From 208c5d469ffab5e6019e27df3c8133c042088eaa Mon Sep 17 00:00:00 2001 From: Luc Date: Thu, 31 Jul 2025 18:02:51 +0200 Subject: [PATCH] docs/zlevis/index.md: add --- docs/zlevis/index.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 docs/zlevis/index.md diff --git a/docs/zlevis/index.md b/docs/zlevis/index.md new file mode 100644 index 0000000..e214e6e --- /dev/null +++ b/docs/zlevis/index.md @@ -0,0 +1,5 @@ +# Zlevis + +[Zlevis](https://git.ampel.dev/ampel/zlevis) is a tool that enables the automatic decryption of a [ZFS](https://openzfs.org/wiki/Main_Page) root pool with [TPM 2.0](https://en.wikipedia.org/wiki/Trusted_Platform_Module#TPM_2.0). It is based on the `pin-tpm2` feature of [Clevis](https://github.com/latchset/clevis) and is rewritten in POSIX shell to omit the presence of `bash` in the `initramfs`. Just like Clevis' `pin-tmp2` feature, `zlevis` also depends on [jose](https://github.com/latchset/jose); to format configuration and generate or encrypt/decrypt keys, and on [tpm2-tools](https://github.com/tpm2-software/tpm2-tools); to read and create objects in the TPM. + +Zlevis is thus a minimal fork of Clevis, solely optimised for the automatic decryption of a ZFS root pool with TPM 2.0. \ No newline at end of file