Skip to content

Choose initramfs generator based on Ubuntu release #2834

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
enoch85 merged 1 commit into from
Aug 7, 2026
+15 −3
Merged

Choose initramfs generator based on Ubuntu release #2834

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 15 additions & 3 deletions not-supported/tpm2-unlock.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,18 @@ debug_mode
# Check if root
root_check

# Noble (24.04) generates the initramfs with initramfs-tools,
# later releases use dracut
# https://ubuntu.com/server/docs/how-to/security/tpm-backed-luks-decryption-with-clevis/
if [ "$CODENAME" = "noble" ]
then
CLEVIS_INITRAMFS_PACKAGE="clevis-initramfs"
INITRAMFS_UPDATE=(update-initramfs -u -k 'all')
else
CLEVIS_INITRAMFS_PACKAGE="clevis-dracut"
INITRAMFS_UPDATE=(dracut -f)
fi

# Check if already installed
if is_this_installed clevis-luks || is_this_installed clevis-tpm2 || is_this_installed clevis-initramfs || is_this_installed clevis-dracut
then
Expand Down Expand Up @@ -71,21 +83,21 @@ then
fi

# Install needed tools
apt-get install clevis-tpm2 clevis-luks clevis-initramfs clevis-dracut -y
apt-get install clevis-tpm2 clevis-luks "$CLEVIS_INITRAMFS_PACKAGE" -y

# Execute the script
print_text_in_color "$ICyan" "Setting up automatic unlocking via TPM2..."
if ! echo "$PASSWORD" | clevis luks bind -k - -d "/dev/${ENCRYPTED_DEVICE[*]}" tpm2 '{"pcr_bank":"sha256","pcr_ids":"7"}'
then
msg_box "Something has failed while trying to configure clevis luks.
We will now uninstall all needed packets again, so that you are able to start over."
apt-get purge clevis-tpm2 clevis-luks clevis-initramfs clevis-dracut -y
apt-get purge clevis-tpm2 clevis-luks "$CLEVIS_INITRAMFS_PACKAGE" -y
apt-get autoremove -y
msg_box "All installed packets were successfully removed."
exit 1
fi
print_text_in_color "$ICyan" "Updating initramfs..."
if ! dracut -f
if ! "${INITRAMFS_UPDATE[@]}"
then
msg_box "Errors during initramfs update"
exit 1
Expand Down
Loading