Add installation script for TPM unseal and bootstrap services

2026-08-29 19:36:46 +02:00
parent 949b5763fc
commit c2e08a6a5f
2 changed files with 13 additions and 0 deletions
@@ -12,6 +12,11 @@

 set -euo pipefail

+CONFIG="/etc/vault.d/tpm2.env"
+if [ -r "$CONFIG" ]; then
+	set -a; . "$CONFIG"; set +a
+fi
+
 : "${VAULT_ADDR:?VAULT_ADDR must be set}"
 TPM_UNSEAL_SCRIPT="${TPM_UNSEAL_SCRIPT:-/usr/local/sbin/tpm-unseal-password.sh}"
 TPM_HANDLE="${TPM_HANDLE:-0x81010001}"