---
virtualization_tpm2_enabled: >-
  {{
    (partitioning_luks_enabled | default(luks_enabled | default(false)) | bool)
    and (partitioning_luks_auto_decrypt | default(luks_auto_decrypt | default(true)) | bool)
    and (
      (partitioning_luks_auto_decrypt_method | default(luks_auto_decrypt_method | default('tpm2')))
      | lower
      == 'tpm2'
    )
  }}