[systemd-devel] troubleshooting Clevis

lejeczek peljasz at yahoo.co.uk
Tue Oct 12 15:17:27 UTC 2021



On 28/09/2021 12:33, Lennart Poettering wrote:
> On Di, 28.09.21 12:26, lejeczek (peljasz at yahoo.co.uk) wrote:
>
>> Hi guys.
>>
>> I have 'clevis' set to get luks pin from 'tang' but unlock does not happen
>> at/during boot time and I wonder if someone can share thoughts on how to
>> investigate that?
>> I cannot see anything obvious fail during boot, moreover, manual
>> 'clevis-luks-unlock' works no problems.
> This is the systemd mailing list, not the clevis/tang mailing
> list. Please contact the clevis/tang community instead.
May ask of any possible plans where systemd would, somehow 
similarly to 'tpm', utilize 'tang'(or similar) technique to 
unlock luks encrypted devices?
ps. clevis + tang seem "broken" in CentOS stream & f35, 
unlocking @boot time to be specific, is not working.
many thanks, L.

> Lennart
>
> --
> Lennart Poettering, Berlin



More information about the systemd-devel mailing list