FICHA · AUR

mkinitcpio-clevis-hook

A simple hook to unlock LUKS devices on boot with clevis and TPM on Arch Linux and its derivatives, including the non-systemd versions

  • initramfs-hook
  • System
  • SECURITY
official+codex · reviewed · Jun 2, 2026 description in en

Description

LUKS devices can be unlocked during boot with Clevis and TPM integration on Arch-based systems. Administrators use this hook when disk unlock should use hardware-backed policy instead of only manual passphrase entry.

It is an early-boot disk unlock hook, not a full disk-encryption setup wizard. TPM policy and recovery access must be planned before enabling it.

Permissions

Permissions not analysed for this source yet.