nightspotlight

Decrypt LUKS volumes with a TPM on Fedora 35+

This guide allows you to use the TPM on your computer to decrypt your LUKS encrypted volumes. If you are worried about a cold boot attack on your hardware please DO NOT use this guide with your root volume!

Preflight Checks

Verify that you have a TPM in your computer:

# systemd-cryptenroll --tpm2-device=list
PATH DEVICE DRIVER

nightspotlight

# # cat /usr/local/etc/pkg/repos/FreeBSD.conf
# FreeBSD: { enabled: no }
rm -f /usr/local/etc/pkg/repos/FreeBSD.conf
pkg update -f
pkg install --yes openmdns
sysrc mdnsd_enable=yes
sysrc mdnsd_flags=epair0b
service mdnsd start