
My disk is encrypted with LUKS and I wanted to make it auto-unlock using TPM.
I can’t enter UEFI as I have fastboot enabled.
Could anyone help me please? 🫡
You are going to need to run a rescue system to get this sorted, for example from an USB stick. Usually you can enter UEFI setup by just spamming the button on boot (F2, F12, F10, Del, look up what your system uses). If that doesn’t work you can either reset the BIOS settings, using the jumper or button (see manual again, removing the battery is internet lore and almost never required, just use the jumper). Another option is to remove your boot drive, that will prevent fastboot from working, so the next boot will be a regular one.
Do you have GRUB? If yes you can edit your kernel command line and append “init=/bin/bash”, see if at least this gives you a prompt, this has saved me a couple of time in the past. Else booting on a USB and mounting your boot partition may help to fix it.
BTW I also have LUKS and I’m using TPM, using tpm2-initramfs-tool, first, it failed because I forgot the tpm modules in initrd, but I always have 2 kernels installed and only modify one initrd at a time to have a safe boot if I have a problem, like I had!
I tested tpm2-initramfs-tool with proper tpm2 modules and it worked.
I also tested with clevis-initramfs and clevis-tpm2 and it’s even easier, no messing with crypttab.
Also, as long as you can break GRUB and append “init=/bin/bash” it is not secure of course, you can then prevent grub editing or not using grub at all.
Try disabling TPM in the bios/uefi by spamming DEL or ESC or F10 or F12 or F9 or ENTER