Your message dated Thu, 15 Oct 2026 12:20:24 +0000
with message-id <[email protected]>
and subject line Bug#1089611: fixed in vboot-utils 0~R156-16836.B+dfsg-1
has caused the Debian Bug report #1089611,
regarding vboot-utils: flashrom invocations incompatible with upstream flashrom
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1089611: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1089611
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: vboot-utils
Version: 0~R106-15054.B+dfsg-0.1
Severity: important
Hello,
The Debian build of `crossystem` displays errors related to flashrom
invocations and fails to read/write several important values (presumably
depending on the hardware). I'm attaching the `crossystem --all` output
from one of my devices.
The error is because the source code assumes "flashrom" is the
ChromiumOS fork of flashrom, and not the upstream flashrom. I can
identify three differences in the way it is called:
- `-p host` is not supported, `-p linux_mtd` works on my boards
- `--fmap` is not the default and must be added to arguments
- `-r` and `-w` need a whole rom file even with `-i $region:$file`
As a workaround I have written a flashrom wrapper that converts the
invocations I found, crossystem works if I place it in /usr/local/sbin/.
But I guess it isn't enough for all cases. There seems to be more places
where flashrom is used e.g cgpt, futility; sometimes by exact path.
Please review any flashrom invocations and replace them with
upstream-compatible ones. Or perhaps poke ChromiumOS folks to do it in
upstream vboot_reference.
(I suspect the unpackaged dependency makes this a Severity: serious.)
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: arm64 (aarch64)
Kernel: Linux 6.12+unreleased-arm64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_WARN
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8),
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages vboot-kernel-utils depends on:
ii coreboot-utils 4.15~dfsg2-2
ii flashrom 1.4.0-3
ii libc6 2.40-4
ii libflashrom1 1.4.0-3
ii libssl3t64 3.3.2-2
vboot-kernel-utils recommends no packages.
vboot-kernel-utils suggests no packages.
-- no debconf information
Thank you for using reportbug
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.TX6irh
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.ZsnGWy
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.EiSZRi
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.twN8aT
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.JJjHNo
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.Ponzor
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.8oGc38
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.3xfBEg
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.4J9Hpt
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.tady45
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.hnfu3W
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.qadJd9
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.mQOW0C
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.MGCfH8
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.pydli0
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.QH79o3
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.S2iYwP
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.WoeECT
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.CZ0dnp
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.ZwJKSk
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.Ymi1Hw
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.LUqtiF
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.BmUtW9
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.TsA0yq
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.ZUQIbT
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.XJZQXq
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.B0V52P
arch = arm # [RO/str] Platform
architecture
backup_nvram_request = (error) # [RW/int] Backup the
nvram somewhere at the next boot. Cleared on success.
battery_cutoff_request = (error) # [RW/int] Cut off
battery and shutdown on next boot
block_devmode = (error) # [RW/int] Block all
use of developer mode
clear_tpm_owner_done = (error) # [RW/int] Clear TPM
owner done
clear_tpm_owner_request = (error) # [RW/int] Clear TPM
owner on next boot
cros_debug = 1 # [RO/int] OS should
allow debug features
dbg_reset = (error) # [RW/int] Debug reset
mode request
debug_build = 0 # [RO/int] OS image
built for debug features
dev_boot_altfw = (error) # [RW/int] Enable
developer mode alternate bootloader
dev_boot_signed_only = (error) # [RW/int] Enable
developer mode boot only from official kernels
dev_boot_usb = (error) # [RW/int] Enable
developer mode boot from external disk (USB/SD)
dev_default_boot = unknown # [RW/str] Default
boot from disk, altfw or usb
dev_enable_udc = (error) # [RW/int] Enable USB
Device Controller
devsw_boot = 1 # [RO/int] Developer
switch position at boot
devsw_cur = 1 # [RO/int] Developer
switch current position
diagnostic_request = (error) # [RW/int] Request
diagnostic rom run on next boot
disable_dev_request = (error) # [RW/int] Disable
virtual dev-mode on next boot
ecfw_act = RW # [RO/str] Active EC
firmware
post_ec_sync_delay = (error) # [RW/int] Short delay
after EC software sync (persistent, writable, eve only)
fw_prev_result = unknown # [RO/str] Firmware
result of previous boot
fw_prev_tried = B # [RO/str] Firmware
tried on previous boot (A or B)
fw_result = unknown # [RW/str] Firmware
result this boot
fw_tried = B # [RO/str] Firmware
tried this boot (A or B)
fw_try_count = (error) # [RW/int] Number of
times to try fw_try_next
fw_try_next = B # [RW/str] Firmware to
try next (A or B)
fw_vboot2 = 1 # [RO/int] 1 if
firmware was selected by vboot2 or 0 otherwise
fwb_tries = (error) # [RW/int] Try
firmware B count
fwid = Google_Hana.8438.235.0 # [RO/str] Active
firmware ID
fwupdate_tries = (error) # [RW/int] Times to
try OS firmware update (inside kern_nv)
hwid = HANA I8A-C2X-A2A-G6Q-B2B-A77 # [RO/str] Hardware ID
inside_vm = 0 # [RO/int] Running in
a VM?
