From 4dd4e54e2ce4a669d1bc139ae2783f24fa18c580 Mon Sep 17 00:00:00 2001 From: Arian van Putten Date: Fri, 3 Oct 2025 21:17:19 +0200 Subject: [PATCH] nixos/tests/systemd-initrd-luks-tpm2: Fix on aarch64-linux Systemd wants you to run tpm unlock on a machine with the TCG bits of OVMF enabled. If not it just bails out with No TPM2 hardware discovered and EFI firmware does not see it either, falling back to traditional unlocking --- nixos/tests/systemd-initrd-luks-tpm2.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/nixos/tests/systemd-initrd-luks-tpm2.nix b/nixos/tests/systemd-initrd-luks-tpm2.nix index 20e203b0e86b..6cc42bbbda73 100644 --- a/nixos/tests/systemd-initrd-luks-tpm2.nix +++ b/nixos/tests/systemd-initrd-luks-tpm2.nix @@ -11,6 +11,7 @@ useBootLoader = true; # Booting off the TPM2-encrypted device requires an available init script mountHostNixStore = true; + efi.OVMF = pkgs.OVMFFull; # this really should be the default. Only OVMFFull contains TCG useEFIBoot = true; tpm.enable = true; };