diff --git a/boards/librem13v2/librem13v2.config b/boards/librem13v2/librem13v2.config index 776256be..312fb722 100644 --- a/boards/librem13v2/librem13v2.config +++ b/boards/librem13v2/librem13v2.config @@ -25,6 +25,7 @@ CONFIG_LIBREMKEY=y CONFIG_LINUX_USB=y export CONFIG_TPM=y +export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=y export CONFIG_BOOTSCRIPT=/bin/gui-init export CONFIG_BOOT_REQ_HASH=n export CONFIG_BOOT_REQ_ROLLBACK=n diff --git a/boards/librem13v4/librem13v4.config b/boards/librem13v4/librem13v4.config index 1b0a83ab..765c0d83 100644 --- a/boards/librem13v4/librem13v4.config +++ b/boards/librem13v4/librem13v4.config @@ -25,6 +25,7 @@ CONFIG_LIBREMKEY=y CONFIG_LINUX_USB=y export CONFIG_TPM=y +export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=y export CONFIG_BOOTSCRIPT=/bin/gui-init export CONFIG_BOOT_REQ_HASH=n export CONFIG_BOOT_REQ_ROLLBACK=n diff --git a/boards/librem15v3/librem15v3.config b/boards/librem15v3/librem15v3.config index c73f5b8f..82d2ad8b 100644 --- a/boards/librem15v3/librem15v3.config +++ b/boards/librem15v3/librem15v3.config @@ -27,6 +27,7 @@ CONFIG_LIBREMKEY=y CONFIG_LINUX_USB=y export CONFIG_TPM=y +export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=y export CONFIG_BOOTSCRIPT=/bin/gui-init export CONFIG_BOOT_REQ_HASH=n export CONFIG_BOOT_REQ_ROLLBACK=n diff --git a/boards/librem15v4/librem15v4.config b/boards/librem15v4/librem15v4.config index b2349799..0fcddcbb 100644 --- a/boards/librem15v4/librem15v4.config +++ b/boards/librem15v4/librem15v4.config @@ -27,6 +27,7 @@ CONFIG_LIBREMKEY=y CONFIG_LINUX_USB=y export CONFIG_TPM=y +export CONFIG_TPM_NO_LUKS_DISK_UNLOCK=y export CONFIG_BOOTSCRIPT=/bin/gui-init export CONFIG_BOOT_REQ_HASH=n export CONFIG_BOOT_REQ_ROLLBACK=n diff --git a/initrd/bin/kexec-save-default b/initrd/bin/kexec-save-default index 85ac3f27..fe04e864 100755 --- a/initrd/bin/kexec-save-default +++ b/initrd/bin/kexec-save-default @@ -45,7 +45,7 @@ fi KEY_DEVICES="$paramsdir/kexec_key_devices.txt" KEY_LVM="$paramsdir/kexec_key_lvm.txt" save_key="n" -if [ "$CONFIG_TPM" = "y" ]; then +if [[ "$CONFIG_TPM" = "y" && "$CONFIG_TPM_NO_LUKS_DISK_UNLOCK" != "y" ]]; then if [ ! -r "$KEY_DEVICES" ]; then read \ -n 1 \