stefanberger
commented
3 years ago Did you build the executables before the check?
Closed kloczek closed 3 years ago
stefanberger
commented
3 years ago Did you build the executables before the check?
stefanberger
commented
3 years ago How many processors do you have on your system?
My sequence is:
./autogen.sh --with-openssl --without-cuse --without-selinux
make -O -j$(nproc) V=1 VERBOSE=1 check
[...]
============================================================================
Testsuite summary for swtpm 0.6.0
============================================================================
# TOTAL: 59
# PASS: 50
# SKIP: 9
# XFAIL: 0
# FAIL: 0
# XPASS: 0
# ERROR: 0
============================================================================
make[3]: Leaving directory '/home/stefanb/dev/swtpm/tests'
kloczek
commented
3 years ago Did you build the executables before the check?
Yes I did. rpmbuild executes %check after %buuild and %install scriptlets.
kloczek
commented
3 years ago How many processors do you have on your system?
48
kloczek
commented
3 years ago Just made the test and looks like it is not parallelisation issue:
+ /usr/bin/make -O -j48 V=1 VERBOSE=1 check -j1
Making check in etc
make[1]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/etc'
make[1]: Nothing to be done for 'check'.
make[1]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/etc'
Making check in include
make[1]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/include'
Making check in swtpm
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/include/swtpm'
make[2]: Nothing to be done for 'check'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/include/swtpm'
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/include'
make[2]: Nothing to be done for 'check-am'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/include'
make[1]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/include'
Making check in man
make[1]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/man'
Making check in man3
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/man/man3'
make[2]: Nothing to be done for 'check'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/man/man3'
Making check in man8
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/man/man8'
make[2]: Nothing to be done for 'check'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/man/man8'
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/man'
make[2]: Nothing to be done for 'check-am'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/man'
make[1]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/man'
Making check in samples
make[1]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/samples'
make[1]: Nothing to be done for 'check'.
make[1]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/samples'
Making check in src
make[1]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src'
Making check in utils
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/utils'
make[2]: Nothing to be done for 'check'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/utils'
Making check in swtpm
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/swtpm'
make[2]: Nothing to be done for 'check'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/swtpm'
Making check in swtpm_bios
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/swtpm_bios'
make[2]: Nothing to be done for 'check'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/swtpm_bios'
Making check in swtpm_cert
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/swtpm_cert'
make[2]: Nothing to be done for 'check'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/swtpm_cert'
Making check in swtpm_ioctl
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/swtpm_ioctl'
make[2]: Nothing to be done for 'check'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/swtpm_ioctl'
Making check in swtpm_setup
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/swtpm_setup'
make[2]: Nothing to be done for 'check'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/swtpm_setup'
Making check in selinux
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/selinux'
make[2]: Nothing to be done for 'check'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src/selinux'
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src'
make[2]: Nothing to be done for 'check-am'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src'
make[1]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/src'
Making check in tests
make[1]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests'
/usr/bin/make
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests'
make[2]: Nothing to be done for 'all'.
make[2]: Leaving directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests'
/usr/bin/make check-TESTS
make[2]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests'
make[3]: Entering directory '/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests'
SKIP: test_vtpm_proxy
SKIP: test_tpm2_vtpm_proxy
FAIL: test_ctrlchannel2
PASS: test_ctrlchannel4
FAIL: test_tpm2_ctrlchannel2
FAIL: test_commandline
FAIL: test_ctrlchannel
PASS: test_ctrlchannel3
FAIL: test_encrypted_state
FAIL: test_getcap
FAIL: test_hashing
FAIL: test_hashing2
FAIL: test_init
FAIL: test_locality
FAIL: test_migration_key
PASS: test_parameters
FAIL: test_resume_volatile
FAIL: test_save_load_encrypted_state
FAIL: test_save_load_state
FAIL: test_setbuffersize
FAIL: test_volatilestate
FAIL: test_swtpm_bios
FAIL: test_tpm_probe
SKIP: test_tpm12
FAIL: test_wrongorder
PASS: test_print_capabilities
FAIL: test_tpm2_derived_keys
FAIL: test_tpm2_encrypted_state
FAIL: test_tpm2_init
FAIL: test_tpm2_getcap
FAIL: test_tpm2_locality
FAIL: test_tpm2_hashing
FAIL: test_tpm2_hashing2
FAIL: test_tpm2_hashing3
FAIL: test_tpm2_migration_key
SKIP: test_tpm2_partial_reads
PASS: test_tpm2_print_capabilities
FAIL: test_tpm2_resume_volatile
FAIL: test_tpm2_savestate
FAIL: test_tpm2_save_load_encrypted_state
