I’m trying to setup LUKS auto unlock via TPM (my only concern for encrypting is protect my data when disposing the NVME) but something is wrong when configuring the hooks.
I’m following two guides, the Arch Wiki and this YT video Unlocking Arch Linux Full Disk Encryption Using TPM2.
Basically everything goes fine but after changing the hooks on /etc/mkinitcpio.conf and running mkinitcpio -P the pc stops booting (systemd enters emergency mode after entering LUKS password)
Original:
HOOKS=(base udev autodetect microcode kms modconf block keyboard keymap consolefont plymouth encrypt filesystems)
Modified:
HOOKS=(systemd autodetect microcode kms modconf sd-vconsole block keyboard plymouth sd-encrypt filesystems)
Is there anything I’m missing? has anyone being able to setup auto unlock?
Many thanks