systemd-stable/man/tpm2-crypttab.sh

# SPDX-License-Identifier: CC0-1.0

# Enroll the TPM2 security chip in the LUKS2 volume, and bind it to PCR 7
# only. Replace /dev/sdXn by the partition to use (e.g. /dev/sda1).
sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=7 /dev/sdXn

# Test: Let's run systemd-cryptsetup to test if this worked.
sudo /usr/lib/systemd/systemd-cryptsetup attach mytest /dev/sdXn - tpm2-device=auto

# If that worked, let's now add the same line persistently to /etc/crypttab,
# for the future.
sudo bash -c 'echo "mytest /dev/sdXn - tpm2-device=auto" >> /etc/crypttab'
man: add licenses to all files that lack one Documentation is licensed under LGPL-2.1-or-later. Scripts are MIT to facilitate reuse. Examples are relicensed to CC0-1.0 to maximise copy-and-paste for users, with permission from authors. 2021-10-01 11:44:33 +01:00			`# SPDX-License-Identifier: CC0-1.0`

man: document new features 2020-12-07 17:18:52 +01:00			`# Enroll the TPM2 security chip in the LUKS2 volume, and bind it to PCR 7`
			`# only. Replace /dev/sdXn by the partition to use (e.g. /dev/sda1).`
			`sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=7 /dev/sdXn`

			`# Test: Let's run systemd-cryptsetup to test if this worked.`
			`sudo /usr/lib/systemd/systemd-cryptsetup attach mytest /dev/sdXn - tpm2-device=auto`

			`# If that worked, let's now add the same line persistently to /etc/crypttab,`
			`# for the future.`
			`sudo bash -c 'echo "mytest /dev/sdXn - tpm2-device=auto" >> /etc/crypttab'`