SKIP: test_tpm2_save_load_state_2
SKIP: test_tpm2_save_load_state_3
FAIL: test_tpm2_save_load_state_da_timeout
FAIL: test_tpm2_setbuffersize
FAIL: test_tpm2_volatilestate
FAIL: test_tpm2_wrongorder
FAIL: test_tpm2_probe
FAIL: test_tpm2_swtpm_bios
SKIP: test_tpm2_ibmtss2
SKIP: test_samples_create_tpmca
PASS: test_swtpm_cert
PASS: test_swtpm_setup_create_cert
PASS: test_tpm2_parameters
PASS: test_tpm2_samples_swtpm_localca
PASS: test_tpm2_samples_swtpm_localca_pkcs11
PASS: test_tpm2_swtpm_cert
PASS: test_tpm2_swtpm_cert_ecc
PASS: test_tpm2_swtpm_setup_create_cert
SKIP: test_tpm2_samples_create_tpmca
=======================================
swtpm 0.6.0: tests/test-suite.log
=======================================
# TOTAL: 59
# PASS: 13
# SKIP: 9
# XFAIL: 0
# FAIL: 37
# XPASS: 0
# ERROR: 0
.. contents:: :depth: 2
SKIP: test_vtpm_proxy
=====================
Need to be root to run this test.
SKIP test_vtpm_proxy (exit status: 77)
SKIP: test_tpm2_vtpm_proxy
==========================
Need to be root to run this test.
SKIP test_tpm2_vtpm_proxy (exit status: 77)
FAIL: test_ctrlchannel2
=======================
OK
swtpm: Could not open TCP socket: Address already in use
Error: Socket TPM did not write pidfile.
FAIL test_ctrlchannel2 (exit status: 1)
FAIL: test_tpm2_ctrlchannel2
============================
OK
swtpm: Could not open TCP socket: Address already in use
Error: Socket TPM did not write pidfile.
FAIL test_tpm2_ctrlchannel2 (exit status: 1)
FAIL: test_commandline
======================
'^ [[:print:]]+$' occurrences: 1695 (OK)
'^ [[:print:]]+$' occurrences: 1675 (OK)
'^ [[:print:]]+$' occurrences: 1675 (OK)
'^ [[:print:]]+$' occurrences: 1675 (OK)
'^ [[:print:]]+$' occurrences: 1592 (OK)
'^ [[:print:]]+$' occurrences: 600 (OK)
'^ [[:print:]]+$' occurrences: 36 (OK)
Test 1 passed
./test_commandline: line 132: /dev/tcp/localhost/11234: No such file or directory
Test 2 failed: Could not connect to TPM
FAIL test_commandline (exit status: 1)
FAIL: test_ctrlchannel
======================
'^ [[:print:]]+$' occurrences: 2282 (OK)
'^ [[:print:]]+$' occurrences: 2254 (OK)
'^ [[:print:]]+$' occurrences: 2254 (OK)
'^ [[:print:]]+$' occurrences: 2254 (OK)
'^ [[:print:]]+$' occurrences: 2235 (OK)
'^ [[:print:]]+$' occurrences: 918 (OK)
'^ [[:print:]]+$' occurrences: 33 (OK)
OK
==== Starting swtpm with interfaces socket+unix ====
Server did not open port 65430
./test_ctrlchannel: line 20: 878664 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=unixio,path=${SWTPM_CTRL_UNIX_PATH}
FAIL test_ctrlchannel (exit status: 1)
FAIL: test_encrypted_state
==========================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65400
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 878782 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_encrypted_state (exit status: 1)
FAIL: test_getcap
=================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65402
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 878878 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_getcap (exit status: 1)
FAIL: test_hashing
==================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65404
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 878961 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_hashing (exit status: 1)
FAIL: test_hashing2
===================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65406
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 879066 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_hashing2 (exit status: 1)
FAIL: test_init
===============
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65408
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 879195 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_init (exit status: 1)
FAIL: test_locality
===================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65410
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 879278 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_locality (exit status: 1)
FAIL: test_migration_key
========================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65412
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 879396 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_migration_key (exit status: 1)
FAIL: test_resume_volatile
==========================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65414
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 880169 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_resume_volatile (exit status: 1)
FAIL: test_save_load_encrypted_state
====================================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65416
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 880314 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_save_load_encrypted_state (exit status: 1)
FAIL: test_save_load_state
==========================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65418
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 880403 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_save_load_state (exit status: 1)
FAIL: test_setbuffersize
========================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65432
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 880538 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_setbuffersize (exit status: 1)
FAIL: test_volatilestate
========================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65420
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 880672 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_volatilestate (exit status: 1)
FAIL: test_swtpm_bios
=====================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65424
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 880798 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_swtpm_bios (exit status: 1)
FAIL: test_tpm_probe
====================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65526
