or use jj and stop worrying about git
jj split --interactive {ref}
10 karma · joined January 6, 2025
jj split --interactive {ref}
Like: Password ---> PKDF ---> PIN
And then Password XOR (Key from TPM) -> LUKS
But i guess this kind of logic is not for a bootscript, but for tools like systemcd-cryptenroll.