Skip to content

v1.8.0

Choose a tag to compare

released this 14 Jul 13:05
e793cc5

v1.8.0

Minor Changes

  • luks_unlock - Add an explicitly non-idempotent, one-run recovery option to rebuild initramfs after an existing Clevis binding passes every verifier.

Bugfixes

  • luks_unlock - Enforce the declared Tang signing thumbprint during preflight and cached-advertisement enrollment, verify persisted bindings using Clevis's URL-only representation, and bound an exact-keyslot online unlock test without exposing key material.