Record · corpus.blog/posts/01a087b5-829d-7065-80a9-09017df3d9f4

Bypassing disk encryption on systems with automatic TPM2 unlock

oddlama.org · published 16 January 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at oddlama.org Wayback capture

7blogs citing

First cited: 6 Apr 2022
Most recent: 31 Jul 2026
Rank this month: not ranked
External links: 26
Words captured: 9,919

Cited by

Blog

In the post

Date

punkto.org

PUNKTO | Safe(ish) Server Encryption Read at the source ↗

31 Jul 2026

blastrock.github.io

The post-ultimate guide to better Full Disk Encryption with TPM and Secure Boot (with hibernation support!) Read at the source ↗

23 May 2026

haseebmajid.dev

How to Setup a New PC With Lanzaboote, TPM Decryption, sops-nix, Impermanence and nixos-anywhere Read at the source ↗

31 Dec 2025

debugging.works

FAQ: What is a TPM and how can I use it on Linux? Read at the source ↗

1 Jun 2025

nathantypanski.com

Framework 13: Arch, Secure Boot, & Nix Read at the source ↗

1 May 2025

ejaaskel.dev

Yocto Hardening: Block Device Encryption with dm-crypt Read at the source ↗

3 Mar 2025

Blog · Jon Seager

Secure Boot & TPM-backed Full Disk Encryption on NixOS Read at the source ↗

20 Apr 2024

blastrock.github.io

The ultimate guide to Full Disk Encryption with TPM and Secure Boot (with hibernation support!) Read at the source ↗

6 Apr 2022

Links from this post

Link

Host

https://uapi-group.org/specifications/specs/linux_tpm_pcr_registry/

uapi-group.org

https://www.freedesktop.org/software/systemd/man/latest/systemd-cryptenroll.html

freedesktop.org

https://github.com/search?q=cryptenroll+%2F0%5C%2B2%5C%2B7%2F&type=code

github.com

https://duckduckgo.com/?t=h_&q=cryptenroll+0%2B2%2B7&ia=web

duckduckgo.com

Brave New Trusted Boot World Read at the source ↗

0pointer.net

Secure Boot & TPM-backed Full Disk Encryption on NixOS Read at the source ↗

jnsgr.uk

https://forum.manjaro.org/t/howto-using-secure-boot-and-tpm2-to-unlock-luks-partition-on-boot/101626

forum.manjaro.org

https://community.frame.work/t/guide-setup-tpm2-autodecrypt/39005

community.frame.work

Debian with LUKS and TPM auto decryption Read at the source ↗

blog.fernvenue.com

https://wiki.gentoo.org/wiki/Trusted_Platform_Module/LUKS

wiki.gentoo.org

https://221b.uk/safe-automatic-decryption-luks-partition-tpm2

221b.uk

Automatically decrypt your disk using TPM2 Read at the source ↗

fedoramagazine.org

https://blastrock.github.io/fde-tpm-sb.html

blastrock.github.io

https://gist.github.com/jdoss/777e8b52c8d88eb87467935769c98a95

gist.github.com

https://wiki.archlinux.org/title/User:Krin/Secure_Boot,_full_disk_encryption,_and_TPM2_unlocking_install

wiki.archlinux.org

https://wiki.archlinux.org/title/Systemd-cryptenroll

wiki.archlinux.org

https://github.com/latchset/clevis/blob/0839ee294a2cbb0c1ecf1749c9ca530ef9f59f8f/src/initramfs-tools/scripts/local-top/clevis.in

github.com

https://github.com/nix-community/lanzaboote

github.com

https://github.com/nix-community/lanzaboote/blob/master/docs/QUICK_START.md

github.com

https://github.com/systemd/systemd/blob/main/src/cryptsetup/cryptsetup.c

github.com

https://github.com/systemd/systemd/blob/cc7300fc5868f6d47f3f47076100b574bf54e58d/src/cryptsetup/cryptsetup-tokens/cryptsetup-token-systemd-tpm2.c

github.com

https://github.com/patrickdag

github.com

https://forge.lel.lol/patrick/nix-config/src/commit/ab2cb2b4d554040ce208fc60624fe729a9d5e32b/modules/ensure-pcr.nix

forge.lel.lol

https://matrix.to/

matrix.to

https://news.ycombinator.com/item?id=42733640

news.ycombinator.com

https://www.reddit.com/r/linux/comments/1i2pf38/bypassing_disk_encryption_on_systems_with

reddit.com