initramfs support for PKCS#11

[sarroutbi]

Clevis PKCS#11 pin has been implemented and merged. However, no initramfs support was included. Just dracut support was merged.

This needs to be fixed by including new initramfs hooks or by extending the current existing one

[joriskt]

Massive +1 to this.

In my setup, I use clevis on my Debian-based Proxmox machines for full disk encryption, and my three nodes can decrypt each other with a shared key via tang. However, I would like a second factor there by means of PKCS#11 so I can just plug in a key into one node. As such I'd love to see this!