Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #80192 > unrolled thread

Bug#1050602: linux: kernel 6.4.11-1 does not recognize TPM on lenovo 14IAU7 (Flex 7i)

Started byJustin King-Lacroix <justin.kinglacroix@gmail.com>
First post2023-08-26 23:30 +0200
Last post2023-08-29 13:40 +0200
Articles 7 — 4 participants

Back to article view | Back to linux.debian.kernel


Contents

  Bug#1050602: linux: kernel 6.4.11-1 does not recognize TPM on lenovo 14IAU7 (Flex 7i) Justin King-Lacroix <justin.kinglacroix@gmail.com> - 2023-08-26 23:30 +0200
    Bug#1050602: linux: kernel 6.4.11-1 does not recognize TPM on lenovo 14IAU7 (Flex 7i) Justin King-Lacroix <justin.kinglacroix@gmail.com> - 2023-08-26 23:40 +0200
      Bug#1050602: linux: kernel 6.4.11-1 does not recognize TPM on lenovo 14IAU7 (Flex 7i) Diederik de Haas <didi.debian@cknow.org> - 2023-08-29 13:40 +0200
        Bug#1050602: linux: kernel 6.4.11-1 does not recognize TPM on lenovo 14IAU7 (Flex 7i) Justin King-Lacroix <justin.kinglacroix@gmail.com> - 2023-09-02 05:40 +0200
          Bug#1050602: linux: kernel 6.4.11-1 does not recognize TPM on lenovo 14IAU7 (Flex 7i) Diederik de Haas <didi.debian@cknow.org> - 2023-09-07 20:10 +0200
    Bug#1050602: feedbackd: package documentation files are not installed into /usr/share/doc/ Boud Roukema <bouddebbug@cosmo.torun.pl> - 2023-08-29 01:40 +0200
    Processed: Re: Bug#1050602: linux: kernel 6.4.11-1 does not  recognize TPM on lenovo 14IAU7 (Flex 7i) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2023-08-29 13:40 +0200

#80192 — Bug#1050602: linux: kernel 6.4.11-1 does not recognize TPM on lenovo 14IAU7 (Flex 7i)

FromJustin King-Lacroix <justin.kinglacroix@gmail.com>
Date2023-08-26 23:30 +0200
SubjectBug#1050602: linux: kernel 6.4.11-1 does not recognize TPM on lenovo 14IAU7 (Flex 7i)
Message-ID<H790Z-4BSe-1@gated-at.bofh.it>
Source: linux
Version: 6.4.11-1
Severity: important
X-Debbugs-Cc: justin.kinglacroix@gmail.com

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

I use clevis-tpm2 to automatically unlock my harddisk on a 14IAU7 (Flex 7i),
and have been successfully using it for several months.


   * What exactly did you do (or not do) that was effective (or
     ineffective)?

Update from linux-image-6.4.0-2-amd64 to linux-image-6.4.0-3-amd64

   * What was the outcome of this action?

Machine boots successfully, but TPM-based auto-unlock no longer works. In fact,
the following shows up in `dmesg`:

```
$ sudo dmesg |grep -i tpm
[    0.000000] efi: ACPI=0x1ef60000 ACPI 2.0=0x1ef60014 TPMFinalLog=0x1ee34000
SMBIOS=0x21489000 SMBIOS 3.0=0x2147c000 MEMATTR=0x5398d018 ESRT=0x55328118
MOKvar=0x21478000 RNG=0x1ef5f018 TPMEventLog=0x1d82b018
[    0.004648] ACPI: SSDT 0x000000002148B000 00060E (v02 LENOVO Tpm2Tabl
00001000 INTL 20200717)
[    0.004651] ACPI: TPM2 0x000000002148A000 00004C (v04 LENOVO CB-01
00000002 LENO 00000001)
[    0.004709] ACPI: Reserving TPM2 table memory at [mem 0x2148a000-0x2148a04b]
[    1.217243] tpm_crb: probe of INTC6001:00 failed with error 378
[    1.256600] ima: No TPM chip found, activating TPM-bypass!
[    9.117870] systemd[1]: systemd 254.1-2 running in system mode (+PAM +AUDIT
+SELINUX +APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID
+CURL +ELFUTILS +FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2
-PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK
-XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified)
[    9.270983] systemd[1]: systemd-pcrmachine.service - TPM2 PCR Machine ID
Measurement was skipped because of an unmet condition check
(ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f).
$
```

(Note the line that says "No TPM chip found".)

TPM-related stuff is also gone from /sys/kernel/security.

   * What outcome did you expect instead?

TPM continues to be recognized and used by linux.


