Um, I’ve just realized that Ubuntu Core alone won’t give you TPM-backed FDE. Maybe just do the Clevis stuff then. Or, given that the Desktop has this all in a neat little package, why not start with “Desktop” installation on your server? Just install whatever server software you like after the obligatory installation and configuration of OpenSSH Server — don’t forget to disable GDM3 when going headless, otherwise the machine will auto-suspend after 15 minutes. Maybe install some sort of remote desktop solution to get access to the Desktop Security Center; there seems to be a little more to the story when it comes to setting passphrases and PIN’s or replacing the recovery key, because trying the passphrase with cryptsetup luksOpen --test-passphrase doesn’t work, yet the passphrase works at boot.
1 Like