I have a Manjaro setup that keeps its /boot folder on the main root partition (encrypted with LUKS2). At the moment, the GRUB bootloader unlocks it with a password prompt before handing it off to the initramfs (busybox-based, although I have also tried systemd).
What I want to do is to have the drive be unlocked with the TPM. I so far have been able to add the key to the encryption header with systemd-cryptenroll –tpm2-device=auto /dev/your_device, as well as edit the crypttab file to call upon the TPM. When I manually mount the partiton with cryptsetup, it works like a charm. However, the Grub bootloader continues to ask for the password. Is there a way I can get the bootloader to utilize the TPM rather than trying to use a password?
