TPM Auto-Unlock With Dual Boot: Making LUKS Stop Asking For My Password

Wed, 22 Apr 2026 00:00:00 +0000

When I first set up TPM auto-unlock, my LUKS-encrypted disk seemed to forget I existed after every reboot. Windows gaming session? Password. Plugged in the eGPU? Password. Kernel update? Password. I’d re-enroll the TPM, it would work for a day or two, then break again.

This is the same Framework 13 + RTX 3070 eGPU that already needed its own pile of workarounds just to show a picture on a monitor. Of course it also breaks TPM measurements.

The password is 20 characters. Typing it takes about four seconds. I could have just kept typing it. Instead I spent a weekend setting up Secure Boot with custom keys, writing a systemd service, and packaging the whole thing for AUR. Because of course I did.

Dual-Boot on Andrea Cervesato

TPM Auto-Unlock With Dual Boot: Making LUKS Stop Asking For My Password