu-systemd-cryptenroll-tpm.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -11,5 +11,7 @@ sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=7 /dev/nvme0n1p3
    # Check current LUKS info after TPM enrollment
    sudo cryptsetup luksDump /dev/nvme0n1p3

    # Run https://github.com/wmcelderry/systemd_with_tpm2/blob/main/install.sh

    # Edit /etc/crypttab to something like
    nvme0n1p3_crypt UUID=ff098ab6-2a46-11ee-be56-0242ac120002 none luks,discard,tpm2-device=auto
    # nvme0n1p3_crypt UUID=ff098ab6-2a46-11ee-be56-0242ac120002 none luks,discard,tpm2-device=auto
  2. @itsuki-hayashi itsuki-hayashi revised this gist Jul 24, 2023. 1 changed file with 4 additions and 1 deletion.
    5 changes: 4 additions & 1 deletion ubuntu-systemd-cryptenroll-tpm.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -9,4 +9,7 @@ sudo cryptsetup luksDump /dev/nvme0n1p3
    # Enroll TPM as unlocker
    sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=7 /dev/nvme0n1p3
    # Check current LUKS info after TPM enrollment
    sudo cryptsetup luksDump /dev/nvme0n1p3
    sudo cryptsetup luksDump /dev/nvme0n1p3

    # Edit /etc/crypttab to something like
    nvme0n1p3_crypt UUID=ff098ab6-2a46-11ee-be56-0242ac120002 none luks,discard,tpm2-device=auto
  3. @itsuki-hayashi itsuki-hayashi revised this gist Jul 24, 2023. 1 changed file with 1 addition and 0 deletions.
    1 change: 1 addition & 0 deletions ubuntu-systemd-cryptenroll-tpm.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -1,4 +1,5 @@
    # See also: https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1969375
    # See: https://github.com/wmcelderry/systemd_with_tpm2
    # Install dependencies for systemd TPM
    sudo apt install libtss2-rc0
    # Check if Ubuntu recognize your TPM chip
  4. @itsuki-hayashi itsuki-hayashi revised this gist Jul 24, 2023. 1 changed file with 1 addition and 0 deletions.
    1 change: 1 addition & 0 deletions ubuntu-systemd-cryptenroll-tpm.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -1,3 +1,4 @@
    # See also: https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1969375
    # Install dependencies for systemd TPM
    sudo apt install libtss2-rc0
    # Check if Ubuntu recognize your TPM chip
  5. @itsuki-hayashi itsuki-hayashi created this gist Jul 24, 2023.
    10 changes: 10 additions & 0 deletions ubuntu-systemd-cryptenroll-tpm.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,10 @@
    # Install dependencies for systemd TPM
    sudo apt install libtss2-rc0
    # Check if Ubuntu recognize your TPM chip
    systemd-cryptenroll --tpm2-device=list
    # Check current LUKS info
    sudo cryptsetup luksDump /dev/nvme0n1p3
    # Enroll TPM as unlocker
    sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=7 /dev/nvme0n1p3
    # Check current LUKS info after TPM enrollment
    sudo cryptsetup luksDump /dev/nvme0n1p3