Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

aziottpm user is not added to tss group list #132

Open
Dvergatal opened this issue Mar 22, 2023 · 0 comments
Open

aziottpm user is not added to tss group list #132

Dvergatal opened this issue Mar 22, 2023 · 0 comments

Comments

@Dvergatal
Copy link

Dvergatal commented Mar 22, 2023

The below entry of /etc/group is created by current meta-iotedge receipes:

tss:x:987:

This is evidently missing aziottpm user connection and that is why we are getting such error:

Mar 22 13:58:57 eg aziot-tpmd[805]: WARNING:tcti:../tpm2-tss-3.2.0/src/tss2-tcti/tcti-device.c:440:Tss2_Tcti_Device_Init() Failed to open default TCTI device file /dev/tpmrm0: Permission denied
Mar 22 13:58:57 eg aziot-tpmd[805]: WARNING:tcti:../tpm2-tss-3.2.0/src/tss2-tcti/tcti-device.c:440:Tss2_Tcti_Device_Init() Failed to open default TCTI device file /dev/tpm0: Permission denied
Mar 22 13:58:57 eg aziot-tpmd[805]: ERROR:tcti:../tpm2-tss-3.2.0/src/tss2-tcti/tcti-device.c:445:Tss2_Tcti_Device_Init() Could not open any default TCTI device file
Mar 22 13:58:57 eg aziot-tpmd[805]: ERROR:tcti:../tpm2-tss-3.2.0/src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: device
Mar 22 13:58:57 eg aziot-tpmd[805]: ERROR:tcti:../tpm2-tss-3.2.0/src/tss2-tcti/tctildr.c:428:Tss2_TctiLdr_Initialize_Ex() Failed to instantiate TCTI
Mar 22 13:58:57 eg systemd[1]: aziot-identityd.service: Main process exited, code=exited, status=1/FAILURE
Mar 22 13:58:57 eg aziot-tpmd[805]: 2023-03-22T13:58:57Z [ERR!] - service encountered an error
Mar 22 13:58:57 eg aziot-tpmd[805]: 2023-03-22T13:58:57Z [ERR!] - caused by: internal error
Mar 22 13:58:57 eg aziot-tpmd[805]: 2023-03-22T13:58:57Z [ERR!] - caused by: could not initialize TPM
Mar 22 13:58:57 eg aziot-tpmd[805]: 2023-03-22T13:58:57Z [ERR!] - caused by: tcti:IO failure
Mar 22 13:58:57 eg aziot-tpmd[805]: 2023-03-22T13:58:57Z [ERR!] -    0: <unknown>

After adding it with below command:

usermod -a -G tss aziottpm

I'm getting proper status for aziot-tpmd:

● aziot-tpmd.service - Azure IoT TPM Service
     Loaded: loaded (/lib/systemd/system/aziot-tpmd.service; enabled; vendor preset: enabled)
     Active: active (running) since Wed 2023-03-22 14:26:19 UTC; 1min 27s ago
TriggeredBy: ● aziot-tpmd.socket
   Main PID: 454 (aziot-tpmd)
      Tasks: 5 (limit: 4456)
     Memory: 6.8M
     CGroup: /system.slice/aziot-tpmd.service
             └─ 454 /usr/bin/aziot-tpmd
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant