• 1 Post
  • 165 Comments
Joined 2 years ago
cake
Cake day: June 14th, 2023

help-circle
  • Do you have GRUB? If yes you can edit your kernel command line and append “init=/bin/bash”, see if at least this gives you a prompt, this has saved me a couple of time in the past. Else booting on a USB and mounting your boot partition may help to fix it.

    BTW I also have LUKS and I’m using TPM, using tpm2-initramfs-tool, first, it failed because I forgot the tpm modules in initrd, but I always have 2 kernels installed and only modify one initrd at a time to have a safe boot if I have a problem, like I had!

    I tested tpm2-initramfs-tool with proper tpm2 modules and it worked.

    I also tested with clevis-initramfs and clevis-tpm2 and it’s even easier, no messing with crypttab.

    Also, as long as you can break GRUB and append “init=/bin/bash” it is not secure of course, you can then prevent grub editing or not using grub at all.