From 34658590e45ab85f6008379d9433406a5c7fd914 Mon Sep 17 00:00:00 2001 From: Javier Martinez Canillas Date: Wed, 7 Nov 2018 15:12:17 +0100 Subject: [PATCH 2/3] Install cryptsetup and tpm2_pcrlist in the initramfs The cryptsetup and tpm2_pcrlist are missing in the initramfs, this makes automatic LUKS unlocking fail with the following errors: dracut-initqueue[382]: /usr/libexec/clevis-luks-askpass: line 52: cryptsetup: command not found dracut-initqueue[382]: /usr/bin/clevis-decrypt-tpm2: line 40: tpm2_pcrlist: command not found Suggested-by: Federico Chiacchiaretta Fixes: #74 --- src/luks/systemd/dracut/module-setup.sh.in | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/luks/systemd/dracut/module-setup.sh.in b/src/luks/systemd/dracut/module-setup.sh.in index 48aea5b3f29a..41e7d6c9b002 100755 --- a/src/luks/systemd/dracut/module-setup.sh.in +++ b/src/luks/systemd/dracut/module-setup.sh.in @@ -40,6 +40,7 @@ install() { clevis-decrypt-sss \ @libexecdir@/clevis-luks-askpass \ clevis-decrypt \ + cryptsetup \ luksmeta \ clevis \ mktemp \ @@ -49,6 +50,7 @@ install() { for cmd in clevis-decrypt-tpm2 \ tpm2_createprimary \ + tpm2_pcrlist \ tpm2_unseal \ tpm2_load; do @@ -60,6 +62,7 @@ install() { if (($ret == 0)); then inst_multiple clevis-decrypt-tpm2 \ tpm2_createprimary \ + tpm2_pcrlist \ tpm2_unseal \ tpm2_load fi -- 2.19.1