system/systemd
system/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd synced 2024-07-21 10:17:21 +00:00
Code Issues Actions 7 Packages Projects Releases Wiki Activity

Add recommended initramfs regeneration

Browse source 
I recently tried adding a FIDO2-Device as an unlocking method to the LUKS2 partition containing my Fedora install.
When trying to do this, I stumbled upon the here edited man files detailing how to do this.
I however could not unlock my partition with my FIDO2-Device after editing /etc/crypttab and rebooting.
As I found out after a while, I needed to regenerate / update my currently running / used initramfs (https://unix.stackexchange.com/a/705809).
This would have most likely solved itself for me with the next kernel update install (as far as I understand).
So I propose changing the files edited here to recommend or at least inform the user about this.
This commit is contained in:
RoepLuke 2023-09-21 23:52:04 +02:00 committed by Luca Boccassi
parent 021b0ff405
commit c9bb40b133
3 changed files with 27 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
man/fido2-crypttab.sh
View file

@ -10,3 +10,12 @@ sudo /usr/lib/systemd/systemd-cryptsetup attach mytest /dev/sdXn - fido2-device=
# If that worked, let's now add the same line persistently to /etc/crypttab,
# for the future.
sudo bash -c 'echo "mytest /dev/sdXn - fido2-device=auto" >>/etc/crypttab'
# Depending on your distribution and encryption setup, you may need
# to manually regenerate your initramfs to be able to use
# a FIDO2-Device to unlock the partition during early boot.
# More information at https://unix.stackexchange.com/a/705809
# On Fedora based systems:
sudo dracut --force
# On Debian based systems:
sudo update-initramfs -u

9
man/tpm2-crypttab.sh
View file

@ -10,3 +10,12 @@ sudo /usr/lib/systemd/systemd-cryptsetup attach mytest /dev/sdXn - tpm2-device=a
# If that worked, let's now add the same line persistently to /etc/crypttab,
# for the future.
sudo bash -c 'echo "mytest /dev/sdXn - tpm2-device=auto" >>/etc/crypttab'
# Depending on your distribution and encryption setup, you may need
# to manually regenerate your initramfs to be able to use
# a TPM2 security chip to unlock the partition during early boot.
# More information at https://unix.stackexchange.com/a/705809
# On Fedora based systems:
sudo dracut --force
# On Debian based systems:
sudo update-initramfs -u

9
man/yubikey-crypttab.sh
View file

@ -26,3 +26,12 @@ sudo /usr/lib/systemd/systemd-cryptsetup attach mytest /dev/sdXn - pkcs11-uri=au
# If that worked, let's now add the same line persistently to /etc/crypttab,
# for the future.
sudo bash -c 'echo "mytest /dev/sdXn - pkcs11-uri=auto" >>/etc/crypttab'
# Depending on your distribution and encryption setup, you may need
# to manually regenerate your initramfs to be able to use a
# Yubikey / PKCS#11 Token to unlock the partition during early boot.
# More information at https://unix.stackexchange.com/a/705809
# On Fedora based systems:
sudo dracut --force
# On Debian based systems:
sudo update-initramfs -u