diff options
| author |  sommerfeld <sommerfeld@sommerfeld.dev> | 2026-05-13 13:43:11 +0100 |
|---|---|---|
| committer | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-05-13 13:43:11 +0100 |
| commit | c6b57e8dcce0608febf881a88f83decd5b2769d3 (patch) | |
| tree | 48f23c310aa5bf4d265ea0cdaa0d94e10a282359 /meta/dev.txt | |
| parent | 94e37937f7fda28f60d9ad7c56b4cb5e771ef5ce (diff) | |
| download | dotfiles-c6b57e8dcce0608febf881a88f83decd5b2769d3.tar.gz dotfiles-c6b57e8dcce0608febf881a88f83decd5b2769d3.tar.bz2 dotfiles-c6b57e8dcce0608febf881a88f83decd5b2769d3.zip | |
feat(boot): switch to systemd initramfs + rd.luks.name cmdline
Prerequisite for TPM2 LUKS unlock. systemd-cryptenroll stores TPM hints
in LUKS2 token metadata, so no cmdline options are needed beyond
rd.luks.name (sd-encrypt auto-discovers enrolled tokens).
After chezmoi apply: sudo mkinitcpio -P && sudo sbctl verify, then
reboot. Passphrase still works; TPM enrollment is a separate step.
Diffstat (limited to 'meta/dev.txt')
0 files changed, 0 insertions, 0 deletions