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 880911 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm_probe (exit status: 1)
SKIP: test_tpm12
================
SKIP test_tpm12 (exit status: 77)
FAIL: test_wrongorder
=====================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65422
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 881035 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_wrongorder (exit status: 1)
FAIL: test_tpm2_derived_keys
============================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65444
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 881235 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_derived_keys (exit status: 1)
FAIL: test_tpm2_encrypted_state
===============================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65534
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 881369 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_encrypted_state (exit status: 1)
FAIL: test_tpm2_init
====================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65508
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 881467 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_init (exit status: 1)
FAIL: test_tpm2_getcap
======================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65506
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 881552 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_getcap (exit status: 1)
FAIL: test_tpm2_locality
========================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65510
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 881634 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_locality (exit status: 1)
FAIL: test_tpm2_hashing
=======================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65514
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 881716 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_hashing (exit status: 1)
FAIL: test_tpm2_hashing2
========================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65516
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 881799 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_hashing2 (exit status: 1)
FAIL: test_tpm2_hashing3
========================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65518
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 881881 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_hashing3 (exit status: 1)
FAIL: test_tpm2_migration_key
=============================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65500
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 882004 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_migration_key (exit status: 1)
SKIP: test_tpm2_partial_reads
=============================
Need to be root to run test with CUSE interface.
SKIP test_tpm2_partial_reads (exit status: 77)
FAIL: test_tpm2_resume_volatile
===============================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65502
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 882167 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_resume_volatile (exit status: 1)
FAIL: test_tpm2_savestate
=========================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65524
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 882256 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_savestate (exit status: 1)
FAIL: test_tpm2_save_load_encrypted_state
=========================================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65528
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 882347 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_save_load_encrypted_state (exit status: 1)
SKIP: test_tpm2_save_load_state_2
=================================
SWTPM_TEST_IBMTSS2 must be set to run this test.
SKIP test_tpm2_save_load_state_2 (exit status: 77)
SKIP: test_tpm2_save_load_state_3
=================================
SWTPM_TEST_IBMTSS2 must be set to run this test.
SKIP test_tpm2_save_load_state_3 (exit status: 77)
FAIL: test_tpm2_save_load_state_da_timeout
==========================================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65438
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 882451 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_save_load_state_da_timeout (exit status: 1)
FAIL: test_tpm2_setbuffersize
=============================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65448
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 882534 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_setbuffersize (exit status: 1)
FAIL: test_tpm2_volatilestate
=============================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65504
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 882627 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_volatilestate (exit status: 1)
FAIL: test_tpm2_wrongorder
==========================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65512
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 882709 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_wrongorder (exit status: 1)
FAIL: test_tpm2_probe
=====================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65522
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 882793 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_probe (exit status: 1)
FAIL: test_tpm2_swtpm_bios
==========================
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65520
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 882875 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_swtpm_bios (exit status: 1)
SKIP: test_tpm2_ibmtss2
=======================
SKIP test_tpm2_ibmtss2 (exit status: 77)
SKIP: test_samples_create_tpmca
===============================
Need to be root to run this test.
SKIP test_samples_create_tpmca (exit status: 77)
SKIP: test_tpm2_samples_create_tpmca
====================================
Need to be root to run this test.
