meta-iotedge
meta-iotedge copied to clipboard
aziottpm user is not added to tss group list
The below entry of /etc/group
is created by current meta-iotedge receipes:
tss:x:987:
This is evidently missing aziottpm user connection and that is why we are getting such error:
Mar 22 13:58:57 eg aziot-tpmd[805]: WARNING:tcti:../tpm2-tss-3.2.0/src/tss2-tcti/tcti-device.c:440:Tss2_Tcti_Device_Init() Failed to open default TCTI device file /dev/tpmrm0: Permission denied
Mar 22 13:58:57 eg aziot-tpmd[805]: WARNING:tcti:../tpm2-tss-3.2.0/src/tss2-tcti/tcti-device.c:440:Tss2_Tcti_Device_Init() Failed to open default TCTI device file /dev/tpm0: Permission denied
Mar 22 13:58:57 eg aziot-tpmd[805]: ERROR:tcti:../tpm2-tss-3.2.0/src/tss2-tcti/tcti-device.c:445:Tss2_Tcti_Device_Init() Could not open any default TCTI device file
Mar 22 13:58:57 eg aziot-tpmd[805]: ERROR:tcti:../tpm2-tss-3.2.0/src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: device
Mar 22 13:58:57 eg aziot-tpmd[805]: ERROR:tcti:../tpm2-tss-3.2.0/src/tss2-tcti/tctildr.c:428:Tss2_TctiLdr_Initialize_Ex() Failed to instantiate TCTI
Mar 22 13:58:57 eg systemd[1]: aziot-identityd.service: Main process exited, code=exited, status=1/FAILURE
Mar 22 13:58:57 eg aziot-tpmd[805]: 2023-03-22T13:58:57Z [ERR!] - service encountered an error
Mar 22 13:58:57 eg aziot-tpmd[805]: 2023-03-22T13:58:57Z [ERR!] - caused by: internal error
Mar 22 13:58:57 eg aziot-tpmd[805]: 2023-03-22T13:58:57Z [ERR!] - caused by: could not initialize TPM
Mar 22 13:58:57 eg aziot-tpmd[805]: 2023-03-22T13:58:57Z [ERR!] - caused by: tcti:IO failure
Mar 22 13:58:57 eg aziot-tpmd[805]: 2023-03-22T13:58:57Z [ERR!] - 0: <unknown>
After adding it with below command:
usermod -a -G tss aziottpm
I'm getting proper status for aziot-tpmd:
● aziot-tpmd.service - Azure IoT TPM Service
Loaded: loaded (/lib/systemd/system/aziot-tpmd.service; enabled; vendor preset: enabled)
Active: active (running) since Wed 2023-03-22 14:26:19 UTC; 1min 27s ago
TriggeredBy: ● aziot-tpmd.socket
Main PID: 454 (aziot-tpmd)
Tasks: 5 (limit: 4456)
Memory: 6.8M
CGroup: /system.slice/aziot-tpmd.service
└─ 454 /usr/bin/aziot-tpmd