This guide allows you to use the TPM on your computer to decrypt your LUKS encrypted volumes. If you are worried about a cold boot attack on your hardware please DO NOT use this guide with your root volume!
Verify that you have a TPM in your computer:
# systemd-cryptenroll --tpm2-device=list
PATH DEVICE DRIVER
| #!/bin/bash | |
| # Set environment vars for a silent install through apt-get | |
| export DEBIAN_FRONTEND=noninteractive | |
| export DEBIAN_PRIORITY=critical | |
| # Install the LDAP utilities | |
| apt-get -y install libpam-ldap libnss-ldap nss-updatedb libnss-db | |
| # Reset environment vars for apt-get |
| #!/bin/bash | |
| # Set environment vars for a silent install through apt-get | |
| export DEBIAN_FRONTEND=noninteractive | |
| export DEBIAN_PRIORITY=critical | |
| # Install the LDAP utilities | |
| apt-get -y install libpam-ldap libnss-ldap nss-updatedb libnss-db | |
| # Reset environment vars for apt-get |