You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

13 lines
290 B

#!/bin/bash
set -e
CRYPTFS=/dev/nvme0n1p3
echo "creating secret key"
kdir -p /root/keys
tpm2_getrandom 32 -o /root/keys/fde-secret.bin
chmod 600 /root/keys/fde-secret.bin
cryptsetup luksAddKey $CRYPTFS /root/keys/fde-secret.bin
# /usr/sbin/update-luks-tpm.sh #not reqired before reboot