*** End of the template - remove these template lines ***


-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (500, 'testing'), (1, 'oldoldstable'), (1, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.4.0-3-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_USER
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

[toc] | [next] | [standalone]


#80193

FromJustin King-Lacroix <justin.kinglacroix@gmail.com>
Date2023-08-26 23:40 +0200
Message-ID<H79aF-4BVJ-1@gated-at.bofh.it>
In reply to#80192

[Multipart message — attachments visible in raw view] — view raw

Looks like this is an upstream bug that affects all Alder Lake (and maybe
newer) systems.

https://bugzilla.kernel.org/show_bug.cgi?id=217804

https://github.com/NixOS/nixpkgs/issues/250166

[toc] | [prev] | [next] | [standalone]


#80211

FromDiederik de Haas <didi.debian@cknow.org>
Date2023-08-29 13:40 +0200
Message-ID<H85eF-5eYO-7@gated-at.bofh.it>
In reply to#80193

[Multipart message — attachments visible in raw view] — view raw

Control: forwarded -1 https://bugzilla.kernel.org/show_bug.cgi?id=217804 https://lore.kernel.org/stable/20230822231510.2263255-1-jarkko@kernel.org/
Control: tag -1 upstream

On Saturday, 26 August 2023 23:26:51 CEST Justin King-Lacroix wrote:
> Looks like this is an upstream bug that affects all Alder Lake (and maybe
> newer) systems.
> 
> https://bugzilla.kernel.org/show_bug.cgi?id=217804

Thanks, I added that and also what appears to be the most current patch
submission which will hopefully fix that issue. 

The issue is also on Thorsten Leemhuis' radar:
https://lore.kernel.org/stable/fcf2f600-d1f0-de14-956b-4d4f3f0cb3fa@leemhuis.info/

[toc] | [prev] | [next] | [standalone]


#80269

FromJustin King-Lacroix <justin.kinglacroix@gmail.com>
Date2023-09-02 05:40 +0200
Message-ID<H9pEl-655m-1@gated-at.bofh.it>
In reply to#80211

[Multipart message — attachments visible in raw view] — view raw

Thanks.

FYI bug is still present in 6.4.13-1

J


On Tue, Aug 29, 2023 at 7:30 AM Diederik de Haas <didi.debian@cknow.org>
wrote:

> Control: forwarded -1 https://bugzilla.kernel.org/show_bug.cgi?id=217804
> https://lore.kernel.org/stable/20230822231510.2263255-1-jarkko@kernel.org/
> Control: tag -1 upstream
>
> On Saturday, 26 August 2023 23:26:51 CEST Justin King-Lacroix wrote:
> > Looks like this is an upstream bug that affects all Alder Lake (and maybe
> > newer) systems.
> >
> > https://bugzilla.kernel.org/show_bug.cgi?id=217804
>
> Thanks, I added that and also what appears to be the most current patch
> submission which will hopefully fix that issue.
>
> The issue is also on Thorsten Leemhuis' radar:
>
> https://lore.kernel.org/stable/fcf2f600-d1f0-de14-956b-4d4f3f0cb3fa@leemhuis.info/

[toc] | [prev] | [next] | [standalone]


#80331

FromDiederik de Haas <didi.debian@cknow.org>
Date2023-09-07 20:10 +0200
Message-ID<HbrC1-7oAJ-3@gated-at.bofh.it>
In reply to#80269

[Multipart message — attachments visible in raw view] — view raw

On Fri, 1 Sep 2023 23:32:34 -0400 Justin King-Lacroix 
<justin.kinglacroix@gmail.com> wrote:
> FYI bug is still present in 6.4.13-1

It has been fixed in Linus' tree with 8f7f35e5aa6f2182eabcfa3abef4d898a48e9aa8
And a backport of that is currently available in the stable queue for 6.5, 6.4 
and 6.1, so it should make it into 6.5.3, 6.4.16 and 6.1.53 respectively.

[toc] | [prev] | [next] | [standalone]


#80207 — Bug#1050602: feedbackd: package documentation files are not installed into /usr/share/doc/

FromBoud Roukema <bouddebbug@cosmo.torun.pl>
Date2023-08-29 01:40 +0200
SubjectBug#1050602: feedbackd: package documentation files are not installed into /usr/share/doc/
Message-ID<H7TZT-57b3-1@gated-at.bofh.it>
In reply to#80192
On Sat, 26 Aug 2023, Boud Roukema wrote:

> I expected to find upstream files such as
>
> README.md  (possibly renamed to README.source)
> NEWS.gz
> NEWS.Debian.gz
>
> installed in /usr/share/doc/feedbackd/ .

Obviously, NEWS.Debian.gz is not an upstream file. :)

[toc] | [prev] | [next] | [standalone]


#80212 — Processed: Re: Bug#1050602: linux: kernel 6.4.11-1 does not recognize TPM on lenovo 14IAU7 (Flex 7i)

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2023-08-29 13:40 +0200
SubjectProcessed: Re: Bug#1050602: linux: kernel 6.4.11-1 does not recognize TPM on lenovo 14IAU7 (Flex 7i)
Message-ID<H85eF-5eYO-19@gated-at.bofh.it>
In reply to#80192
Processing control commands:

> forwarded -1 https://bugzilla.kernel.org/show_bug.cgi?id=217804 https://lore.kernel.org/stable/20230822231510.2263255-1-jarkko@kernel.org/
Bug #1050602 [src:linux] linux: kernel 6.4.11-1 does not recognize TPM on lenovo 14IAU7 (Flex 7i)
Set Bug forwarded-to-address to 'https://bugzilla.kernel.org/show_bug.cgi?id=217804 https://lore.kernel.org/stable/20230822231510.2263255-1-jarkko@kernel.org/'.
> tag -1 upstream
Bug #1050602 [src:linux] linux: kernel 6.4.11-1 does not recognize TPM on lenovo 14IAU7 (Flex 7i)
Added tag(s) upstream.

-- 
1050602: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1050602
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.kernel


csiph-web