Yes, I think now I understand that mkosi will build default initrd image without tpm2-tss libraries. Perhaps because the package names are different for each distro.
I need to build the initrd image separately at first, then use it to build OS image with --initrd flag. Thanks. On Wed, Dec 6, 2023 at 8:02 PM Lennart Poettering <lenn...@poettering.net> wrote: > On Mi, 06.12.23 18:28, Renjaya Raga Zenta (ragaze...@gmail.com) wrote: > > > Hi, > > > > I am exploring OS image building with mkosi. It works great until I add > TPM > > 2.0 in qemu. > > > > I found that the systemd-pcrphase-initrd.service failed. There are 3 > > pcrphase service: > > > > 1. systemd-pcrphase-initrd.service (failed) > > 2. systemd-pcrphase.service (ok) > > 3. systemd-pcrphase-sysinit.service (ok) > > So the latter two run from the host fs, the first one from the initrd fs. > > > Related journal log: > > systemd[1]: Failed to start systemd-pcrphase-initrd.service - TPM2 PCR > > Barrier (initrd). > > ... > > systemd-pcrphase[130]: Failed to load TPM2 libraries: Operation not > > supported > > ... > > It appears you are lacking the tpm2-tss libraries in your initrd image. > > Lennart > > -- > Lennart Poettering, Berlin > -- Renjaya Raga Zenta Mobile: +62 811 572 4400