latchset/clevis

Clevis/Tang in 802.1X network

kirkog86 opened this issue · 4 comments

kirkog86 commented

Need to authenticate to the network using 802.1x before the root volume can be decrypted with clevis/tang
Our network is secured with 802.1x and our root volume is encrypted and needs to be decrypted through the network with clevis/tang before the system can be used. How can we authenticate to the network to decrypt the volume so that the boot process can be completed?

Cornelicorn commented

This isn't really relating to clevis, right?
You need to provide the right network config in your initrd and that depends on your initrd generator and which network stack you use in the initrd.

kirkog86 commented

Yep, you are correct, my bad...
NetworkManager + wpa_supplicant in initrd or 802.1x network configuration to allow TCPIP/DHCP/HTTP before 802.1x authentication.

sarroutbi commented

@kirkog86 : can this issue be closed then?

kirkog86 commented