Hi.
fiddling with Stream 9 - is this a fluke or intentional,
-> $ systemd-cryptenroll --tpm2-device=list TPM2 not supported on this build.
and why if the latter , would anybody know?
many thanks, L.
Hi,
On 10/25/21 11:53 PM, lejeczek via CentOS-devel wrote:
TPM should be enabled[0], however, systemd in C9S inherited the "weak" dependencies, i.e. certain dependencies are dlopen()-ed when needed instead of linking with them directly. TPM is one of such dependencies[1], so make sure you have libtss2-rc.so.0 and libtss2-mu.so.0 installed (provided by tpm2-tss).
[0] https://gitlab.com/redhat/centos-stream/rpms/systemd/-/blob/c9s/systemd.spec... [1] https://github.com/redhat-plumbers/systemd-rhel9/blob/2c98d6adc22458d030f164...
On 10/26/21 09:50, lejeczek via CentOS-devel wrote:
Nope, tpm2-tss is present in system. Should this go into Bugzilla perhaps?
Possibly. The message "TPM2 not supported on this build" indicates that support was disabled at build time:
https://github.com/systemd/systemd/blob/main/src/shared/tpm2-util.c#L1122
(HAVE_TPM2 was not defined)
Apologies, the build support is indeed not enabled, I confused the `-Dtpm=` option with `-Dtpm2=`, which is the one that matters here. And since we don't have a BuildRequires for tpm2-tss, it gets disabled automagically during the build.
So, as Gordon pointed out, please open a BZ for systemd.
On 10/26/21 19:46, Gordon Messmer wrote:
On Wed, Oct 27, 2021 at 12:13 PM lejeczek via CentOS-devel centos-devel@centos.org wrote:
On 27/10/2021 12:43, lejeczek via CentOS-devel wrote:
[snip]
Actually clevis should be working again, with tpm2-tools-5.0-10.el9, which was built yesterday.
On Thu, Oct 28, 2021 at 7:30 AM lejeczek via CentOS-devel centos-devel@centos.org wrote:
When builds are made, they get tagged for c9s-gate, which is where they sit until they pass through automated and manual validation. After that's complete, they move from c9s-gate to c9s, where they get published and released in the next compose. Composes typically happen multiple times a day.
-- 真実はいつも一つ！/ Always, there's only one truth!
On Sat, Oct 30, 2021 at 7:45 AM lejeczek via CentOS-devel centos-devel@centos.org wrote:
A compose *includes* RPM repositories, so once a compose is released, the repositories are updated with the contents of the new compose.
-
František Šumšal -
Gordon Messmer -
lejeczek -
Neal Gompa -
Patrick Riehecky -
Sergio Correia