You are not logged in.

#1 2025-08-25 14:33:50

Carbophile
Member
Registered: 2025-08-25
Posts: 2

Do cmdline sd-encrypt parameters override or add onto LUKS flags?

If I have the allow-discards flag in the LUKS header (set with cryptsetup open --allow-discards --persistent /dev/sdx y) with the sd-encrypt initramfs hook with the kernel cmdline parameter rd.luks.options=tpm2-measure-pcr=yes, will discards be enabled or not?

Offline

#2 2025-08-27 11:34:04

Carbophile
Member
Registered: 2025-08-25
Posts: 2

Re: Do cmdline sd-encrypt parameters override or add onto LUKS flags?

After testing, the answer is yes, discards will remain enabled.

The command line parameters compliment the LUKS header flags, they don't replace them.

Offline

Board footer

Powered by FluxBB