kern_nv = (error) # [RO/int]
Non-volatile field for kernel use
kernel_max_rollforward = (error) # [RW/int] Max kernel
version to store into TPM
kernkey_vfy = hash # [RO/str] Type of
verification done on kernel keyblock
loc_idx = (error) # [RW/int]
Localization index for firmware screens
mainfw_act = A # [RO/str] Active main
firmware
mainfw_type = developer # [RO/str] Active main
firmware type
minios_priority = B # [RW/str] miniOS
image to try first (A or B)
nvram_cleared = (error) # [RW/int] Have NV
settings Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.OGCTVB
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.yqB0ik
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.cPDQli
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.TIpSGR
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.zmJZbn
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.wZRKQa
Flashrom invocation failed (exit status 1): flashrom -p host -r -i
RW_NVRAM:/tmp/vb2_flashrom.zj09hD
been lost? Write 0 to clear
display_request = (error) # [RW/int] Should we
initialize the display at boot?
phase_enforcement = (error) # [RO/int] Board
should have full security settings applied
recovery_reason = 0 # [RO/int] Recovery
mode reason for current boot
recovery_request = (error) # [RW/int] Recovery
mode request
recovery_subcode = (error) # [RW/int] Recovery
reason subcode
recoverysw_boot = 0 # [RO/int] Recovery
switch position at boot
recoverysw_cur = (error) # [RO/int] Recovery
switch current position
recoverysw_ec_boot = 0 # [RO/int] Recovery
switch position at EC boot
ro_fwid = Google_Hana.8438.206.0 # [RO/str] Read-only
firmware ID
tpm_attack = (error) # [RW/int] TPM was
interrupted since this flag was cleared
tpm_fwver = 0x00010002 # [RO/int] Firmware
version stored in TPM
tpm_kernver = 0x00010002 # [RO/int] Kernel
version stored in TPM
tpm_rebooted = (error) # [RO/int] TPM
requesting repeated reboot
tried_fwb = 0 # [RO/int] Tried
firmware B before A this boot
try_ro_sync = (error) # [RO/int] try read
only software sync
vdat_flags = 0x0003dc14 # [RO/int] Flags from
VbSharedData
vdat_lfdebug = Check A result=0
Check B result=0
Firmware index booted=0x00
TPM combined version at start=0x00000000
Lowest combined version from firmware=0x00000000
# [RO/str] LoadFirmware() debug data (not in print-all)
wipeout_request = (error) # [RW/int] Firmware
requested factory reset (wipeout)
wpsw_cur = 0 # [RO/int] Firmware
write protect hardware switch current position
#!/bin/sh
# flashrom -p host -r -i RW_NVRAM:/tmp/vb2_flashrom.XXXXXX
if [ "$1" = '-p' ] && \
[ "$2" = 'host' ] && \
[ "$3" = '-r' ] && \
[ "$4" = '-i' ] && \
[ "${5%%:*}" = 'RW_NVRAM' ] && \
[ "$#" = 5 ]
then
exec /usr/sbin/flashrom -p linux_mtd --fmap -i "RW_NVRAM:${5#*:}" -r
$(mktemp)
fi
# flashrom -p host --noverify-all -w -i RW_NVRAM:/tmp/vb2_flashrom.XXXXXX
if [ "$1" = '-p' ] && \
[ "$2" = 'host' ] && \
[ "$3" = '--noverify-all' ] && \
[ "$4" = '-w' ] && \
[ "$5" = '-i' ] && \
[ "${6%%:*}" = 'RW_NVRAM' ] && \
[ "$#" = 6 ]
then
fullrom="$(mktemp -t depthcharge.rom.XXXXXX)"
/usr/sbin/flashrom -p linux_mtd -r "$fullrom" >/dev/null 2>/dev/null
exec /usr/sbin/flashrom -p linux_mtd --fmap -i "RW_NVRAM:${6#*:}" -w
"$fullrom"
fi
exec /usr/sbin/flashrom "$@"
arch = arm # [RO/str] Platform
architecture
backup_nvram_request = 1 # [RW/int] Backup the
nvram somewhere at the next boot. Cleared on success.
