From 0509fb6f9764f44f250496d1636fe8cfcf684028 Mon Sep 17 00:00:00 2001
From: Scott Stephens <stephens.js@gmail.com>
Date: Mon, 15 Sep 2025 14:50:08 -0400
Subject: [PATCH] nixos/tpm2: use better method for udev trigger

---
 nixos/modules/security/tpm2.nix | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/nixos/modules/security/tpm2.nix b/nixos/modules/security/tpm2.nix
index c5660e765f9a..364343f05b60 100644
--- a/nixos/modules/security/tpm2.nix
+++ b/nixos/modules/security/tpm2.nix
@@ -346,12 +346,8 @@ in
 
                 if [ "$oldHash" != "$newHash" ]; then
                   echo "TPM udev rules changed, triggering udev"
-                  for i in $(seq 0 9); do
-                    if [ -e /dev/tpm$i ]; then
-                      ${config.systemd.package}/bin/udevadm trigger --name-match=tpm$i --action=change
-                      ${config.systemd.package}/bin/udevadm trigger --name-match=tpmrm$i --action=change
-                    fi
-                  done
+                  ${config.systemd.package}/bin/udevadm trigger --subsystem-match=tpm --action=change
+                  ${config.systemd.package}/bin/udevadm trigger --subsystem-match=tpmrm --action=change
                   echo "$newHash" > $hashFile
                 else
                   echo "TPM udev rules unchanged, not triggering udev"