On Mon, Dec 29, 2025 at 08:46:32AM -0300, Henrique de Moraes Holschuh wrote: > retitle 1124123 amd64-microcode: amdtee firmware missing in initramfs > tags 1124123 + confirmed > thanks > > Hello Frederik, > > On Sun, Dec 28, 2025, at 10:06, Frederik Himpe wrote: > > 0.923462] tee tee0: firmware: failed to load > > /amdtee/f29bb3d9-bd66-5441-afb88acc2b2b60d6.bin (-2) > > [ 0.923468] tee tee0: firmware: failed to load > > /amdtee/f29bb3d9-bd66-5441-afb88acc2b2b60d6.bin (-2) > > [ 0.923472] tee tee0: firmware: failed to load > > /amdtee/f29bb3d9-bd66-5441-afb88acc2b2b60d6.bin (-2) > > [ 0.923473] tee tee0: Direct firmware load for > > /amdtee/f29bb3d9-bd66-5441-afb88acc2b2b60d6.bin failed with error -2 > > [ 0.923475] amdtee: failed to load firmware > > /amdtee/f29bb3d9-bd66-5441-afb88acc2b2b60d6.bin > > [ 0.923513] amdtee: failed to copy TA binary > > [ 0.923524] Failed to open TEE session err:0x0, rc:-12 > > [ 0.923538] amd-pmf AMDI0107:00: Failed to open TA session (-12) > > [ 0.923554] amd-pmf AMDI0107:00: registered PMF device successfully > > "modinfo amdtee" tells me "amdtee" does *not* declare its firmware files, so > the normal initramfs machinery to include firmware data won't do the job. > > I will add the firmware files to the initramfs "by force" as it is done with > the CPU microcode. It is small enough that I will just always install them > if the CPU microcode itself is being installed. > > I will also check if AMD-SEV firmware is likewise affected, since there is a > new set of data files from 2025-12-19 to package.
Hello Henrique, Thank you. I was checking a bit further, and noticed that my initrd.img-6.17.13+deb14-amd64 created on Dec 23 does include the module amdtee.ko.xz, but not the firmware, which explains the error. My initrd.img-6.18-amd64 does not include the amdtee module, so that would explain why I don't have this error any more there. I'm not sure what the cause is that suddenly amdtee.ko was not any more in the initrd. I think it happend just after upgrading from 2.18.1 to 2.18.2, but maybe I changed modules to hostonly (although I think I did that already in the installer). In the meantime I have also switched to dracut with hostonly='yes'. I recreated the initrd for 2.17.13 now with dracut too, and now amdtee.ko is indeed not included, and the error is also gone for this error. Regards, -- Frederik Himpe
