Update to new clevis upstream release, v14.
Notable changes:
rd.neednet=1 is not added automatically anymore by the dracut unlocker anymore, which means that if using the tang pin, network must be set up -- if using DHCP, adding back rd.neednet=1 to grub or dracut kernel cmdline should be enough; for more complex scenarios, refer to dracut.cmdline(7).
_netdev should not be added to either fstab/crypttab. Previous instructions asked to add _netdev to both fstatb/crypttab in order to unlock non-root devices on boot, but this is not required anymore and could even be cause of issues with the ordering of mount units, so please remove it.
To enable unlocking of multiple LUKS devices on boot, create the respective clevis bindings and then run dracut -f to update the initramfs, as well as enable clevis-luks-askpass.path service: systemctl reenable clevis-luks-askpass.path
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2020-d42f4e90f9Please log in to add feedback.
This update has been submitted for testing by scorreia.
This update's test gating status has been changed to 'ignored'.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'ignored'.
scorreia edited this update.
This update has been pushed to testing.
This update can be pushed to stable now if the maintainer wishes
This update has been submitted for stable by bodhi.
This update has been pushed to stable.