booster: Unable to unlock root partition with tpm2 key
booster 0.11, both with and without universal:true. Dmesg and luksdump
Main part of the log is
[ 4.730062] booster: no tpm devices found after 3 seconds.
[ 5.048481] booster: recovering systemd-tpm2 token #0 failed: clevis.go/tpm2: unable to load data: parameter 1, error code 0x1f : integrity check failed
Not sure why booster doesn’t see tpm2, dracut works just fine with this setup.
About this issue
- Original URL
- State: open
- Created a year ago
- Reactions: 1
- Comments: 17 (7 by maintainers)
Commits related to this issue
- systemd-tpm2: handle tpm2_srk LUKS metadata key Closes #233 — committed to anatol/booster by anatol 8 months ago
Bisecting points me to c1b666775e9ac2bad4246078c8904c6a20976842
My assumption as tpm modules are built-in into the kernel in archlinux packages, booster doesn’t stand a chance to capture associated udev event as tpm devices initialized even before booster enters it’s main method. So we should check presence of /dev/tpmrm0 and don’t use waiters if tpm already here.
Something like that:
It fixes
no tpm devices found
, but I still have no luck of unlocking partition…