Foi atualizado systemd, e com isso ocorre erro ao iniciar o serviço
systemd-pcrlogin@1000.service
pode ser visto com
systemctl --failed
Para resolver temporariamente no arch, e faça o downgrade dos pacotes
cd /var/cache/pacman/pkg/
sudo pacman -U systemd-260.2-2-x86_64.pkg.tar.zst lib32-systemd-260.2-1-x86_64.pkg.tar.zst systemd-libs-260.2-2-x86_64.pkg.tar.zst systemd-sysvcompat-260.2-2-x86_64.pkg.tar.zst systemd-resolvconf-260.2-2-x86_64.pkg.tar.zst
No pacman.conf, adicione para ignorar pacotes ao atualizar o sistema
# Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
IgnorePkg = lib32-systemd systemd systemd-libs systemd-resolvconf systemd-sysvcompat
abertos 08:22AM - 24 Jun 26 UTC
bug 🐛
### systemd version the issue has been seen with
261-1-arch
### Used distribut… ion
Arch
### Linux kernel version used
7.0.12-arch1-1
### CPU architectures issue was seen on
x86_64
### Component
other
### Expected behaviour you didn't see
Normal systemd boot, whether or not extending nvpcrs is possible
### Unexpected behaviour you saw
multiple `systemd-pcrlogin@.service` failures upon everyboot, as well as errors below in the logs
### Steps to reproduce the problem
Update to 261 on particleOS (Arch flavour) with this particular firmware
Can a solution be to mask files in `/usr/lib/nvpcr/*.nvpcr` ?
What functionality would be lost ?
What would be the path to place a symlink to `/dev/null` ? `/etc/nvpcr/` ?
### Additional program output to the terminal or log subsystem illustrating the issue
```
$ systemctl list-units --failed
UNIT LOAD ACTIVE SUB DESCRIPTION
● systemd-pcrlogin@0.service loaded failed failed TPM NvPCR Measurement of User Record for UID 0
● systemd-pcrlogin@60303.service loaded failed failed TPM NvPCR Measurement of User Record for UID 60303
● systemd-pcrlogin@60578.service loaded failed failed TPM NvPCR Measurement of User Record for UID 60578
$ journalctl -b -g nvpcr
juin 24 09:12:38 particle-2799-acbd systemd[1]: Received untrusted credentials: nvpcr-anchor.567c4905e1a94e509a788e0c7b6d4358, nvpcr-anchor.621fd37766664f2c9021561291e60fd4, nvpcr-anchor.6c83d2da2582474e8c8156db>
juin 24 09:12:38 particle-2799-acbd systemd-tpm2-setup[196]: The TPM's NV index space is exhausted, skipping allocation of NvPCR 'verity' and any less important ones: No space left on device
juin 24 09:12:38 particle-2799-acbd systemd-tpm2-setup[196]: Skipped 4 lowest-priority NvPCR(s) because the TPM's NV index space is exhausted, proceeding anyway.
juin 24 09:12:38 particle-2799-acbd systemd[1]: Starting TPM PCR NvPCR Initialization Separator...
juin 24 09:12:38 particle-2799-acbd systemd-pcrextend[254]: Extended PCR index 9 with 'nvpcr-separator' (banks sha256).
juin 24 09:12:38 particle-2799-acbd systemd[1]: Finished TPM PCR NvPCR Initialization Separator.
juin 24 09:12:38 particle-2799-acbd systemd[1]: TPM NvPCR Product ID Measurement skipped, unmet condition check ConditionPathExists=!/etc/initrd-release
juin 24 09:12:39 particle-2799-acbd systemd-pcrextend[251]: Successfully written anchor secret to '/var/lib/systemd/nvpcr/nvpcr-anchor.cred'.
juin 24 09:12:39 particle-2799-acbd systemd-pcrextend[251]: Failed to extend NvPCR index 'verity' with anchor secret: No space left on device
juin 24 09:12:40 particle-2799-acbd systemd-cryptsetup[257]: Successfully extended NvPCR index 'cryptsetup' with 'cryptsetup-keyslot:root:3d99f0a3-1713-4dfb-b797-8538b0205d7f:tpm2:0'.
juin 24 09:12:40 particle-2799-acbd systemd[1]: Stopped TPM PCR NvPCR Initialization Separator.
