Bug#1023515: Re: systemd-pcrphase sysinit hangs blocking boot when tpm2-abrmd installed
Hi Luca Am 16.11.22 um 10:51 schrieb Luca Boccassi: On Mon, 14 Nov 2022 15:01:00 +0100 Michael Biebl wrote: @Luca: you closed this bug report, and I wonder why? Workaround that will stop the race condition was backported to 252.1: https://github.com/systemd/systemd-stable/commit/1757446e8bc4dc076badd5c1ad53a0021c42638c Ah, ok. I thought this required https://github.com/systemd/systemd/pull/25393 which is not yet available in the Debian package. If 1757446e8bc4dc076badd5c1ad53a0021c42638c is indeed already sufficient, then a short ref to the upstream commit in the close message would have been great as this would have avoided any confusion (on my side). > > No need for a conflict, for the next release we'll fix it to force > using the kernel driver as the default. On old systems with older tpms > the userspace manager might be needed for late-boot stuff, which is a > legitimate use case. It's the early-boot usage that is a problem. > Agreed, if no conflicts is necessary, even better. The popcon number of tpm2-abrmd is rather high [1] and I don't see a package Depending or Recommending it. So I wonder why that is (did/does d-i install it?) and if we can/should do something about it. Regards, Michael [1] https://qa.debian.org/popcon.php?package=tpm2-abrmd OpenPGP_signature Description: OpenPGP digital signature
Bug#1023515: Re: systemd-pcrphase sysinit hangs blocking boot when tpm2-abrmd installed
On Mon, 14 Nov 2022 15:01:00 +0100 Michael Biebl wrote: > Am 11.11.22 um 20:47 schrieb Marek Rusinowski: > >> I thought these days in-kernel resource management was preferred? Any > >> reason you were using abrmd? > > > > I just still had it installed already for a long time since times where most > > places were suggesting using it and never dropped. > > Do you remember what triggered the installation of tmp2-abrmd? > > > Thank you for fixing it! > > > > Should the systemd package have a Conflicts: tpm2-abrmd? > Apparently the both packages don't play along nicely. > > > @Luca: you closed this bug report, and I wonder why? Workaround that will stop the race condition was backported to 252.1: https://github.com/systemd/systemd-stable/commit/1757446e8bc4dc076badd5c1ad53a0021c42638c No need for a conflict, for the next release we'll fix it to force using the kernel driver as the default. On old systems with older tpms the userspace manager might be needed for late-boot stuff, which is a legitimate use case. It's the early-boot usage that is a problem. -- Kind regards, Luca Boccassi signature.asc Description: This is a digitally signed message part
Bug#1023515: Re: systemd-pcrphase sysinit hangs blocking boot when tpm2-abrmd installed
> Do you remember what triggered the installation of tmp2-abrmd? The most likely is I have just installed it manually late 2017, or 2018 when I started playing with the tpm2 setup for FDE following guidance from some documentation. I will not recall any more details after so much time.
Bug#1023515: Re: systemd-pcrphase sysinit hangs blocking boot when tpm2-abrmd installed
Am 11.11.22 um 20:47 schrieb Marek Rusinowski: I thought these days in-kernel resource management was preferred? Any reason you were using abrmd? I just still had it installed already for a long time since times where most places were suggesting using it and never dropped. Do you remember what triggered the installation of tmp2-abrmd? Thank you for fixing it! Should the systemd package have a Conflicts: tpm2-abrmd? Apparently the both packages don't play along nicely. @Luca: you closed this bug report, and I wonder why? OpenPGP_signature Description: OpenPGP digital signature
Bug#1023515: Re: systemd-pcrphase sysinit hangs blocking boot when tpm2-abrmd installed
> I thought these days in-kernel resource management was preferred? Any > reason you were using abrmd? I just still had it installed already for a long time since times where most places were suggesting using it and never dropped. Thank you for fixing it!