This is just a simple reference for changing passwords on a LUKS-encrypted volume. There are plenty of places you could go to find this information, but I have it here for my own reference more than anything.

Setting up LUKS to load encryption keys from the TPM2 device on the system is a pretty simple effort overall. We’re just going to be creating a new key for the disk, adding the key to the LUKS partition, adding the key to the TPM, and finally setting up crypttab to load the key from the TPM when the system starts up.