Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #260941

Re: random number generator missing after upgrade

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Mon, 14 Aug 2023 Björn Persson wrote:
> David Wright wrote:
>> On Mon 14 Aug 2023 at 11:26:13 (+0200), Björn Persson wrote:
>>> Other functions in the same source file create /dev/tpm0, and it looks
>>> like the random number generator should get registered together with
>>> the TPM. It's conditional on CONFIG_HW_RANDOM_TPM. Where can I check
>>> the value of that option?
>>
>> $ grep CONFIG_HW_RANDOM_TPM /boot/config-5.10.0-2*
>> /boot/config-5.10.0-23-amd64:CONFIG_HW_RANDOM_TPM=y
>> /boot/config-5.10.0-24-amd64:CONFIG_HW_RANDOM_TPM=y
>> $
>
> Thanks. And look at that:
>
> # grep CONFIG_HW_RANDOM_TPM /boot/config-*
> /boot/config-5.10.0-23-amd64:CONFIG_HW_RANDOM_TPM=y
> # grep CONFIG_HW_RANDOM_TPM /boot/config-6.1.0-11-amd64 ; echo $?
> 1
>
> So apparently randomness from a TPM is completely disabled in Debian 12
> regardless of manufacturer. Next question: Why?

 Debian Bug #1041007
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1041007#10

  Message #10
  From: Vincent Blut
  [...]
  Subject: linux-image-6.1.0-0.deb11.7-amd64: Please enable TPM hardware RNG support (CONFIG_HW_RANDOM_TPM)
  Date: Sat, 29 Jul 2023 00:33:35 +0200

  [...]
  Indeed, this regression compared to the kernel provided in bullseye
  is due to a configuration issue.
  For HW_RANDOM_TPM to be enabled, the TCG_TPM and HW_RANDOM config
  symbols are required but there is a subtlety in the way they have to
  be built. If TCG_TPM is built-in then HW_RANDOM must not be loadable
  (built as a module).

  If we take a look at the kernel configuration files prior being
  constructed, we can see that both TCG_TPM and HW_RANDOM config
  symbols should be built as modules:

  $ grep -Er "TCG_TPM|HW_RANDOM="
  arm64/config:CONFIG_TCG_TPM=m
  kernelarch-x86/config:CONFIG_TCG_TPM=m
  config:CONFIG_HW_RANDOM=m
  config.cloud:CONFIG_TCG_TPM=m

  However after these files have been constructed, the TCG_TPM config
  symbol is no longer provided as module but built-in:

  $ grep TCG_TPM /boot/config-6.3.0-1-amd64
  CONFIG_TCG_TPM=y

  This change is what causes HW_RANDOM_TPM to be disabled and is
  probably due to

   https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=644f17412f5acf01a19af9d04a92193
  [...]

-- 
Hackers are free people. They are like artists. If they are in a good
mood, they get up in the morning and begin painting their pictures.
-- Vladimir Putin

