nixos/tests/systemd-initrd-luks-tpm2: Fix on aarch64-linux

Systemd wants you to run tpm unlock on a machine with the TCG bits of OVMF enabled. If not it just bails out with No TPM2 hardware discovered and EFI firmware does not see it either, falling back to traditional unlocking
2025-10-03 21:17:19 +02:00
parent 6160af2a36
commit 4dd4e54e2c
1 changed files with 1 additions and 0 deletions
@@ -11,6 +11,7 @@
        useBootLoader = true;
        # Booting off the TPM2-encrypted device requires an available init script
        mountHostNixStore = true;
+        efi.OVMF = pkgs.OVMFFull; # this really should be the default. Only OVMFFull contains TCG
        useEFIBoot = true;
        tpm.enable = true;
      };