My disk is encrypted with LUKS and I wanted to make it auto-unlock using TPM.

I can’t enter UEFI as I have fastboot enabled.

Could anyone help me please? 🫡

  • Magister@lemmy.world
    5·
    27 days ago

    Do you have GRUB? If yes you can edit your kernel command line and append “init=/bin/bash”, see if at least this gives you a prompt, this has saved me a couple of time in the past. Else booting on a USB and mounting your boot partition may help to fix it.

    BTW I also have LUKS and I’m using TPM, using tpm2-initramfs-tool, first, it failed because I forgot the tpm modules in initrd, but I always have 2 kernels installed and only modify one initrd at a time to have a safe boot if I have a problem, like I had!

    I tested tpm2-initramfs-tool with proper tpm2 modules and it worked.

    I also tested with clevis-initramfs and clevis-tpm2 and it’s even easier, no messing with crypttab.

    Also, as long as you can break GRUB and append “init=/bin/bash” it is not secure of course, you can then prevent grub editing or not using grub at all.

  • horn_e4_beaver@discuss.tchncs.de
    3·
    27 days ago

    I had this issue and it was because I told grub to support dual booting from two different disk drives (one of them USB) and then I removed the USB drive. Linux-boi still tried to enforce booting from the now not-connected drive.

    I can’t remember exactly what I did, but there may be something about a systemd unit which can be removed/disabled - or maybe I did some fishing around in fstab to remove the drive it thought should exist but wouldn’t always (and then probably did an update-initramfs -u or similar.