This commit is contained in:
Tastatur 2024-03-24 17:50:49 +01:00
parent 48ddef3e7f
commit cfb9ce3ac2

View file

@ -14,7 +14,7 @@ $ <nix-shell -p clevis>
Now bind our LUKS volume to TPM with clevis:
```
# clevis luks bind -d /dev/<disk2> tpm2 '{"pcr_bank":"sha256","pcr_ids":"1,7"}'
# clevis luks bind -d /dev/<disk2> tpm2 '{"pcr_bank":"sha256","pcr_ids":"0,1,5,7"}'
```
After rebooting it should automatically decrypt your disk.