From de0f2a9c8d5354b6a679a3eab6a70357fe63aa56 Mon Sep 17 00:00:00 2001 From: Sergio Arroutbi Date: Thu, 8 Oct 2026 14:27:00 +0200 Subject: [PATCH 1/2] Add libpcsclite_real.so pcsclite wraps behind a separate library that must be included in the initramfs for PKCS#11 token access during early boot. Use inst_multiple -o so the file is silently skipped on distributions where it does not exist. Signed-off-by: Sergio Arroutbi --- src/luks/dracut/clevis-pin-pkcs11/module-setup.sh.in | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/luks/dracut/clevis-pin-pkcs11/module-setup.sh.in b/src/luks/dracut/clevis-pin-pkcs11/module-setup.sh.in index ce9078a8..4549cdd2 100755 --- a/src/luks/dracut/clevis-pin-pkcs11/module-setup.sh.in +++ b/src/luks/dracut/clevis-pin-pkcs11/module-setup.sh.in @@ -58,6 +58,8 @@ install() { clevis-pkcs11-common \ clevis-decrypt-pkcs11 + inst_multiple -o /lib64/libpcsclite_real.so.1 + # Include libraries from configuration automatically . /usr/bin/clevis-pkcs11-common for file in $(clevis_get_module_path_from_pkcs11_config | sed -e 's@;@\n@g'); do From 454da59f5128a0ccfe440ce16a23496f6df5c193 Mon Sep 17 00:00:00 2001 From: Sergio Arroutbi Date: Thu, 8 Oct 2026 16:24:07 +0200 Subject: [PATCH 2/2] Prefer wildcard to avoid tightening to version 1 Signed-off-by: Sergio Arroutbi --- src/luks/dracut/clevis-pin-pkcs11/module-setup.sh.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/luks/dracut/clevis-pin-pkcs11/module-setup.sh.in b/src/luks/dracut/clevis-pin-pkcs11/module-setup.sh.in index 4549cdd2..48f4d145 100755 --- a/src/luks/dracut/clevis-pin-pkcs11/module-setup.sh.in +++ b/src/luks/dracut/clevis-pin-pkcs11/module-setup.sh.in @@ -58,7 +58,7 @@ install() { clevis-pkcs11-common \ clevis-decrypt-pkcs11 - inst_multiple -o /lib64/libpcsclite_real.so.1 + inst_multiple -o /lib64/libpcsclite_real.so* # Include libraries from configuration automatically . /usr/bin/clevis-pkcs11-common