battery_cutoff_request = 0 # [RW/int] Cut off
battery and shutdown on next boot
block_devmode = 0 # [RW/int] Block all
use of developer mode
clear_tpm_owner_done = 1 # [RW/int] Clear TPM
owner done
clear_tpm_owner_request = 0 # [RW/int] Clear TPM
owner on next boot
cros_debug = 1 # [RO/int] OS should
allow debug features
dbg_reset = 0 # [RW/int] Debug reset
mode request
debug_build = 0 # [RO/int] OS image
built for debug features
dev_boot_altfw = 1 # [RW/int] Enable
developer mode alternate bootloader
dev_boot_signed_only = 0 # [RW/int] Enable
developer mode boot only from official kernels
dev_boot_usb = 1 # [RW/int] Enable
developer mode boot from external disk (USB/SD)
dev_default_boot = usb # [RW/str] Default
boot from disk, altfw or usb
dev_enable_udc = 0 # [RW/int] Enable USB
Device Controller
devsw_boot = 1 # [RO/int] Developer
switch position at boot
devsw_cur = 1 # [RO/int] Developer
switch current position
diagnostic_request = 0 # [RW/int] Request
diagnostic rom run on next boot
disable_dev_request = 0 # [RW/int] Disable
virtual dev-mode on next boot
ecfw_act = RW # [RO/str] Active EC
firmware
post_ec_sync_delay = 0 # [RW/int] Short delay
after EC software sync (persistent, writable, eve only)
fw_prev_result = unknown # [RO/str] Firmware
result of previous boot
fw_prev_tried = A # [RO/str] Firmware
tried on previous boot (A or B)
fw_result = unknown # [RW/str] Firmware
result this boot
fw_tried = A # [RO/str] Firmware
tried this boot (A or B)
fw_try_count = 0 # [RW/int] Number of
times to try fw_try_next
fw_try_next = A # [RW/str] Firmware to
try next (A or B)
fw_vboot2 = 1 # [RO/int] 1 if
firmware was selected by vboot2 or 0 otherwise
fwb_tries = 0 # [RW/int] Try
firmware B count
fwid = Google_Hana.8438.235.0 # [RO/str] Active
firmware ID
fwupdate_tries = 0 # [RW/int] Times to
try OS firmware update (inside kern_nv)
hwid = HANA I8A-C2X-A2A-G6Q-B2B-A77 # [RO/str] Hardware ID
inside_vm = 0 # [RO/int] Running in
a VM?
kern_nv = 0x0000 # [RO/int]
Non-volatile field for kernel use
kernel_max_rollforward = 0xfffffffe # [RW/int] Max kernel
version to store into TPM
kernkey_vfy = hash # [RO/str] Type of
verification done on kernel keyblock
loc_idx = 0 # [RW/int]
Localization index for firmware screens
mainfw_act = A # [RO/str] Active main
firmware
mainfw_type = developer # [RO/str] Active main
firmware type
minios_priority = A # [RW/str] miniOS
image to try first (A or B)
nvram_cleared = 0 # [RW/int] Have NV
settings been lost? Write 0 to clear
display_request = 0 # [RW/int] Should we
initialize the display at boot?
