diff options
| author |  sommerfeld <sommerfeld@sommerfeld.dev> | 2026-05-13 13:43:11 +0100 |
|---|---|---|
| committer | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-05-13 13:43:11 +0100 |
| commit | c6b57e8dcce0608febf881a88f83decd5b2769d3 (patch) | |
| tree | 48f23c310aa5bf4d265ea0cdaa0d94e10a282359 /etc/mkinitcpio.conf | |
| parent | 94e37937f7fda28f60d9ad7c56b4cb5e771ef5ce (diff) | |
| download | dotfiles-c6b57e8dcce0608febf881a88f83decd5b2769d3.tar.gz dotfiles-c6b57e8dcce0608febf881a88f83decd5b2769d3.tar.bz2 dotfiles-c6b57e8dcce0608febf881a88f83decd5b2769d3.zip | |
feat(boot): switch to systemd initramfs + rd.luks.name cmdline
Prerequisite for TPM2 LUKS unlock. systemd-cryptenroll stores TPM hints
in LUKS2 token metadata, so no cmdline options are needed beyond
rd.luks.name (sd-encrypt auto-discovers enrolled tokens).
After chezmoi apply: sudo mkinitcpio -P && sudo sbctl verify, then
reboot. Passphrase still works; TPM enrollment is a separate step.
Diffstat (limited to 'etc/mkinitcpio.conf')
| -rw-r--r-- | etc/mkinitcpio.conf | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/mkinitcpio.conf b/etc/mkinitcpio.conf index b994d89..1ff386b 100644 --- a/etc/mkinitcpio.conf +++ b/etc/mkinitcpio.conf @@ -52,7 +52,7 @@ FILES=() # ## NOTE: If you have /usr on a separate partition, you MUST include the # usr and fsck hooks. -HOOKS=(base udev autodetect microcode modconf kms keyboard keymap consolefont block encrypt filesystems fsck) +HOOKS=(base systemd autodetect microcode modconf kms keyboard sd-vconsole block sd-encrypt filesystems fsck) # COMPRESSION # Use this to compress the initramfs image. By default, zstd compression |