Oldřich Jedlička

Or my [extension](https://github.com/latchset/clevis/pull/462/commits/7b55b165ae11c1f231939ca588be4c5c36e66754) added in PR #462 could be used together with simple bash substring check: ```bash pins=$(clevis_luks_used_pins "${dev}") || continue [[ " $pins " == *" tang "* ]]...

Anyway, I have not found any `pipefail` in my `/usr/lib/dracut` (standard installation). But because the `module-setup.sh` file is being sourced by Dracut, any changes inside this file might be propagated...

Thanks, so it has to be enabled somewhere else. I have checked Dracut sources and it seems `dracut.sh` itself [enables](https://github.com/dracutdevs/dracut/blob/5d2bda46f4e75e85445ee4d3bd3f68bf966287b9/dracut.sh#L36) pipefail and [sources](https://github.com/dracutdevs/dracut/blob/5d2bda46f4e75e85445ee4d3bd3f68bf966287b9/dracut.sh#L1308) `dracut-init.sh` to get support functions, like `module_install`,...

According to https://unix.stackexchange.com/a/743266/239414 the solution could be: ```bash if (clevis luks list -d "${dev}"; true) | grep -q tang; then ``` but that looks more like a workaround to me...

Work is done, pre-built packages for Debian 12 and amd64 arch are available here https://github.com/oldium/clevis/releases/tag/v20_tpm1

The CentOS test build image needs some love, the `mirrorlist.centos.org` site does not exist any more it seems. 

Rebased to latest master to fix the build.

The build failure is caused by some hashes mismatch in centos:stream9, but when run locally with https://github.com/nektos/act, it works. Probably a temporary issue.

I will rebase the Pull Request and check if there is any update to clevis_luks_used_pins function necessary towards the new pkcs11 feature.

Rebased, manually pre-built packages (including pkcs11 pin, untested) for Debian 12 and amd64 arch are available here https://github.com/oldium/clevis/releases/tag/v21_tpm1 I see that the PKCS#11 tests use software emulation, so this is...