Public bug reported:
Security Center unable to manage disk encryption if Ubuntu 26.04
installed with passphrase FDE
Consider following scenario:
+Ubuntu Desktop 26.04 installed with passphrase FDE
+after successfull install enrolled TPM via systemd-cryptenroll
+FDE works and seems fully functional
+open Security Center and navigate to "Disk encryption" tab
expected:
ability to manage currently configured and working TPM-FDE disk encryption
what happening:
Security Center shows: "Encryption settings not available" "Failed to retrieve
the encryption status of this computer"
observations:
looking at Security Center code, it sends v2/system-volumes API to snapd
and shows this error as snapd responds with 400:
stracing snpad shows it responds with 400 Bad Request and message "this action
is not supported on this system"
2113 15:07:29.335135 read(16 <unfinished ...>
2113 15:07:29.335173 <... read resumed>, "GET
/v2/system-volumes?by-container-role=true HTTP/1.1\r\nuser-agent:
snapd.dart\r\naccept-encoding: gzip\r\nx-allow-interaction: true\r\nhost:
localhost\r\n\r\n", 4096) = 149
...
2113 15:07:29.336769 write(16, "HTTP/1.1 400 Bad Request\r\nContent-Type:
application/json\r\nDate: Sun, 26 Apr 2026 13:07:29 GMT\r\nContent-Length:
124\r\n\r\n{\"type\":\"error\",\"status-code\":400,\"status\":\"Bad
Request\",\"result\":{\"message\":\"this action is not supported on this
system\"}}", 242 <unfinished ...>
snapd seems like will always respond with 400 for these APIs if
model.HybridClassic is False:
https://github.com/canonical/snapd/blob/hotfix/2.75.2/daemon/api_system_volumes.go#L156
systemVolumesAPISupportedLocking()
https://github.com/canonical/snapd/blob/hotfix/2.75.2/daemon/api_system_recovery_keys.go#L57
supported, err :=
install.CheckHybridQuestingRelease(deviceCtx.Model())
https://github.com/canonical/snapd/blob/hotfix/2.75.2/overlord/install/install.go#L445
// CheckHybridQuestingRelease returns true if the given model and runtime
release
// information indicates that this is a hybrid Ubuntu system with a version of
// 25.10 or higher.
func CheckHybridQuestingRelease(model *asserts.Model) (bool, error) {
if !model.HybridClassic() {
return false, nil
}
model.HybridClassic depends on mod.kernelSnap
// HybridClassic returns whether the model is a hybrid classic system, meaning
// it is both classic and has an associated kernel snap.
func (mod *Model) HybridClassic() bool {
return mod.classic && mod.kernelSnap != nil
}
mod.kernelSnap depends on pc-kernel snap, and it is not there on 26.04
installed with passphrase FDE:
$ snap list
Name Version Rev Tracking
Publisher Notes
bare 1.0 5 latest/stable
canonical✓ base
canonical-livepatch v10.16.2 406 latest/stable
canonical✓ -
core22 20260225 2411 latest/stable
canonical✓ base
core24 20260317 1587 latest/stable
canonical✓ base
desktop-security-center 0+git.25daa58 151 latest/stable
canonical✓ -
firefox 150.0.1-1 8247 latest/stable
mozilla✓ -
firmware-updater 0+git.5645b80 226 1/stable/…
canonical✓ -
gnome-46-2404 0+git.f1cd5fa-sdk0+git.ca9c59c 153
latest/stable/… canonical✓ -
gtk-common-themes 0.1-81-g442e511 1535
latest/stable/… canonical✓ -
mesa-2404 25.0.7-snap211 1165
latest/stable/… canonical✓ -
prompting-client 0+git.33cd821 222 1/stable/…
canonical✓ -
snap-store 0+git.10310e85 1367 2/stable/…
canonical✓ -
snapd 2.75.2 26865 latest/stable
canonical✓ snapd
snapd-desktop-integration 0.9 361
latest/stable/… canonical✓ -
$
and pc-kernel can't be installed on non-Ubuntu Core machine:
$ sudo snap install pc-kernel
error: cannot perform the following tasks:
- Mount snap "pc-kernel" (3306) (cannot refresh kernel with change created by
old snapd that is missing gadget update task)
$
versions:
albert@x1:~$ snap version --verbose
snap 2.75.2
snapd 2.75.2
series 16
ubuntu 26.04
kernel 7.0.0-15-generic
architecture amd64
snapd-bin-from snap
snap-bin-from snap
albert@x1:~$ snap model --verbose
brand-id: generic
model: generic-classic
serial: 226baa9c-dce6-43e4-aeb4-6644f34721ac
classic: true
timestamp: 2017-07-27
albert@x1:~$ lsb_release -rd
Description: Ubuntu 26.04 LTS
Release: 26.04
albert@x1:~$
ProblemType: Bug
DistroRelease: Ubuntu 26.04
Package: snapd 2.74.1+ubuntu26.04.4
ProcVersionSignature: Ubuntu 7.0.0-15.15-generic 7.0.0
Uname: Linux 7.0.0-15-generic x86_64
ApportVersion: 2.34.0-0ubuntu2
Architecture: amd64
CasperMD5CheckResult: unknown
CurrentDesktop: ubuntu:GNOME
Date: Tue May 12 14:26:47 2026
InstallationDate: Installed on 2026-04-25 (17 days ago)
InstallationMedia: Ubuntu 26.04 "Resolute Raccoon" - Release amd64 (20260423.1)
ProcEnviron:
LANG=en_US.UTF-8
PATH=(custom, no user)
SHELL=/bin/bash
TERM=xterm-256color
XDG_RUNTIME_DIR=<set>
SnapChanges: no changes found
SourcePackage: snapd
UpgradeStatus: No upgrade log present (probably fresh install)
** Affects: snapd (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug resolute wayland-session
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2152242
Title:
Security Center unable to manage disk encryption if Ubuntu 26.04
installed with passphrase FDE
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/2152242/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
