1{ config, lib, pkgs, ... }: 2{ 3 boot.initrd.luks.devices."root".crypttabExtraOpts = [ "tpm2-device=auto" "tpm2-measure-pcr=yes" ]; 4}