From: Lennart Poettering <lennart@poettering.net>
Date: Mon, 19 Jan 2026 20:59:47 +0000 (+0100)
Subject: Introduce 'fixate-volume-key' option to repart/cryptsetup to pin the exact LUKS volum... 
X-Git-Tag: v260-rc1~355
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=9316e02c9d72a09c9ff7ac0ec4dc92d94440b60f;p=thirdparty%2Fsystemd.git

Introduce 'fixate-volume-key' option to repart/cryptsetup to pin the exact LUKS volume key hash (#40343)

Add an option to generate the expected volume key hash for LUKS volumes
by systemd-repart
and put it to crypttab, make systemd-cryptsetup check it upon attaching.
The format of the hash
matches what's currently being measured to TPM2 PCR with
tpm2-measure-pcr=.

Closes #40123
---

9316e02c9d72a09c9ff7ac0ec4dc92d94440b60f