Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
In order to use systemd-cryptenroll against a tpm2 module on Fedora Silverblue (as of 36), a user must layer tpm2-tools and run this command:
rpm-ostree initramfs --enable --arg=--force-add --arg=tpm2-tss before doing the enrollment
Describe the solution you'd like
A clear and concise description of what you want to happen.
If tpm2-tools was included in the rpm-ostree image and support for tpm2-tss was included by default in the initramfs, a user could jump straight to the systemd-cryptenroll step. Fedora could even offer to enable it during the install process.
Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
We could continue doing the above manually- I'm also raising this issue to document the required steps.
Additional context
Add any other context or screenshots about the feature request here.
Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
In order to use
systemd-cryptenrollagainst a tpm2 module on Fedora Silverblue (as of 36), a user must layertpm2-toolsand run this command:rpm-ostree initramfs --enable --arg=--force-add --arg=tpm2-tssbefore doing the enrollmentDescribe the solution you'd like
A clear and concise description of what you want to happen.
If tpm2-tools was included in the rpm-ostree image and support for tpm2-tss was included by default in the initramfs, a user could jump straight to the
systemd-cryptenrollstep. Fedora could even offer to enable it during the install process.Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
We could continue doing the above manually- I'm also raising this issue to document the required steps.
Additional context
Add any other context or screenshots about the feature request here.