clevis/dracut luks unlocker - early dracut unlocker not engaging upon boot

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP








up vote
0
down vote

favorite












How to get FDE unlocked by clevis early dracut unlocker?



I have installed



  • Ubuntu 18 Server full disk encryption.

  • clevis (from source).

  • dracut (from source, to resolve clevis build dependencies)

  • sudo clevis luks bind -d /dev/sda3 tpm2 '"pcr_ids":"7"'

  • sudo dracut -f

dracut succeeds;



dracut: *** Including module: clevis ***


However, boot still waits for input upon boot, dracut unlocker seemingly not engaging:



"Please unlock disk sda3_crypt:"


(Late unlocker using systemd previously verified OK)







share|improve this question
























    up vote
    0
    down vote

    favorite












    How to get FDE unlocked by clevis early dracut unlocker?



    I have installed



    • Ubuntu 18 Server full disk encryption.

    • clevis (from source).

    • dracut (from source, to resolve clevis build dependencies)

    • sudo clevis luks bind -d /dev/sda3 tpm2 '"pcr_ids":"7"'

    • sudo dracut -f

    dracut succeeds;



    dracut: *** Including module: clevis ***


    However, boot still waits for input upon boot, dracut unlocker seemingly not engaging:



    "Please unlock disk sda3_crypt:"


    (Late unlocker using systemd previously verified OK)







    share|improve this question






















      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      How to get FDE unlocked by clevis early dracut unlocker?



      I have installed



      • Ubuntu 18 Server full disk encryption.

      • clevis (from source).

      • dracut (from source, to resolve clevis build dependencies)

      • sudo clevis luks bind -d /dev/sda3 tpm2 '"pcr_ids":"7"'

      • sudo dracut -f

      dracut succeeds;



      dracut: *** Including module: clevis ***


      However, boot still waits for input upon boot, dracut unlocker seemingly not engaging:



      "Please unlock disk sda3_crypt:"


      (Late unlocker using systemd previously verified OK)







      share|improve this question












      How to get FDE unlocked by clevis early dracut unlocker?



      I have installed



      • Ubuntu 18 Server full disk encryption.

      • clevis (from source).

      • dracut (from source, to resolve clevis build dependencies)

      • sudo clevis luks bind -d /dev/sda3 tpm2 '"pcr_ids":"7"'

      • sudo dracut -f

      dracut succeeds;



      dracut: *** Including module: clevis ***


      However, boot still waits for input upon boot, dracut unlocker seemingly not engaging:



      "Please unlock disk sda3_crypt:"


      (Late unlocker using systemd previously verified OK)









      share|improve this question











      share|improve this question




      share|improve this question










      asked May 11 at 13:46









      blaufish

      115




      115




















          1 Answer
          1






          active

          oldest

          votes

















          up vote
          0
          down vote













          Ubuntu 18 Full Disk Encryption clevis early unlock tested successfully with the initramfs patches; https://github.com/latchset/clevis/pull/35






          share|improve this answer




















            Your Answer







            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "89"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            convertImagesToLinks: true,
            noModals: false,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );








             

            draft saved


            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1034924%2fclevis-dracut-luks-unlocker-early-dracut-unlocker-not-engaging-upon-boot%23new-answer', 'question_page');

            );

            Post as a guest






























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes








            up vote
            0
            down vote













            Ubuntu 18 Full Disk Encryption clevis early unlock tested successfully with the initramfs patches; https://github.com/latchset/clevis/pull/35






            share|improve this answer
























              up vote
              0
              down vote













              Ubuntu 18 Full Disk Encryption clevis early unlock tested successfully with the initramfs patches; https://github.com/latchset/clevis/pull/35






              share|improve this answer






















                up vote
                0
                down vote










                up vote
                0
                down vote









                Ubuntu 18 Full Disk Encryption clevis early unlock tested successfully with the initramfs patches; https://github.com/latchset/clevis/pull/35






                share|improve this answer












                Ubuntu 18 Full Disk Encryption clevis early unlock tested successfully with the initramfs patches; https://github.com/latchset/clevis/pull/35







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered May 14 at 10:53









                blaufish

                115




                115






















                     

                    draft saved


                    draft discarded


























                     


                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1034924%2fclevis-dracut-luks-unlocker-early-dracut-unlocker-not-engaging-upon-boot%23new-answer', 'question_page');

                    );

                    Post as a guest













































































                    Popular posts from this blog

                    Which professions warranted travel in Medieval times?

                    How do so many people here on Academia.SE, and in general, afford lavish higher education programs?

                    Trouble downloading packages list due to a “Hash sum mismatch” error