Bug#1023515: systemd-pcrphase sysinit hangs blocking boot when tpm2-abrmd installed

[Luca Boccassi]

On Sat, 05 Nov 2022 19:46:14 +0100 Marek Rusinowski
<marekrusinowski at gmail.com> wrote:
> Package: systemd
> Version: 252-2
> Severity: important
> X-Debbugs-Cc: marekrusinowski at gmail.com
> 
> Dear Maintainer,
> 
> In systemd 252 a new tool systemd-pcrphase got included that
> measures PCR values at different boot stages. When tpm2-abrmd is
> installed in the system, the sysinit stage of that tool
> systemd-pcrphase-sysinit.service will hang when initializing tpm2
> context on trying to connect via dbus to running tpm2-abrmd daemon
> because this daemon is not yet running in this point during the boot
> process. This blocks the whole boot sequence as timelimit on
> systemd-pcrphase-sysinit is infinite.
> 
> Resolution for me was to purge from the system tpm2-abrmd and
> libtss2-tcti-tabrmd0 packages so that the tpm2 initialization
> doesn't try to use this daemon but contacts tpm2 device using a
> different method.
> 
> I've confirmed and figured out above by using systemd debug shell
> and running `systemd-pcrphase sysinit` under gdb, the stacktrace
> looked like:
> #0 __GI__poll
> (...)
> #17 Tss2_Tcti_Tabrmd_Init
> (...)
> #24 Esys_Initialize (libtss2-esys)
> #25 tpm2_context_init (libsystemd-shared)
> 
> Thank you,
> Marek

I thought these days in-kernel resource management was preferred? Any
reason you were using abrmd?

-- 
Kind regards,
Luca Boccassi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20221107/8453a9df/attachment-0001.sig>