|
|
@ -4,7 +4,7 @@ set -e |
|
|
CRYPTFS=/dev/nvme0n1p3 |
|
|
CRYPTFS=/dev/nvme0n1p3 |
|
|
|
|
|
|
|
|
echo "creating secret key" |
|
|
echo "creating secret key" |
|
|
kdir -p /root/keys |
|
|
mkdir -p /root/keys |
|
|
tpm2_getrandom 32 -o /root/keys/fde-secret.bin |
|
|
tpm2_getrandom 32 -o /root/keys/fde-secret.bin |
|
|
chmod 600 /root/keys/fde-secret.bin |
|
|
chmod 600 /root/keys/fde-secret.bin |
|
|
cryptsetup luksAddKey $CRYPTFS /root/keys/fde-secret.bin |
|
|
cryptsetup luksAddKey $CRYPTFS /root/keys/fde-secret.bin |
|
|
|