Merge branch 'include-clevis-RHEL-138232' into 'main'

Add packages clevis-dracut and clevis-pin-tpm2

See merge request fedora/bootc/base-images!461

minimal/initramfs.yaml

@@ -20,6 +20,10 @@ postprocess:
     # We want this for systemd-cryptsetup tpm2 locking
     add_dracutmodules+=" tpm2-tss "
     EOF
+    cat > /usr/lib/dracut/dracut.conf.d/50-bootc-clevis.conf << 'EOF'
+    # Clevis in initramfs for TPM2-bound LUKS (needs clevis-dracut, clevis-pin-tpm2)
+    add_dracutmodules+=" clevis clevis-pin-tpm2 "
+    EOF
     cat > /usr/lib/dracut/dracut.conf.d/59-altfiles.conf << 'EOF'
     # https://issues.redhat.com/browse/RHEL-49590
     # On image mode systems we use nss-altfiles for passwd and group,

minimal/manifest.yaml

@@ -43,3 +43,6 @@ packages:
   - container-selinux
   # Needed for tpm2 bound luks
   - tpm2-tools
+  # Initramfs Clevis + TPM2 pin for LUKS auto-unlock (dracut modules wired in initramfs.yaml)
+  - clevis-dracut
+  - clevis-pin-tpm2