#1124640 dracut-core: pcsc module missing library leading to failure using pkcs#11 decryption

Package:
dracut-core
Source:
dracut-core
Description:
dracut is an event driven initramfs infrastructure (core tools)
Submitter:
LeJacq, Jean Pierre
Date:
2026-01-04 19:33:04 UTC
Severity:
normal
#1124640#5
Date:
2026-01-04 19:30:41 UTC
From:
To:
I believe this is resolved in the unstable release. I'm still filing a bug
report so that users of Trixie know that there is a workaround until the fix
from unstable is back-ported.

The dracut module pcsc is missing two files that prevent PKCS#11 decryption of
LUKS devices during boot. The symptom is that the boot process will stall for
30 seconds, time out, and go to password based decryption.

I've attached a dracut configuration file that support LUKS decrytion at boot
using systemd-boot, dracut, systemd-cryptenroll and a YubiKey using a PKCS#11
(PIV) RSA key and certificate.

Thank you for maintaining dracut!