Re: partman-crypto: support for systemd-cryptenroll key types (TPM2/PKCS#11/FIDO2)?

[Luca Boccassi <bluca@debian.org>]

> I've been hacking on adding support for systemd-cryptenroll(1) style
keys to partman-crypto.

Thanks for working on that

> It also forcefully replaces initramfs-tools with dracut (since only
dracut supports systemd-cryptenroll style keys).

Are you 100% sure about that? I am running prebuilt ukis these days,
but before that I had just the normal initramfs-tools and I always used
fido2 for luks2 unlocking. It should work, cryptsetup will load the
plugins as long as they are installed in the initrd.

> https://salsa.debian.org/Alphix/partman-crypto/-/tree/systemd-cryptenroll?ref_type=heads

Please hook this up with opal too - that's just luks2 as well, so
everything will work in exactly the same way, minus the admin password
that still needs to be set separately