> I've been hacking on adding support for systemd-cryptenroll(1) style keys to partman-crypto.
Thanks for working on that > It also forcefully replaces initramfs-tools with dracut (since only dracut supports systemd-cryptenroll style keys). Are you 100% sure about that? I am running prebuilt ukis these days, but before that I had just the normal initramfs-tools and I always used fido2 for luks2 unlocking. It should work, cryptsetup will load the plugins as long as they are installed in the initrd. > https://salsa.debian.org/Alphix/partman-crypto/-/tree/systemd-cryptenroll?ref_type=heads Please hook this up with opal too - that's just luks2 as well, so everything will work in exactly the same way, minus the admin password that still needs to be set separately
