Package Details: mkinitcpio-tpm2-encrypt 1.6.1-1

Git Clone URL: https://aur.archlinux.org/mkinitcpio-tpm2-encrypt.git (read-only, click to copy)
Package Base: mkinitcpio-tpm2-encrypt
Description: mkinitcpio hook that decrypts a TPM2-sealed LUKS keyfile
Upstream URL: https://github.com/electrickite/mkinitcpio-tpm2-encrypt
Licenses: GPL3
Submitter: electrickite
Maintainer: electrickite
Last Packager: electrickite
Votes: 4
Popularity: 0.000000
First Submitted: 2018-10-04 02:33 (UTC)
Last Updated: 2021-03-03 21:23 (UTC)

Latest Comments

electrickite commented on 2019-10-27 12:55 (UTC)

Version 1.5.0-1 adds a separate pcrextend kernel parameter. See https://github.com/electrickite/mkinitcpio-tpm2-encrypt/blob/master/README.md for details.

electrickite commented on 2019-09-18 03:57 (UTC)

Thanks, diabonas! v1.4.0 is compatible with tpm2-tools 4.

Good note on the repo. A number of mkinitcpio hooks in the AUR keep their code in AUR repos, but the point about Github issues and PR workflows is compelling. I may move this over when I have a bit of time.

diabonas commented on 2019-09-17 17:07 (UTC)

Since tpm2-tools in [community] has been updated to the new version 4.0, this hook doesn't work any more because the new major version of tpm2-tools has many incompatible option name changes.

Also note that hosting code directly in the AUR is frowned upon. This might be an edge case since it's only a small mkinitcpio hook, but hosting it e.g. on GitHub would also make it easier to give feedback and to send pull requests ;)

electrickite commented on 2018-12-01 15:42 (UTC)

Thanks for the pointer, grawity! I corrected the env var name, but left the legacy vars in for now, since there has been a lot of churn in TCTI config options for tpm2-tools lately. We can remove the other vars when things have stabilized a bit.

grawity commented on 2018-12-01 14:53 (UTC) (edited on 2018-12-01 14:55 (UTC) by grawity)

Regarding last change:

export TPM2TOOLS_ENV_TCTI="device:${tpmdev}"

That's the macro name; the actual envvar is TPM2TOOLS_TCTI. (With it present, TPM2TOOLS_TCTI_NAME and TPM2TOOLS_DEVICE_FILE shouldn't be needed anymore.)