SKIP test_tpm2_samples_create_tpmca (exit status: 77)
============================================================================
Testsuite summary for swtpm 0.6.0
============================================================================
# TOTAL: 59
# PASS: 13
# SKIP: 9
# XFAIL: 0
# FAIL: 37
# XPASS: 0
# ERROR: 0
============================================================================
See tests/test-suite.log
============================================================================And looks like test suite uses system patch owned by root
[tkloczko@barrel tests]$ cat test_tpm2_samples_swtpm_localca_pkcs11.log
WARNING:fapi:src/tss2-fapi/ifapi_io.c:333:ifapi_io_check_create_dir() Directory /var/lib/tpm2-tss/system/keystore/policy does not exist, creating
ERROR:fapi:src/tss2-fapi/ifapi_helpers.c:966:create_dirs() mkdir not possible: -1 /var/lib/tpm2-tss/system/keystore/policy
ERROR:fapi:src/tss2-fapi/ifapi_helpers.c:993:ifapi_create_dirs() ErrorCode (0x0006000b) Create directories for /var/lib/tpm2-tss/system/keystore/policy
ERROR:fapi:src/tss2-fapi/ifapi_io.c:336:ifapi_io_check_create_dir() ErrorCode (0x0006000b) Directory /var/lib/tpm2-tss/system/keystore/policy can't be created.
ERROR:fapi:src/tss2-fapi/ifapi_policy_store.c:114:ifapi_policy_store_initialize() ErrorCode (0x0006000b) Policy directory /var/lib/tpm2-tss/system/keystore/policy can't be created.
ERROR:fapi:src/tss2-fapi/api/Fapi_Initialize.c:212:Fapi_Initialize_Finish() ErrorCode (0x0006000b) Keystore could not be initialized.
** (process:885402): CRITICAL **: 17:44:17.777: failed to allocate dbus proxy object: Error calling StartServiceByName for com.intel.tss2.Tabrmd: Timeout was reached
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-tabrmd.so.0
ERROR:tcti:src/tss2-tcti/tcti-device.c:442:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpmrm0: No such file or directory
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-device.so.0
ERROR:tcti:src/tss2-tcti/tcti-device.c:442:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpm0: No such file or directory
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-device.so.0
WARNING:tcti:src/util/io.c:252:socket_connect() Failed to connect to host 127.0.0.1, port 2321: errno 111: Connection refused
ERROR:tcti:src/tss2-tcti/tcti-swtpm.c:591:Tss2_Tcti_Swtpm_Init() Cannot connect to swtpm TPM socket
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-swtpm.so.0
WARNING:tcti:src/util/io.c:252:socket_connect() Failed to connect to host 127.0.0.1, port 2321: errno 111: Connection refused
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-mssim.so.0
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:254:tctildr_get_default() No standard TCTI could be loaded
ERROR:tcti:src/tss2-tcti/tctildr.c:428:Tss2_TctiLdr_Initialize_Ex() Failed to instantiate TCTI
ERROR: Could not initialize tpm ctx: 0x5
Found 'Digital signature'
Note that no verification profile was selected. In the future the medium profile will be enabled by default.
Use --verify-profile low to apply the default verification of NORMAL priority string.
Loaded CAs (1 available)
Subject: CN=test
Issuer: CN=swtpm-localca
Checked against: CN=swtpm-localca
Signature algorithm: RSA-SHA256
Output: Verified. The certificate is trusted.
Chain verification output: Verified. The certificate is trusted.
Found 'Digital signature'
Found 'Key encipherment'
Note that no verification profile was selected. In the future the medium profile will be enabled by default.
Use --verify-profile low to apply the default verification of NORMAL priority string.
Loaded CAs (1 available)
Subject: CN=test
Issuer: CN=swtpm-localca
Checked against: CN=swtpm-localca
Signature algorithm: RSA-SHA256
Output: Verified. The certificate is trusted.
Chain verification output: Verified. The certificate is trusted.
Found 'Key encipherment'
Note that no verification profile was selected. In the future the medium profile will be enabled by default.
Use --verify-profile low to apply the default verification of NORMAL priority string.
Loaded CAs (1 available)
Subject: CN=test
Issuer: CN=swtpm-localca
Checked against: CN=swtpm-localca
Signature algorithm: RSA-SHA256
Output: Verified. The certificate is trusted.
Chain verification output: Verified. The certificate is trusted.
Found 'Key encipherment'
Note that no verification profile was selected. In the future the medium profile will be enabled by default.
Use --verify-profile low to apply the default verification of NORMAL priority string.
Loaded CAs (1 available)
Subject: CN=test
Issuer: CN=swtpm-localca
Checked against: CN=swtpm-localca
Signature algorithm: RSA-SHA256
Output: Verified. The certificate is trusted.
Chain verification output: Verified. The certificate is trusted.
