]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
Introduce 'fixate-volume-key' option to repart/cryptsetup to pin the exact LUKS volum...
authorLennart Poettering <lennart@poettering.net>
Mon, 19 Jan 2026 20:59:47 +0000 (21:59 +0100)
committerGitHub <noreply@github.com>
Mon, 19 Jan 2026 20:59:47 +0000 (21:59 +0100)
Add an option to generate the expected volume key hash for LUKS volumes
by systemd-repart
and put it to crypttab, make systemd-cryptsetup check it upon attaching.
The format of the hash
matches what's currently being measured to TPM2 PCR with
tpm2-measure-pcr=.

Closes #40123


Trivial merge