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Crosshairs in gimp 2.10.22 in Debian 11.7. peter@easthope.ca - 2023-08-12 04:00 +0200
  Re: Crosshairs in gimp 2.10.22 in Debian 11.7. Dan Ritter <dsr@randomstring.org> - 2023-08-12 13:10 +0200
    Re: Crosshairs in gimp 2.10.22 in Debian 11.7. peter@easthope.ca - 2023-08-12 15:50 +0200
    Re: random number generator missing after upgrade Björn Persson <Bjorn@xn--rombobjrn-67a.se> - 2023-08-14 11:30 +0200
      Re: random number generator missing after upgrade David Wright <deblis@lionunicorn.co.uk> - 2023-08-14 15:30 +0200
        Re: random number generator missing after upgrade Björn Persson <Bjorn@xn--rombobjrn-67a.se> - 2023-08-14 21:00 +0200
          Re: random number generator missing after upgrade davidson <davidson@freevolt.org> - 2023-08-14 22:30 +0200
            Re: random number generator missing after upgrade Björn Persson <Bjorn@xn--rombobjrn-67a.se> - 2023-08-15 07:50 +0200
    Re: upgrade to bookworm broke phpmyadmin Rick Macdonald <rickmacd@shaw.ca> - 2023-08-24 05:30 +0200
      Re: upgrade to bookworm broke phpmyadmin Stefan Monnier <monnier@iro.umontreal.ca> - 2023-08-24 16:00 +0200
        Re: upgrade to bookworm broke phpmyadmin Rick Macdonald <rickmacd@shaw.ca> - 2023-08-24 23:40 +0200
    Re: Please verify Gnome and KDE wiki articles for correctness Jeffrey Walton <noloader@gmail.com> - 2023-08-26 16:30 +0200
      Re: Please verify Gnome and KDE wiki articles for correctness <tomas@tuxteam.de> - 2023-08-26 16:50 +0200
    Re: raid10 access problem gene heskett <gheskett@shentel.net> - 2023-09-07 19:10 +0200
    Re: raid10 access problem gene heskett <gheskett@shentel.net> - 2023-09-07 21:10 +0200
    Re: raid10 access problem gene heskett <gheskett@shentel.net> - 2023-09-07 21:10 +0200
    Re: Debian, Git server, Nginx, Fcgiwrap, and git push can not create  remote object directory David Mehler <dave.mehler@gmail.com> - 2023-09-10 03:30 +0200
    Re: usrmerge on root NFS will not be run automatically Marco <lists@homerow.info> - 2023-09-10 18:50 +0200
      Re: usrmerge on root NFS will not be run automatically Javier Barroso <javibarroso@gmail.com> - 2023-09-11 17:30 +0200
    Re: usrmerge on root NFS will not be run automatically Marco <lists@homerow.info> - 2023-09-14 16:30 +0200
      Re: usrmerge on root NFS will not be run automatically Dan Ritter <dsr@randomstring.org> - 2023-09-14 17:20 +0200
        Re: usrmerge on root NFS will not be run automatically Marco <lists@homerow.info> - 2023-09-14 18:10 +0200
        Re: usrmerge on root NFS will not be run automatically Marco <lists@homerow.info> - 2023-09-14 20:30 +0200
          Re: usrmerge on root NFS will not be run automatically Stefan Monnier <monnier@iro.umontreal.ca> - 2023-09-14 23:00 +0200
            Re: usrmerge on root NFS will not be run automatically Marco <lists@homerow.info> - 2023-09-15 14:00 +0200
              Re: usrmerge on root NFS will not be run automatically Stefan Monnier <monnier@iro.umontreal.ca> - 2023-09-15 15:30 +0200
        Re: usrmerge on root NFS will not be run automatically Marco <lists@homerow.info> - 2023-09-14 22:20 +0200
          Re: usrmerge on root NFS will not be run automatically Marco <lists@homerow.info> - 2023-10-03 13:50 +0200
        Re: usrmerge on root NFS will not be run automatically Marco <lists@homerow.info> - 2023-09-15 14:00 +0200
          Re: usrmerge on root NFS will not be run automatically Andy Smith <andy@strugglers.net> - 2023-09-15 20:00 +0200
            Re: usrmerge on root NFS will not be run automatically Marco <lists@homerow.info> - 2023-09-15 23:40 +0200
        Re: sata driver compataility Q gene heskett <gheskett@shentel.net> - 2023-09-15 23:40 +0200
          Re: sata driver compataility Q Andy Smith <andy@strugglers.net> - 2023-09-16 00:00 +0200
            Re: sata driver compataility Q gene heskett <gheskett@shentel.net> - 2023-09-16 01:30 +0200
          Re: sata driver compataility Q songbird <songbird@anthive.com> - 2023-09-16 12:10 +0200
            Re: sata driver compataility Q gene heskett <gheskett@shentel.net> - 2023-09-16 13:50 +0200
              Re: sata driver compataility Q songbird <songbird@anthive.com> - 2023-09-16 14:10 +0200
        Re: sata driver compataility Q gene heskett <gheskett@shentel.net> - 2023-09-15 23:50 +0200
        Re: sata driver compataility Q gene heskett <gheskett@shentel.net> - 2023-09-19 03:40 +0200
          Amanda (was: sata driver compataility Q) Stefan Monnier <monnier@iro.umontreal.ca> - 2023-09-19 15:00 +0200
            Re: Amanda (was: sata driver compataility Q) gene heskett <gheskett@shentel.net> - 2023-09-19 17:20 +0200
              Re: Amanda (was: sata driver compataility Q) Glenn <ve9gj@napan.com> - 2023-09-19 19:00 +0200
        Re: PATH revisited: one PATH to "rule the [Debian] World" Greg Wooledge <greg@wooledge.org> - 2023-09-24 19:30 +0200
          When a random string is not random (was Re: PATH revisited: one PATH  to "rule the [Debian] World") Max Nikulin <manikulin@gmail.com> - 2023-09-25 05:20 +0200
        Re: PATH revisited: one PATH to "rule the [Debian] World" Michael Kjörling <2695bd53d63c@ewoof.net> - 2023-09-24 21:50 +0200
          Re: PATH revisited: one PATH to "rule the [Debian] World" Greg Wooledge <greg@wooledge.org> - 2023-09-24 22:00 +0200
            Re: PATH revisited: one PATH to "rule the [Debian] World" Tom Browder <tom.browder@gmail.com> - 2023-09-24 22:50 +0200
              Re: PATH revisited: one PATH to "rule the [Debian] World" Michael Kjörling <2695bd53d63c@ewoof.net> - 2023-09-24 23:00 +0200
                Re: PATH revisited: one PATH to "rule the [Debian] World" Tom Browder <tom.browder@gmail.com> - 2023-09-24 23:30 +0200
        Message IDs, was Re: PATH revisited: one PATH to "rule the [Debian]  World" David Wright <deblis@lionunicorn.co.uk> - 2023-09-25 05:20 +0200
          Re: Message IDs, was Re: PATH revisited: one PATH to "rule the  [Debian] World" Dan Ritter <dsr@randomstring.org> - 2023-09-25 13:10 +0200

csiph-web