Remix.run Logo
▲ rjmalagon 2 hours ago

On Fedora I implemented TPM2 unlock with strong PCR pins selection with ease. For the ocasional PCR mismatch (on firmware upgrades mostly), I have password, recovery code and even a FIDO2 USB key as options. LUKS2 + Systemd make it so easy to implement. Folks forget that LUKS2 support many unlock slots and methods.