clevis/dracut luks unlocker - early dracut unlocker not engaging upon boot

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP








up vote
0
down vote

favorite












How to get FDE unlocked by clevis early dracut unlocker?



I have installed



  • Ubuntu 18 Server full disk encryption.

  • clevis (from source).

  • dracut (from source, to resolve clevis build dependencies)

  • sudo clevis luks bind -d /dev/sda3 tpm2 '"pcr_ids":"7"'

  • sudo dracut -f

dracut succeeds;



dracut: *** Including module: clevis ***


However, boot still waits for input upon boot, dracut unlocker seemingly not engaging:



"Please unlock disk sda3_crypt:"


(Late unlocker using systemd previously verified OK)







share|improve this question
























    up vote
    0
    down vote

    favorite












    How to get FDE unlocked by clevis early dracut unlocker?



    I have installed



    • Ubuntu 18 Server full disk encryption.

    • clevis (from source).

    • dracut (from source, to resolve clevis build dependencies)

    • sudo clevis luks bind -d /dev/sda3 tpm2 '"pcr_ids":"7"'

    • sudo dracut -f

    dracut succeeds;



    dracut: *** Including module: clevis ***


    However, boot still waits for input upon boot, dracut unlocker seemingly not engaging:



    "Please unlock disk sda3_crypt:"


    (Late unlocker using systemd previously verified OK)







    share|improve this question






















      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      How to get FDE unlocked by clevis early dracut unlocker?



      I have installed



      • Ubuntu 18 Server full disk encryption.

      • clevis (from source).

      • dracut (from source, to resolve clevis build dependencies)

      • sudo clevis luks bind -d /dev/sda3 tpm2 '"pcr_ids":"7"'

      • sudo dracut -f

      dracut succeeds;



      dracut: *** Including module: clevis ***


      However, boot still waits for input upon boot, dracut unlocker seemingly not engaging:



      "Please unlock disk sda3_crypt:"


      (Late unlocker using systemd previously verified OK)







      share|improve this question












      How to get FDE unlocked by clevis early dracut unlocker?



      I have installed



      • Ubuntu 18 Server full disk encryption.

      • clevis (from source).

      • dracut (from source, to resolve clevis build dependencies)

      • sudo clevis luks bind -d /dev/sda3 tpm2 '"pcr_ids":"7"'

      • sudo dracut -f

      dracut succeeds;



      dracut: *** Including module: clevis ***


      However, boot still waits for input upon boot, dracut unlocker seemingly not engaging:



      "Please unlock disk sda3_crypt:"


      (Late unlocker using systemd previously verified OK)









      share|improve this question











      share|improve this question




      share|improve this question










      asked May 11 at 13:46









      blaufish

      115




      115




















          1 Answer
          1






          active

          oldest

          votes

















          up vote
          0
          down vote













          Ubuntu 18 Full Disk Encryption clevis early unlock tested successfully with the initramfs patches; https://github.com/latchset/clevis/pull/35






          share|improve this answer




















            Your Answer







            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "89"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            convertImagesToLinks: true,
            noModals: false,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );








             

            draft saved


            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1034924%2fclevis-dracut-luks-unlocker-early-dracut-unlocker-not-engaging-upon-boot%23new-answer', 'question_page');

            );

            Post as a guest






























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes








            up vote
            0
            down vote













            Ubuntu 18 Full Disk Encryption clevis early unlock tested successfully with the initramfs patches; https://github.com/latchset/clevis/pull/35






            share|improve this answer
























              up vote
              0
              down vote













              Ubuntu 18 Full Disk Encryption clevis early unlock tested successfully with the initramfs patches; https://github.com/latchset/clevis/pull/35






              share|improve this answer






















                up vote
                0
                down vote










                up vote
                0
                down vote









                Ubuntu 18 Full Disk Encryption clevis early unlock tested successfully with the initramfs patches; https://github.com/latchset/clevis/pull/35






                share|improve this answer












                Ubuntu 18 Full Disk Encryption clevis early unlock tested successfully with the initramfs patches; https://github.com/latchset/clevis/pull/35







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered May 14 at 10:53









                blaufish

                115




                115






















                     

                    draft saved


                    draft discarded


























                     


                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1034924%2fclevis-dracut-luks-unlocker-early-dracut-unlocker-not-engaging-upon-boot%23new-answer', 'question_page');

                    );

                    Post as a guest













































































                    Popular posts from this blog

                    How do so many people here on Academia.SE, and in general, afford lavish higher education programs?

                    Trouble downloading packages list due to a “Hash sum mismatch” error

                    How do I move numbers in filenames, in a batch renaming operation?