PASS test_tpm2_samples_swtpm_localca_pkcs11 (exit status: 0)And yet another issue. Despite fact that source tree ghas been configured --without-cuse looks like some cuse test units are executed:
[tkloczko@barrel tests]$ cat test_tpm2_save_load_state_da_timeout.log
Need to be root to run test with CUSE interface.
Need to be root to run test with CUSE interface.
==== Starting swtpm with interfaces socket+socket ====
Server did not open port 65438
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 892079 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
FAIL test_tpm2_save_load_state_da_timeout (exit status: 1)I cannot recreate the problem the way you described it. What are your exact steps. What type of host are you running this on?
When building an RPM on Fedora 33 I do the following:
./autogen.sh
make dist
mkdir -p ~/rpmbuild/SOURCES
cp swtpm-0.7.0.tar.gz ~/rpmbuild/SOURCES/
rpm-ba swtpm.specIt ends with the expected result:
Wrote: /home/stefanb/rpmbuild/SRPMS/swtpm-0.7.0-1.fc33.src.rpm
Wrote: /home/stefanb/rpmbuild/RPMS/x86_64/swtpm-devel-0.7.0-1.fc33.x86_64.rpm
Wrote: /home/stefanb/rpmbuild/RPMS/x86_64/swtpm-tools-pkcs11-0.7.0-1.fc33.x86_64.rpm
Wrote: /home/stefanb/rpmbuild/RPMS/x86_64/swtpm-libs-0.7.0-1.fc33.x86_64.rpm
Wrote: /home/stefanb/rpmbuild/RPMS/x86_64/swtpm-debuginfo-0.7.0-1.fc33.x86_64.rpm
Wrote: /home/stefanb/rpmbuild/RPMS/x86_64/swtpm-tools-0.7.0-1.fc33.x86_64.rpm
Wrote: /home/stefanb/rpmbuild/RPMS/x86_64/swtpm-0.7.0-1.fc33.x86_64.rpm
Wrote: /home/stefanb/rpmbuild/RPMS/x86_64/swtpm-libs-debuginfo-0.7.0-1.fc33.x86_64.rpm
Wrote: /home/stefanb/rpmbuild/RPMS/x86_64/swtpm-tools-debuginfo-0.7.0-1.fc33.x86_64.rpm
Wrote: /home/stefanb/rpmbuild/RPMS/x86_64/swtpm-debugsource-0.7.0-1.fc33.x86_64.rpm
Executing(%clean): /bin/sh -e /var/tmp/rpm-tmp.aTu8My
+ umask 022
+ cd /home/stefanb/rpmbuild/BUILD
+ cd swtpm-0.7.0
+ /usr/bin/rm -rf /home/stefanb/rpmbuild/BUILDROOT/swtpm-0.7.0-1.fc33.x86_64
+ RPM_EC=0
++ jobs -p
+ exit 0Here's what the rpmbuild above configures to:
with_gnutls : yes (no = swtpm_cert will NOT be built)
with_selinux : yes (no = SELinux policy extensions will NOT be built)
with_cuse : no (no = no CUSE interface)
with_chardev : yes (no = no chardev interface)
with_vtpm_proxy : yes (no = no vtpm proxy support; Linux only)
with_seccomp : yes (no = no seccomp profile; Linux only)
Version to build : 0.7.0
Crypto library : opensslAll because Fedora swtpm.spec has not at all %check and I'm not using Fedora.
kloczek
commented
3 years ago Here what shows me configure at the end:
with_gnutls : yes (no = swtpm_cert will NOT be built)
with_selinux : yes (no = SELinux policy extensions will NOT be built)
with_cuse : no (no = no CUSE interface)
with_chardev : yes (no = no chardev interface)
with_vtpm_proxy : yes (no = no vtpm proxy support; Linux only)
with_seccomp : yes (no = no seccomp profile; Linux only)
Version to build : 0.6.0
Crypto library : openssl
AM_CFLAGS = -O2 -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fdata-sections -ffunction-sections -Wreturn-type -Wsign-compare -Wswitch-enum -Wmissing-prototypes -Wall -Werror -Wformat -Wformat-security
HARDENING_CFLAGS = -fstack-protector-strong -Wstack-protector
HARDENING_LDFLAGS = -Wl,-z,relro -Wl,-z,now
AM_LDFLAGS = -Wl,-z,relro -Wl,--as-needed -Wl,--gc-sections -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -ltpms
LIBSECCOMP_LIBS = -lseccomp
JSON_GLIB_CFLAGS = -I/usr/include/json-glib-1.0 -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include
JSON_GLIB_LIBS = -ljson-glib-1.0 -lgio-2.0 -lgobject-2.0 -lglib-2.0
GLIB_CFLAGS = -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include
GLIB_LIBS = -lglib-2.0
TSS_USER=tss
TSS_GROUP=tssIt has this check here in swtpm.spec:
%check
make %{?_smp_mflags} check VERBOSE=1I am not sure what you are referring to. It does lots of checks while building the RPM:
+ make -j16 check
Making check in etc
[...]
