Release version 21 + TPM 1.2, update 5

Debian and Fedora packages for Clevis v21 with TPM 1.2 implementation

Debian

Debian Installation Instructions

Debian 12 (bookworm)

Download all DEBs to current folder:

wget -qO- https://api.github.com/repos/oldium/clevis/releases/tags/v21_tpm1u5 | jq -r '.assets[].browser_download_url | select(test("deb12|orig"))' | wget -ci-

Installation of the typical Dracut version with:

sudo apt install ./clevis-dracut_21-1+tpm1u5+deb12_amd64.deb ./clevis-systemd_21-1+tpm1u5+deb12_amd64.deb ./clevis-tpm1_21-1+tpm1u5+deb12_amd64.deb ./clevis-luks_21-1+tpm1u5+deb12_amd64.deb ./clevis_21-1+tpm1u5+deb12_amd64.deb

Installation of the typical initramfs-tools version:

sudo apt install ./clevis-initramfs_21-1+tpm1u5+deb12_amd64.deb ./clevis-systemd_21-1+tpm1u5+deb12_amd64.deb ./clevis-tpm1_21-1+tpm1u5+deb12_amd64.deb ./clevis-luks_21-1+tpm1u5+deb12_amd64.deb ./clevis_21-1+tpm1u5+deb12_amd64.deb

Debian 11 (bullseye)

Download all DEBs to current folder:

wget -qO- https://api.github.com/repos/oldium/clevis/releases/tags/v21_tpm1u5 | jq -r '.assets[].browser_download_url | select(test("deb11|orig"))' | wget -ci-

Installation of the typical Dracut version with:

sudo apt install ./clevis-dracut_21-1+tpm1u5+deb11_amd64.deb ./clevis-systemd_21-1+tpm1u5+deb11_amd64.deb ./clevis-tpm1_21-1+tpm1u5+deb11_amd64.deb ./clevis-luks_21-1+tpm1u5+deb11_amd64.deb ./clevis_21-1+tpm1u5+deb11_amd64.deb

Installation of the typical initramfs-tools version:

sudo apt install ./clevis-initramfs_21-1+tpm1u5+deb11_amd64.deb ./clevis-systemd_21-1+tpm1u5+deb11_amd64.deb ./clevis-tpm1_21-1+tpm1u5+deb11_amd64.deb ./clevis-luks_21-1+tpm1u5+deb11_amd64.deb ./clevis_21-1+tpm1u5+deb11_amd64.deb

Ubuntu

Ubuntu Installation Instructions

Ubuntu 24.10 (Oracular Oriole)

Download all DEBs to current folder:

wget -qO- https://api.github.com/repos/oldium/clevis/releases/tags/v21_tpm1u5 | jq -r '.assets[].browser_download_url | select(test("ubuntu24.10|orig"))' | wget -ci-

Installation of the typical Dracut version with:

sudo apt install ./clevis-dracut_21-1+tpm1u5+ubuntu24.10_amd64.deb ./clevis-systemd_21-1+tpm1u5+ubuntu24.10_amd64.deb ./clevis-tpm1_21-1+tpm1u5+ubuntu24.10_amd64.deb ./clevis-luks_21-1+tpm1u5+ubuntu24.10_amd64.deb ./clevis_21-1+tpm1u5+ubuntu24.10_amd64.deb

Installation of the typical initramfs-tools version:

sudo apt install ./clevis-initramfs_21-1+tpm1u5+ubuntu24.10_amd64.deb ./clevis-systemd_21-1+tpm1u5+ubuntu24.10_amd64.deb ./clevis-tpm1_21-1+tpm1u5+ubuntu24.10_amd64.deb ./clevis-luks_21-1+tpm1u5+ubuntu24.10_amd64.deb ./clevis_21-1+tpm1u5+ubuntu24.10_amd64.deb

Ubuntu 24.04 (Noble Numbat)

Download all DEBs to current folder:

wget -qO- https://api.github.com/repos/oldium/clevis/releases/tags/v21_tpm1u5 | jq -r '.assets[].browser_download_url | select(test("ubuntu24.04|orig"))' | wget -ci-

Installation of the typical Dracut version with:

sudo apt install ./clevis-dracut_21-1+tpm1u5+ubuntu24.04_amd64.deb ./clevis-systemd_21-1+tpm1u5+ubuntu24.04_amd64.deb ./clevis-tpm1_21-1+tpm1u5+ubuntu24.04_amd64.deb ./clevis-luks_21-1+tpm1u5+ubuntu24.04_amd64.deb ./clevis_21-1+tpm1u5+ubuntu24.04_amd64.deb

Installation of the typical initramfs-tools version:

sudo apt install ./clevis-initramfs_21-1+tpm1u5+ubuntu24.04_amd64.deb ./clevis-systemd_21-1+tpm1u5+ubuntu24.04_amd64.deb ./clevis-tpm1_21-1+tpm1u5+ubuntu24.04_amd64.deb ./clevis-luks_21-1+tpm1u5+ubuntu24.04_amd64.deb ./clevis_21-1+tpm1u5+ubuntu24.04_amd64.deb

