This post describes who to use Grub2 to unlock a LUKS encrypted
/boot partition using a keyfile
that sealed using a TPM. The original patches for this are from Hernan Gatta and are on the
grub2-devel mailing list.
These can be applied onto the current Grub2 master branch, although involves …