juin 24 09:12:41 aquarius systemd[1]: Received untrusted credentials: nvpcr-anchor.567c4905e1a94e509a788e0c7b6d4358, nvpcr-anchor.621fd37766664f2c9021561291e60fd4, nvpcr-anchor.6c83d2da2582474e8c8156db33e353bd, >
juin 24 09:12:41 aquarius systemd[1]: TPM PCR NvPCR Initialization Separator skipped, unmet condition check ConditionPathExists=/etc/initrd-release
juin 24 09:12:41 aquarius systemd[1]: Starting TPM NvPCR Product ID Measurement...
juin 24 09:12:41 aquarius systemd-pcrextend[378]: Extended NvPCR index 'hardware' with 'product-id:ed644034276c794596d4e66982ed6fb5'.
juin 24 09:12:42 aquarius systemd[1]: Finished TPM NvPCR Product ID Measurement.
juin 24 09:12:42 aquarius systemd-tpm2-setup[384]: The TPM's NV index space is exhausted, skipping allocation of NvPCR 'verity' and any less important ones: No space left on device
juin 24 09:12:42 aquarius systemd-tpm2-setup[384]: Skipped 4 lowest-priority NvPCR(s) because the TPM's NV index space is exhausted, proceeding anyway.
juin 24 09:12:42 aquarius systemd[1]: TPM PCR NvPCR Initialization Separator skipped, unmet condition check ConditionPathExists=/etc/initrd-release
juin 24 09:12:43 aquarius systemd[1]: TPM PCR NvPCR Initialization Separator skipped, unmet condition check ConditionPathExists=/etc/initrd-release
juin 24 09:12:47 aquarius systemd[1]: Starting TPM NvPCR Measurement of User Record for UID 60578...
juin 24 09:12:47 aquarius systemd-pcrextend[933]: Failed to extend NvPCR index 'login' with anchor secret: No space left on device
juin 24 09:12:47 aquarius systemd[1]: Failed to start TPM NvPCR Measurement of User Record for UID 60578.
juin 24 09:12:55 aquarius systemd[1]: Starting TPM NvPCR Measurement of User Record for UID 60303...
juin 24 09:12:55 aquarius systemd-pcrextend[2363]: Failed to extend NvPCR index 'login' with anchor secret: No space left on device
juin 24 09:12:55 aquarius systemd[1]: Failed to start TPM NvPCR Measurement of User Record for UID 60303.
juin 24 09:14:29 aquarius systemd[1]: Starting TPM NvPCR Measurement of User Record for UID 0...
juin 24 09:14:30 aquarius systemd-pcrextend[4948]: Failed to extend NvPCR index 'login' with anchor secret: No space left on device
juin 24 09:14:30 aquarius systemd[1]: Failed to start TPM NvPCR Measurement of User Record for UID 0.
juin 24 09:41:56 aquarius systemd[1]: Starting TPM NvPCR Measurement of User Record for UID 0...
juin 24 09:41:56 aquarius systemd-pcrextend[7658]: Failed to extend NvPCR index 'login' with anchor secret: No space left on device
juin 24 09:41:56 aquarius systemd[1]: Failed to start TPM NvPCR Measurement of User Record for UID 0.
juin 24 10:09:48 aquarius systemd[1]: Starting TPM NvPCR Measurement of User Record for UID 0...
juin 24 10:09:49 aquarius systemd-pcrextend[9462]: Failed to extend NvPCR index 'login' with anchor secret: No space left on device
juin 24 10:09:49 aquarius systemd[1]: Failed to start TPM NvPCR Measurement of User Record for UID 0.
```
```
$ systemd-analyze identify-tpm2
Family Indicator: 2.0
Level: 0
Revision: 1.38
Specification Date: Wed 2019-12-18
Manufacturer: INTC
Vendor String: TGL
Firmware Version: 600.7.69143231
Modalias String: fi2.0:lv0:rv1.38:sy2019:sd352:mfINTC:vsTGL:ty0:fw600.7.69143231:
$ tpm2_getcap properties-variable
TPM2_PT_HR_NV_INDEX: 0x9
TPM2_PT_HR_PERSISTENT: 0x4
TPM2_PT_HR_PERSISTENT_AVAIL: 0x10
TPM2_PT_NV_COUNTERS: 0x2
TPM2_PT_NV_COUNTERS_AVAIL: 0x0
$ tpm2_getcap properties-fixed
TPM2_PT_NV_COUNTERS_MAX:
raw: 0x80
TPM2_PT_NV_INDEX_MAX:
raw: 0x800
TPM2_PT_NV_BUFFER_MAX:
raw: 0x800
```
1 curtida