Top all-time · #10568
Javier Martinez Canillas
Personal blog · blog.dowhile0.orgsystemshardware
Javier Martinez Canillas's personal blog at blog.dowhile0.org covers systems and hardware. Since 2019, 7 different Hacker News readers have linked it 8 times. It is still writing: the last post was on 2025-03-28, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN commenters link this blog for its guidance on automatically unlocking LUKS-encrypted Linux volumes with TPM 2.0, including a 2017 Fedora setup article. Commenters mostly cite it as a reference.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
$ cat /dev/random
Most-linked posts?
- /2017/10/18/automatic-luks-volumes-unlocking-using-a-tpm2-chip/3 people · 4 mentions · first linked 2019-01-25
What Hacker News says?
While not part of the OP - there is some information on a common TPM use (LUKS unlocking) with the later TPM 2.0 options (TPM 1.x was not amazing with Linux). https://blog.dowhile0.org/2017/10/18/automatic-luks-volumes-...
Comment linking /2017/10/18/automatic-luks-volumes-unlocking-using-a-tpm2-chip/
on “Practical Linux Hardening Guide”Submitted Fedora 36: A brave new (DRM/KMS only) world as a story · 235 points
HN discussionHere's a 2017 article on Fedora setup with TPM2, https://blog.dowhile0.org/2017/10/18/automatic-luks-volumes-...
Comment linking /2017/10/18/automatic-luks-volumes-unlocking-using-a-tpm2-chip/
on “PureBoot, the High Security Boot Process”Submitted How to troubleshoot deferred probe issues in Linux as a story · 3 points
HN discussionHow is this superior to clevis? https://blog.dowhile0.org/2017/10/18/automatic-luks-volumes-... https://m.youtube.com/watch?v=Dk6ZuydQt9I
Comment linking /2017/10/18/automatic-luks-volumes-unlocking-using-a-tpm2-chip/
on “Unlocking LUKS2 Volumes with TPM2, FIDO2, PKCS#11 Security HW on Systemd 248”Submitted Building a retro handheld console with Fedora and a RPi zero as a story · 3 points
HN discussionIt is possible if a bit convoluted [1, 2]. When I looked into it last year it seemed the good guides were focused on Clevis & Tang with a separate server (i.e. your PC at home on your network would boot but if away from the Tang server the PC would fall back to password). In a quick look it seems they may simply support TPM2 now although I haven't looked into how/if this is different to the article. [1]: This is old…
Comment linking /2017/10/18/automatic-luks-volumes-unlocking-using-a-tpm2-chip/
on “Unlocking LUKS2 Volumes with TPM2, FIDO2, PKCS#11 Security HW on Systemd 248”Submitted Atomically exchange vfat files in Linux as a story · 2 points
HN discussion