mirror of
https://github.com/xcat2/confluent.git
synced 2025-01-28 11:57:37 +00:00
82ab56ebb4
The stock profile should now encrypt if requested
5 lines
252 B
Bash
5 lines
252 B
Bash
#!/bin/sh
|
|
cryptdisk=$(blkid -t TYPE="crypto_LUKS"|sed -e s/:.*//)
|
|
clevis luks bind -d $cryptdisk -k - tpm2 '{"pcr_bank": "sha256", "pcr_ids": "7"}' < /etc/confluent/confluent.apikey
|
|
cryptsetup luksRemoveKey $cryptdisk < /etc/confluent/confluent.apikey
|