The guide was tested on a system with the specs listed below, but should be easily adaptable.
* Device: fitlet2 * OS: Debian GNU/Linux testing (buster ) * ISO: debian-buster-DI-rc2-amd64-netinst.iso * Kernel: 4.19.0-5-amd64 * BIOS: 09/17/2018 American Megatrends Inc. FLT2.0.46.01.00 * TPM: Firmware based TPM 2.0 implementation (fTPM) * Clevis: 11-2
== Installation ==
* Download and apply the patch:
$ wget module-setup.sh.diff
$ patch -p1 /usr/lib/dracut/modules.d/60clevis/module-setup.sh module-setup.sh.diff
* Regenerate the iniramfs image with clevis modules to decrypt the root filesystem during early boot. You need to do this once: