about summary refs log tree commit diff
path: root/hardware/pc/disks.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hardware/pc/disks.nix')
-rw-r--r--hardware/pc/disks.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/hardware/pc/disks.nix b/hardware/pc/disks.nix
index 825a9f0..5e9487b 100644
--- a/hardware/pc/disks.nix
+++ b/hardware/pc/disks.nix
@@ -22,6 +22,7 @@
     mkfs.vfat "${HDD}"-part1
     mkfs.ext4 "${HDD}"-part2
     cryptsetup -q luksFormat "${HDD}"-part3  --type luks2
+    systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0 "${HDD}"-part3
     cryptsetup open --type luks "${HDD}"-part3 encrypted_root
     pvcreate /dev/mapper/encrypted_root
     vgcreate encrypted_root_pool /dev/mapper/encrypted_root