make check-TESTS
make[2]: Entering directory '/home/stefanb/rpmbuild/BUILD/swtpm-0.7.0/tests'
make[3]: Entering directory '/home/stefanb/rpmbuild/BUILD/swtpm-0.7.0/tests'
SKIP: test_tpm2_vtpm_proxy
SKIP: test_vtpm_proxy
PASS: test_ctrlchannel3
PASS: test_tpm2_ctrlchannel2
PASS: test_ctrlchannel4
PASS: test_hashing
PASS: test_locality
PASS: test_getcap
SKIP: test_tpm12
PASS: test_setbuffersize
PASS: test_print_capabilities
PASS: test_ctrlchannel2
PASS: test_commandline
PASS: test_ctrlchannel
PASS: test_tpm_probe
PASS: test_tpm2_getcap
PASS: test_wrongorder
PASS: test_tpm2_encrypted_state
PASS: test_tpm2_locality
PASS: test_hashing2
SKIP: test_tpm2_partial_reads
PASS: test_encrypted_state
PASS: test_tpm2_print_capabilities
PASS: test_tpm2_hashing
PASS: test_save_load_state
SKIP: test_tpm2_save_load_state_2
SKIP: test_tpm2_save_load_state_3
PASS: test_tpm2_hashing3
PASS: test_resume_volatile
PASS: test_migration_key
PASS: test_tpm2_savestate
PASS: test_tpm2_setbuffersize
PASS: test_tpm2_wrongorder
SKIP: test_tpm2_ibmtss2
SKIP: test_samples_create_tpmca
PASS: test_swtpm_cert
PASS: test_volatilestate
PASS: test_tpm2_probe
PASS: test_tpm2_volatilestate
PASS: test_tpm2_resume_volatile
PASS: test_tpm2_swtpm_cert
PASS: test_tpm2_derived_keys
PASS: test_swtpm_bios
SKIP: test_tpm2_samples_create_tpmca
PASS: test_tpm2_migration_key
PASS: test_tpm2_swtpm_cert_ecc
PASS: test_tpm2_hashing2
PASS: test_save_load_encrypted_state
PASS: test_swtpm_setup_create_cert
PASS: test_tpm2_init
PASS: test_tpm2_swtpm_setup_create_cert
PASS: test_tpm2_samples_swtpm_localca_pkcs11
PASS: test_init
PASS: test_parameters
PASS: test_tpm2_parameters
PASS: test_tpm2_samples_swtpm_localca
PASS: test_tpm2_swtpm_bios
PASS: test_tpm2_save_load_encrypted_state
PASS: test_tpm2_save_load_state_da_timeout
============================================================================
Testsuite summary for swtpm 0.7.0
============================================================================
# TOTAL: 59
# PASS: 50
# SKIP: 9
# XFAIL: 0
# FAIL: 0
# XPASS: 0
# ERROR: 0
============================================================================
make[3]: Leaving directory '/home/stefanb/rpmbuild/BUILD/swtpm-0.7.0/tests'
make[2]: Leaving directory '/home/stefanb/rpmbuild/BUILD/swtpm-0.7.0/tests'
make[1]: Leaving directory '/home/stefanb/rpmbuild/BUILD/swtpm-0.7.0/tests'
make[1]: Entering directory '/home/stefanb/rpmbuild/BUILD/swtpm-0.7.0'
make[1]: Leaving directory '/home/stefanb/rpmbuild/BUILD/swtpm-0.7.0'
+ RPM_EC=0
++ jobs -p
+ exit 0
Processing files: swtpm-0.7.0-1.fc33.x86_64It has this check here in swtpm.spec:
Yep .. you are right (my mistake).
kloczek
commented
3 years ago I think that crucial part is relatesd to:
Using /dev/tpm0.