phase_enforcement = (error) # [RO/int] Board
should have full security settings applied
recovery_reason = 0 # [RO/int] Recovery
mode reason for current boot
recovery_request = 0 # [RW/int] Recovery
mode request
recovery_subcode = 0 # [RW/int] Recovery
reason subcode
recoverysw_boot = 0 # [RO/int] Recovery
switch position at boot
recoverysw_cur = (error) # [RO/int] Recovery
switch current position
recoverysw_ec_boot = 0 # [RO/int] Recovery
switch position at EC boot
ro_fwid = Google_Hana.8438.206.0 # [RO/str] Read-only
firmware ID
tpm_attack = 0 # [RW/int] TPM was
interrupted since this flag was cleared
tpm_fwver = 0x00010002 # [RO/int] Firmware
version stored in TPM
tpm_kernver = 0x00010002 # [RO/int] Kernel
version stored in TPM
tpm_rebooted = 0 # [RO/int] TPM
requesting repeated reboot
tried_fwb = 0 # [RO/int] Tried
firmware B before A this boot
try_ro_sync = 0 # [RO/int] try read
only software sync
vdat_flags = 0x0003dc14 # [RO/int] Flags from
VbSharedData
vdat_lfdebug = Check A result=0
Check B result=0
Firmware index booted=0x00
TPM combined version at start=0x00000000
Lowest combined version from firmware=0x00000000
# [RO/str] LoadFirmware() debug data (not in print-all)
wipeout_request = 0 # [RW/int] Firmware
requested factory reset (wipeout)
wpsw_cur = 0 # [RO/int] Firmware
write protect hardware switch current position
--- End Message ---
--- Begin Message ---
Source: vboot-utils
Source-Version: 0~R156-16836.B+dfsg-1
Done: Sophie Brun <[email protected]>
We believe that the bug you reported is fixed in the latest version of
vboot-utils, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sophie Brun <[email protected]> (supplier of updated vboot-utils package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 15 Oct 2026 11:20:18 +0200
Source: vboot-utils
Architecture: source
Version: 0~R156-16836.B+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <[email protected]>
Changed-By: Sophie Brun <[email protected]>
Closes: 1089611 1147927
Changes:
vboot-utils (0~R156-16836.B+dfsg-1) unstable; urgency=medium
.
* New upstream version 0~R156-16836.B+dfsg
* Build with gcc instead of clang (Closes: #1147927)
* Refresh patches
* Remove obsolete machname in debian/rules
* Fix usage of flashrom (Closes: #1089611): use standard flashrom not the
Chromium fork
* Replace build-dep pkg-config with pkgconf
* Add missing build-dep python3
* Do not build with libflashrom-dev: it requires the Chromium fork of
flashrom
* Remove tests requiring missing binaries (because the binaires contain
non-free software)
* Bump Standards-Version to 4.7.4
* Re enable dh_dwz
* Do not install libvboothost.so
* Update debian/watch to version 5
* Orphan the package
Checksums-Sha1:
7bda5d69cf1dff175180c9d33dc9b87d0826420c 1735
vboot-utils_0~R156-16836.B+dfsg-1.dsc
6b2dd4af2d7499e2d62d79599165f9ca5ece4cfe 5960220
vboot-utils_0~R156-16836.B+dfsg.orig.tar.xz
1725de7c06feb3ff147e77dd3f3d77cb3844aea1 13972
vboot-utils_0~R156-16836.B+dfsg-1.debian.tar.xz
82327481f1b6abb48fff99bcf68e379990f86582 8806
vboot-utils_0~R156-16836.B+dfsg-1_source.buildinfo
Checksums-Sha256:
2baebff150f0eafe01ab20d665997259e7e46f632da60482bd25893ab39406e0 1735
vboot-utils_0~R156-16836.B+dfsg-1.dsc
2afc6f9b8f40952e11b57aa8ff4f99ea3409b4c07f0e391d62aa6cf91f9929be 5960220
vboot-utils_0~R156-16836.B+dfsg.orig.tar.xz
da219bea1da6b56ca73e8b8536755cb215b37e1c7c7c1d85d72e46d6d06d1247 13972
vboot-utils_0~R156-16836.B+dfsg-1.debian.tar.xz
2fd5361d6c209d77b2872f028492ed21569c90ea8e82ae45847788bdfc2f0bd0 8806
vboot-utils_0~R156-16836.B+dfsg-1_source.buildinfo
Files:
1a01ef2f8d69268989c4c6d44ee2a218 1735 admin optional
vboot-utils_0~R156-16836.B+dfsg-1.dsc
86ad864025208f9d437b6edbf2a624e3 5960220 admin optional
vboot-utils_0~R156-16836.B+dfsg.orig.tar.xz
308a2c7d64d357341ea249f13b56bac9 13972 admin optional
vboot-utils_0~R156-16836.B+dfsg-1.debian.tar.xz
86c2ceada46194a3b7d37cd7c75a98d9 8806 admin optional
vboot-utils_0~R156-16836.B+dfsg-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
Comment: Signed by Sophie Brun
iHUEARYKAB0WIQT+vxv1zHPi+qsoK1z+ZsWMCX9qbgUCatC9tAAKCRD+ZsWMCX9q
bjSGAP9BhJLSkArHen4Ou1Pq+S/utkpvBXxSzb79DN75xs6BVgEAtEqGgcLFRrE3
PD3eTnqa733O1bAcap9FBZm6RA0FSAQ=
=v36E
-----END PGP SIGNATURE-----
pgpxVvbXYQPHy.pgp
Description: PGP signature
--- End Message ---
