Config files seem to be in order, no placeholders:

===== /etc/swtpm_setup.conf =====
# Program invoked for creating certificates
create_certs_tool= /usr/bin/swtpm_localca
create_certs_tool_config = /etc/swtpm-localca.conf
create_certs_tool_options = /etc/swtpm-localca.options
# Comma-separated list (no spaces) of PCR banks to activate by default
active_pcr_banks = sha256

===== /etc/swtpm-localca.conf =====
statedir = /var/lib/swtpm-localca
signingkey = /var/lib/swtpm-localca/signkey.pem
issuercert = /var/lib/swtpm-localca/issuercert.pem
certserial = /var/lib/swtpm-localca/certserial


However, while I was there, started grep(1)ing through /etc, /usr/share
and /var for 'DATAROOTDIR' and this came up:

===== /var/lib/swtpm/.config/swtpm_setup.conf =====
create_certs_tool = @DATAROOTDIR@/swtpm/swtpm-localca
create_certs_tool_config = /var/lib/swtpm/.config/swtpm-localca.conf
create_certs_tool_options = /var/lib/swtpm/.config/swtpm-localca.options

===== /var/lib/swtpm/.config/swtpm-localca.conf =====
statedir = /var/lib/swtpm/.config/var/lib/swtpm-localca
signingkey = /var/lib/swtpm/.config/var/lib/swtpm-localca/signkey.pem
issuercert = /var/lib/swtpm/.config/var/lib/swtpm-localca/issuercert.pem
certserial = /var/lib/swtpm/.config/var/lib/swtpm-localca/certserial


# find /var/lib/swtpm/
/var/lib/swtpm/
/var/lib/swtpm/.config
/var/lib/swtpm/.config/var
/var/lib/swtpm/.config/var/lib
/var/lib/swtpm/.config/var/lib/swtpm-localca
/var/lib/swtpm/.config/swtpm-localca.conf
/var/lib/swtpm/.config/swtpm-localca.options
/var/lib/swtpm/.config/swtpm_setup.conf

Seemingly, there's another set of config files under
/var/lib/swtpm/.config, containing different paths than the files in
/etc/.

The ones in /var/lib/swtpm are somewhat older than the ones in /etc/:

# ls -l  /etc/swtpm_setup.conf   /var/lib/swtpm/.config/swtpm_setup.conf
-rw-r--r-- 1 root  root  289 2024-07-31 00:16:43 /etc/swtpm_setup.conf
-rw-rw-r-- 1 swtpm swtpm 196 2023-02-15 19:23:27 
/var/lib/swtpm/.config/swtpm_setup.conf

# ls -l  /etc/swtpm-localca.conf    /var/lib/swtpm/.config/swtpm-localca.conf
-rw-r--r-- 1 root  root  180 2022-04-12 16:49:45 /etc/swtpm-localca.conf
-rw-rw-r-- 1 swtpm swtpm 268 2023-02-15 19:23:27 
/var/lib/swtpm/.config/swtpm-localca.conf


Are files under /etc/ only some kind of templates and swtpm copies them over to 
/var/lib/swtpm/.config when it starts being used?

What should be the end game here? Are these files in /var/lib/swtpm some
remnants of and old way of configuring swtpm? Or is maybe swtpm being
chrooted somewhere there so I need to sync the config files from /etc/
after swtpm package upgrades?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2081995

Title:
  Cannot start libvirt/qemu VM with TPM device added

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/swtpm/+bug/2081995/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to