./test_tpm2_vtpm_proxy: line 73: /dev/tpm0: Device or resource busy
Error: Could not open /dev/tpm0Which one kernel module needs to be loaded to have tpm support?
[tkloczko@barrel SPECS]$ lsmod | grep tpm
tpm_vtpm_proxy 20480 0FYI just added PR https://github.com/stefanberger/swtpm/pull/457 with autoconf and automake cleanups.
stefanberger
commented
3 years ago Does that PR resolve 'your' rpm building issues?
kloczek
commented
3 years ago No it doesn't :/ Simple on preparing my own package starting from what Fedora packager done I found many ac/am warnings and that PR just cleans all those warnings. Only this and nothing more. All those changes should be 100% compliant with older ac/al versions but with those changes all will be nice and clean when you will switch to autoconf 2.71+ :)
Sorry I should not mention that here (my bad)
Samega7Cattac
commented
3 years ago I'm having a similar issue with a lof of tests failing saying it requires sudo But I'm on Pop_OS 21.04 Tried both latest release and from master
stefanberger
commented
3 years ago The CUSE TPM related tests and some other tests will require root but should be skipped if you are not running the tests as root. Can you configure swtpm (or did you do that already) like this ./configure ... --without-cuse and then make clean && make and then run the tests? The initial report did not indicate what distro was used, so it's a bit tricky to find out what's going on because this is working across several distros, such as Alpine, CentOS, RHEL, Fedora, Ubuntu, Debian, OpenSuSE, 3 different BSDs, and Cygwin. Also see here. So I am not sure what is different on your distro that the tests that passed on many other distros wouldn't pass for you.
stefanberger
commented
3 years ago @Samega7Cattac I installed Pop_OS 21.04 in a VM now and got all the tests to work. I cannot reproduce the test problems you may be seeing.
mephmanx
commented
3 years ago I am also seeing failing test problems, the tpm and tpm2 bios tests fail. Here is what I have included in my system script:
cd /root dnf -y update \ && dnf -y install diffutils make file automake autoconf libtool gcc gcc-c++ openssl-devel gawk git \ && git clone ${LIBTPMS} \ && dnf -y install which python3 python3-cryptography python3-pip python3-setuptools expect libtasn1-devel \ socat trousers tpm-tools gnutls-devel gnutls-utils net-tools libseccomp-devel json-glib-devel \ && pip3 install twisted \ && git clone ${SWTPM}
LIBTPMS_BRANCH=master
cd libtpms \ && runuser -l root -c 'echo ${date} > /.date' \ && git pull \ && git checkout ${LIBTPMS_BRANCH} \ && runuser -l root -c 'cd libtpms; ./autogen.sh --prefix=/usr --libdir=/usr/lib64 --with-openssl --with-tpm2;' \ && make -j$(nproc) V=1 \ && make -j$(nproc) V=1 check \ && make install
SWTPM_BRANCH=master cd ../swtpm \ && git pull \ && git checkout ${SWTPM_BRANCH} \ && runuser -l root -c 'cd /root/swtpm; ./autogen.sh --prefix=/usr --libdir=/usr/lib/x86_64-linux-gnu --with-openssl;' \ && make -j$(nproc) V=1 \ && make -j$(nproc) V=1 VERBOSE=1 check \ && make -j$(nproc) install
runuser -l root -c 'cd /usr/share/swtpm; ./swtpm-create-user-config-files --overwrite --root;' runuser -l root -c 'chown tss:tss /root/.config/*' #####################
I dont have a log at the moment as I cleared an rebuilt the system but will try again soon and post the failures.
stefanberger
commented
3 years ago Please tell me what distro you are using @mephmanx @kloczek . There are tests running across different platforms (Fedora, CentOS, Ubuntu, OpenSUSE, Debian,Alpine) here and on top of it it is working for me on PopOS 21.04 (which is like Ubuntu), Cygwin and 3 BSDs. We also got it working on Gentoo. So I need little bit more information than just an error message.
mephmanx
commented
3 years ago I am running centos 8.3.2011
From: Stefan Berger @.> Date: Tuesday, July 27, 2021 at 4:20 PM To: stefanberger/swtpm @.> Cc: Chris Lyons @.>, Mention @.> Subject: Re: [stefanberger/swtpm] 0.6.0: test suite is failing (#454)
Please tell me what distro you are using @mephmanxhttps://github.com/mephmanx @kloczekhttps://github.com/kloczek . There are tests running across different platforms (Fedora, CentOS, Ubuntu, OpenSUSE, Debian,Alpine) (here)[https://travis-ci.com/github/stefanberger/swtpm-distro-compile] and on top of it it is working for me on PopOS 21.04 (which is like Ubuntu), Cygwin and 3 BSDs. We also got it working on Gentoo. So I need little bit more information than just an error message.
