Re: Permanently remove services

[Morten Bo Johansen <mortenbo@xxxxxxxxxxx>]

On 2024-01-18 Lennart Poettering wrote:

> That sounds fairly recent, so I would assume that your machine has a
> TPM.
>
> Which OS is this?

Arch GNU/Linux.

~/ % uname -a
Linux gatsby 6.7.0-arch3-1 #1 SMP PREEMPT_DYNAMIC Sat, 13 Jan
2024 14:37:14 +0000 x86_64 GNU/Linux

>  Is it possible that your kernel has TPM2 support enabled, but
>  for some reason the driver for your hw is not available (for
>  example not included in the initrd)?

I don't know. How may I find out?

> The full output of "systemd-creds has-tpm2" would be good too.

~/ % systemd-creds has-tpm2
partial
+firmware
-driver
+system
+subsystem
+libraries

The output from journalctl --unit systemd-tpm2-setup-early.service:

   -- Boot b3fca98d73f6441590174a72ac0d27fa --
   jan 18 18:13:02 gatsby systemd-tpm2-setup[329]: Failed to create TPM2 context: State not recoverable
   jan 18 18:13:02 gatsby systemd-tpm2-setup[329]: ERROR:tcti:src/tss2-tcti/tcti-device.c:451:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpmrm0: No such file or direc>
   jan 18 18:13:03 gatsby systemd[1]: systemd-tpm2-setup-early.service: Main process exited, code=exited, status=1/FAILURE
   jan 18 18:13:03 gatsby systemd[1]: systemd-tpm2-setup-early.service: Failed with result 'exit-code'.
   jan 18 18:13:03 gatsby systemd[1]: Failed to start TPM2 SRK Setup (Early).
   
There is a /dev/tpm0 file but not a /dev/tpmrm0 file

Here are all the lines in the kernel config with "TPM.*" in them:

   CONFIG_TCG_TPM=y
   CONFIG_HW_RANDOM_TPM=y...
   CONFIG_TCG_VTPM_PROXY=m...
   CONFIG_INTEL_SPEED_SELECT_TPMI=m...
   CONFIG_INTEL_UNCORE_FREQ_CONTROL_TPMI=m...
   CONFIG_INTEL_TPMI=m...
   CONFIG_INTEL_RAPL_TPMI=m...
   CONFIG_TRUSTED_KEYS_TPM=y.


Thanks,
Morten (further answers tommorow)