https://cybertoolchain.io/tools/clevis New releases and features in Clevis, tracked by The Cyber Toolchain. en Thu, 15 Oct 2026 14:17:46 GMT https://github.com/latchset/clevis/compare/v23...v24 https://github.com/latchset/clevis/compare/v23...v24 Thu, 15 Oct 2026 14:17:46 GMT Clevis v24 adds optional mTLS support to the tang pin and drops the TPM1 network dependency from dracut.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds optional mutual TLS (mTLS) support to the tang pin for authenticated tang server connections.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Drops the network dependency from the TPM1 dracut module, so TPM1 unlocking no longer requires network availability at boot. • Includes `libpcsclite_real.so` in the dracut initrd PKCS#11 module to enable PKCS#11 token access during early boot on distributions that ship the library. • Orders `clevis-luks-askpass` after `network-online.target` in the tang dracut module when systemd is included, ensuring network is ready before tang unlock is attempted. • Passes `--force-password` to `luksChangeKey` to bypass pwquality/cracklib checks for Clevis-generated random keys. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clevis https://github.com/latchset/clevis/releases/tag/v23 https://github.com/latchset/clevis/releases/tag/v23 Wed, 13 May 2026 15:09:36 GMT Clevis v23 adds TPM 1.2 support and a build option to make the tpm1 pin optional. • Adds TPM 1.2 support via a new `tpm1` pin, enabling Clevis-based automated decryption on legacy hardware with TPM 1.2 chips. • Adds a Meson build option to make the `tpm1` pin optional, allowing packagers and builders to exclude TPM 1.2 support from the binary. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clevis https://github.com/latchset/clevis/releases/tag/v22 https://github.com/latchset/clevis/releases/tag/v22 Mon, 16 Mar 2026 15:05:10 GMT Clevis v22 adds non-block-device LUKS unlocking, a pin authoring template, and TPM2 PCR algorithm auto-detection. • Supports unlocking non-block-device volumes (e.g. loop files, network-backed volumes) via `clevis-luks-askpass`. • Adds a pin template with documentation and a sample 'file' pin to help authors write custom Clevis pins. • TPM2 pin now auto-selects the first PCR algorithm bank supported by the TPM as the default, improving hardware compatibility. • Copies a CA certificate bundle into initramfs-tools so `curl` can perform HTTPS connections during early boot. • Installs `clevis-pin-tpm2` into the initrd automatically when the TPM2 pin is required. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clevis https://github.com/latchset/clevis/releases/tag/v21 https://github.com/latchset/clevis/releases/tag/v21 Tue, 24 Sep 2024 12:05:38 GMT Clevis v21 adds experimental PKCS#11 pin support for hardware token-based unlocking. • Adds experimental PKCS#11 pin basic functionality, enabling hardware token-based unlocking workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clevis