Fedora

Fedora Installation Instructions

Version lock for DNF4

The versionlock plugin is used to prevent upgrades to normal clevis version.

sudo dnf install 'dnf-command(versionlock)'
sudo dnf versionlock add --raw "clevis-*.tpm1*"
sudo dnf versionlock add --raw "clevis-pin-tpm2"

Version lock for DNF5

The versionlock plugin is built-in in DNF5 and needs a separate configuration in /etc/dnf/versionlock.toml (this one is not ideal, fixes to 21-1.tpm1 version, I need to find out a better way, like sticky vendors):

/etc/dnf/versionlock.toml

version = "1.0"

[[packages]]
name = "clevis"
[[packages.conditions]]
key = "evr"
comparator = ">="
value = "21-1.tpm1u1"
[[packages.conditions]]
key = "evr"
comparator = "<"
value = "21-2"

[[packages]]
name = "clevis-systemd"
[[packages.conditions]]
key = "evr"
comparator = ">="
value = "21-1.tpm1u1"
[[packages.conditions]]
key = "evr"
comparator = "<"
value = "21-2"

[[packages]]
name = "clevis-dracut"
[[packages.conditions]]
key = "evr"
comparator = ">="
value = "21-1.tpm1u1"
[[packages.conditions]]
key = "evr"
comparator = "<"
value = "21-2"

[[packages]]
name = "clevis-luks"
[[packages.conditions]]
key = "evr"
comparator = ">="
value = "21-1.tpm1u1"
[[packages.conditions]]
key = "evr"
comparator = "<"
value = "21-2"

[[packages]]
name = "clevis-pin-pkcs11"
[[packages.conditions]]
key = "evr"
comparator = ">="
value = "21-1.tpm1u1"
[[packages.conditions]]
key = "evr"
comparator = "<"
value = "21-2"

Fedora 42 (Rawhide)

Download all RPMs to current folder:

wget -qO- https://api.github.com/repos/oldium/clevis/releases/tags/v21_tpm1u5 | jq -r '.assets[].browser_download_url | select(test("fc42"))' | wget -ci-

Typical installation:

sudo dnf install clevis-pin-tpm2 ./clevis-21-1.tpm1u5.fc42.x86_64.rpm ./clevis-dracut-21-1.tpm1u5.fc42.x86_64.rpm ./clevis-luks-21-1.tpm1u5.fc42.x86_64.rpm ./clevis-systemd-21-1.tpm1u5.fc42.x86_64.rpm

For upgrades you can omit clevis-pin-tpm2 as it is already installed.

Fedora 41

Download all RPMs to current folder:

wget -qO- https://api.github.com/repos/oldium/clevis/releases/tags/v21_tpm1u5 | jq -r '.assets[].browser_download_url | select(test("fc41"))' | wget -ci-

Typical installation:

sudo dnf install clevis-pin-tpm2 ./clevis-21-1.tpm1u5.fc41.x86_64.rpm ./clevis-dracut-21-1.tpm1u5.fc41.x86_64.rpm ./clevis-luks-21-1.tpm1u5.fc41.x86_64.rpm ./clevis-systemd-21-1.tpm1u5.fc41.x86_64.rpm

For upgrades you can omit clevis-pin-tpm2 as it is already installed.

Fedora 40

Download all RPMs to current folder:

wget -qO- https://api.github.com/repos/oldium/clevis/releases/tags/v21_tpm1u5 | jq -r '.assets[].browser_download_url | select(test("fc40"))' | wget -ci-

Typical installation:

sudo dnf install clevis-pin-tpm2 ./clevis-21-1.tpm1u5.fc40.x86_64.rpm ./clevis-dracut-21-1.tpm1u5.fc40.x86_64.rpm ./clevis-luks-21-1.tpm1u5.fc40.x86_64.rpm ./clevis-systemd-21-1.tpm1u5.fc40.x86_64.rpm

For upgrades you can omit clevis-pin-tpm2 as it is already installed.

Fedora 39

Download all RPMs to current folder:

wget -qO- https://api.github.com/repos/oldium/clevis/releases/tags/v21_tpm1u5 | jq -r '.assets[].browser_download_url | select(test("fc39"))' | wget -ci-

Typical installation:

sudo dnf install clevis-pin-tpm2 ./clevis-21-1.tpm1u5.fc39.x86_64.rpm ./clevis-dracut-21-1.tpm1u5.fc39.x86_64.rpm ./clevis-luks-21-1.tpm1u5.fc39.x86_64.rpm ./clevis-systemd-21-1.tpm1u5.fc39.x86_64.rpm

For upgrades you can omit clevis-pin-tpm2 as it is already installed.

Full Changelog: v21...v21_tpm1u5