Bug 2223779 - Libvirt FDO installation Failed to instantiate TCTI
Summary: Libvirt FDO installation Failed to instantiate TCTI
Keywords:
Status: POST
Alias: None
Product: Red Hat Enterprise Linux 9
Classification: Red Hat
Component: fido-device-onboard
Version: 9.2
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: rc
: 9.3
Assignee: idiez
QA Contact: Xiaofeng Wang
URL:
Whiteboard:
Depends On:
Blocks: 2231069
TreeView+ depends on / blocked
 
Reported: 2023-07-18 21:35 UTC by Sebastian Hetze
Modified: 2023-08-10 12:59 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 2231069 (view as bug list)
Environment:
Last Closed:
Type: Bug
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker RHELPLAN-162665 0 None None None 2023-07-18 21:36:55 UTC

Description Sebastian Hetze 2023-07-18 21:35:35 UTC
Description of problem:

When deploying a new VM from simplified-installer.iso as described in https://github.com/osbuild/rhel-for-edge-demo and https://www.youtube.com/watch?v=_nq5IAVbl2Y the installation fails with error messages

tcti:src/tss2-tcti/tctildr.c:416:Tss2_TctiLdr_Initialize_Ex() Failed to instantiate TCTI
tss_esapi::tcti_ldr > Error when creating a TCTI context: response code not recognized

right after the fdo_manufacturing_client is Performing DIUN.

The VM is configured with the emulated TIS TPMv2.0 device. Looking at the fdo-aio logfiles, I would say the communication between the fdo services and the VM is working.

Version-Release number of selected component (if applicable):
Version      : 0.4.7
Release      : 3.el9

How reproducible:
,   

Steps to Reproduce:
1. Create most simple simplified-installer.iso with the RHEL9 image builder
2. install fdo-admin-cli and provide with serviceinfo_api_server.yml from github rhel-for-edge-demo
3. deploy new VM with
virt-install \
--name ${NAME} \
--description "${NAME} FDO Edge Instance" \
--os-type=Linux \
--os-variant=rhel9.2 \
--tpm backend.type=emulator,backend.version=2.0,model=tpm-tis \
--boot uefi \
--ram=3072 \
--vcpus=1 \
--disk path=/var/lib/libvirt/images/${NAME}.qcow2,bus=virtio,size=10 \
--network network=host-bridge,mac=52:54:00:0b:46:2f \
--location /srv/Images/ISO/simplified-installer.iso

Actual results:

Installation fails and journalctl shows
tcti:src/tss2-tcti/tctildr.c:416:Tss2_TctiLdr_Initialize_Ex() Failed to instantiate TCTI
tss_esapi::tcti_ldr > Error when creating a TCTI context: response code not recognized

Expected results:

Installation customized according to serviceinfo_api_server.yml

Additional info:

Comment 1 Micah Abbott 2023-07-19 17:40:37 UTC
We are tracking this upstream as well - https://github.com/fedora-iot/fido-device-onboard-rs/issues/531

Comment 2 idiez 2023-07-21 10:37:34 UTC
PR with fix posted: https://github.com/fedora-iot/fido-device-onboard-rs/pull/536


Note You need to log in before you can comment on or make changes to this bug.