Bug#1023515: Re: systemd-pcrphase sysinit hangs blocking boot when tpm2-abrmd installed

2022-11-16 Thread Michael Biebl

Hi Luca

Am 16.11.22 um 10:51 schrieb Luca Boccassi:

On Mon, 14 Nov 2022 15:01:00 +0100 Michael Biebl 
wrote:



@Luca: you closed this bug report, and I wonder why?


Workaround that will stop the race condition was backported to 252.1:

https://github.com/systemd/systemd-stable/commit/1757446e8bc4dc076badd5c1ad53a0021c42638c




Ah, ok. I thought this required 
https://github.com/systemd/systemd/pull/25393 which is not yet available 
in the Debian package.
If 1757446e8bc4dc076badd5c1ad53a0021c42638c is indeed already 
sufficient, then a short ref to the upstream commit in the close message 
would have been great as this would have avoided any confusion (on my side).



>
> No need for a conflict, for the next release we'll fix it to force
> using the kernel driver as the default. On old systems with older tpms
> the userspace manager might be needed for late-boot stuff, which is a
> legitimate use case. It's the early-boot usage that is a problem.
>

Agreed, if no conflicts is necessary, even better.
The popcon number of tpm2-abrmd is rather high [1] and I don't see a 
package Depending or Recommending it. So I wonder why that is (did/does 
d-i install it?) and if we can/should do something about it.



Regards,
Michael

[1] https://qa.debian.org/popcon.php?package=tpm2-abrmd


OpenPGP_signature
Description: OpenPGP digital signature


Bug#1023515: Re: systemd-pcrphase sysinit hangs blocking boot when tpm2-abrmd installed

2022-11-16 Thread Luca Boccassi
On Mon, 14 Nov 2022 15:01:00 +0100 Michael Biebl 
wrote:
> Am 11.11.22 um 20:47 schrieb Marek Rusinowski:
> >> I thought these days in-kernel resource management was preferred?
Any
> >> reason you were using abrmd?
> > 
> > I just still had it installed already for a long time since times
where most
> > places were suggesting using it and never dropped.
> 
> Do you remember what triggered the installation of tmp2-abrmd?
> 
> > Thank you for fixing it!
> > 
> 
> Should the systemd package have a Conflicts: tpm2-abrmd?
> Apparently the both packages don't play along nicely.
> 
> 
> @Luca: you closed this bug report, and I wonder why?

Workaround that will stop the race condition was backported to 252.1:

https://github.com/systemd/systemd-stable/commit/1757446e8bc4dc076badd5c1ad53a0021c42638c

No need for a conflict, for the next release we'll fix it to force
using the kernel driver as the default. On old systems with older tpms
the userspace manager might be needed for late-boot stuff, which is a
legitimate use case. It's the early-boot usage that is a problem.

-- 
Kind regards,
Luca Boccassi


signature.asc
Description: This is a digitally signed message part


Bug#1023515: Re: systemd-pcrphase sysinit hangs blocking boot when tpm2-abrmd installed

2022-11-14 Thread Marek Rusinowski
> Do you remember what triggered the installation of tmp2-abrmd?

The most likely is I have just installed it manually late 2017, or
2018 when I started playing with the tpm2 setup for FDE following
guidance from some documentation. I will not recall any more details
after so much time.


Bug#1023515: Re: systemd-pcrphase sysinit hangs blocking boot when tpm2-abrmd installed

2022-11-14 Thread Michael Biebl

Am 11.11.22 um 20:47 schrieb Marek Rusinowski:

I thought these days in-kernel resource management was preferred? Any
reason you were using abrmd?


I just still had it installed already for a long time since times where most
places were suggesting using it and never dropped.


Do you remember what triggered the installation of tmp2-abrmd?


Thank you for fixing it!



Should the systemd package have a Conflicts: tpm2-abrmd?
Apparently the both packages don't play along nicely.


@Luca: you closed this bug report, and I wonder why?


OpenPGP_signature
Description: OpenPGP digital signature


Bug#1023515: Re: systemd-pcrphase sysinit hangs blocking boot when tpm2-abrmd installed

2022-11-11 Thread Marek Rusinowski
> I thought these days in-kernel resource management was preferred? Any
> reason you were using abrmd?

I just still had it installed already for a long time since times where most
places were suggesting using it and never dropped.

Thank you for fixing it!