Commit 4dd4e54e authored by Arian van Putten's avatar Arian van Putten
Browse files

nixos/tests/systemd-initrd-luks-tpm2: Fix on aarch64-linux 

Systemd wants you to run tpm unlock on a machine with the TCG
bits of OVMF enabled. If not it just bails out with

No TPM2 hardware discovered and EFI firmware does not see it either, falling back to traditional unlocking
parent 6160af2a

nixos/tests/systemd-initrd-luks-tpm2.nix

+1 −0
Original line number Diff line number Diff line
@@ -11,6 +11,7 @@ 
        useBootLoader = true;

        # Booting off the TPM2-encrypted device requires an available init script

        mountHostNixStore = true;

        efi.OVMF = pkgs.OVMFFull; # this really should be the default. Only OVMFFull contains TCG

        useEFIBoot = true;

        tpm.enable = true;

      };