Hi Not the maintainer here,
On Wed, Jul 15, 2026 at 05:20:52AM +0000, Lloyd wrote: > The latest shim update for Trixie caused me significant grief with > respect to TPM-backed decryption keys. > > I have a number of systems with LUKS-encrypted root volumes which > store the decryption key in the TPM to permit unattended remote > unlock. The TPM is sealed against a number of PCRs; if I were to > guess PCR7 is the one of interest here. The latest apt patchset > contained an update to shim, which quietly invalidated the PCRs. > This caused all hell to break loose upon reboot. I would like to mention that the point release announcement mentions the shim update under the noteworthy updates section. https://lists.debian.org/debian-announce/2026/msg00006.html Regards, Salvatore