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/stefanberger/swtpm/issues/454#issuecomment-887807620, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMNAQ2UNNI7BVQZRG5ON6UDTZ4IHRANCNFSM46MYJJ3A.
This email has been scanned by Inbound Shield™.
stefanberger
commented
3 years ago && runuser -l root -c 'cd /root/swtpm; ./autogen.sh --prefix=/usr --libdir=/usr/lib/x86_64-linux-gnu --with-openssl;'
Ah, that's from my swtpm-distro-compile script: https://github.com/stefanberger/swtpm-distro-compile/blob/master/Dockerfile.centos-8#L26 . You should be able to omit the --libdir entirely. I will have to fix this in the script.
mephmanx
commented
3 years ago Remove it from both?
&& runuser -l root -c 'cd libtpms; ./autogen.sh --prefix=/usr --libdir=/usr/lib64 --with-openssl --with-tpm2;' \
And
&& runuser -l root -c 'cd /root/swtpm; ./autogen.sh --prefix=/usr --libdir=/usr/lib/x86_64-linux-gnu --with-openssl;' \
?
Thank you for the quick reply BTW! Very much appreciated.
From: Stefan Berger @.> Date: Tuesday, July 27, 2021 at 4:29 PM To: stefanberger/swtpm @.> Cc: Chris Lyons @.>, Mention @.> Subject: Re: [stefanberger/swtpm] 0.6.0: test suite is failing (#454)
&& runuser -l root -c 'cd /root/swtpm; ./autogen.sh --prefix=/usr --libdir=/usr/lib/x86_64-linux-gnu --with-openssl;'
Ah, that's from my swtpm-distro-compile script: https://github.com/stefanberger/swtpm-distro-compile/blob/master/Dockerfile.centos-8#L26 . You should be able to omit the --libdir entirely. I will have to fix this in the script.
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/stefanberger/swtpm/issues/454#issuecomment-887813089, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMNAQ2XNMSE4GMYHSEJH4ODTZ4JJBANCNFSM46MYJJ3A.
This email has been scanned by Inbound Shield™.
stefanberger
commented
3 years ago Yes, you should be able to remove it from both. And you may want to find through your previous install directories to make sure things are gone or you may have to remove them manually.
mephmanx
commented
3 years ago Removing those lines didn’t fix it…
From: Stefan Berger @.> Date: Tuesday, July 27, 2021 at 4:33 PM To: stefanberger/swtpm @.> Cc: Chris Lyons @.>, Mention @.> Subject: Re: [stefanberger/swtpm] 0.6.0: test suite is failing (#454)
Yes, you should be able to remove it from both. And you may want to find through your previous install directories to make sure things are gone or you may have to remove them manually.
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/stefanberger/swtpm/issues/454#issuecomment-887815420, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMNAQ2ROHSP66FR73SDXYK3TZ4JYZANCNFSM46MYJJ3A.
This email has been scanned by Inbound Shield™.
mephmanx
commented
3 years ago Still get these errors…
From: Stefan Berger @.> Date: Tuesday, July 27, 2021 at 4:33 PM To: stefanberger/swtpm @.> Cc: Chris Lyons @.>, Mention @.> Subject: Re: [stefanberger/swtpm] 0.6.0: test suite is failing (#454)
Yes, you should be able to remove it from both. And you may want to find through your previous install directories to make sure things are gone or you may have to remove them manually.
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/stefanberger/swtpm/issues/454#issuecomment-887815420, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMNAQ2ROHSP66FR73SDXYK3TZ4JYZANCNFSM46MYJJ3A.
This email has been scanned by Inbound Shield™.
stefanberger
commented
3 years ago Can you post the contents of the logs files tests/test_tpm2_swtpm_bios.log and tests/test_swtpm_bios.log?
mephmanx
commented
3 years ago Ill send it in a bit…. In the process of rebuilding environment
From: Stefan Berger @.> Date: Tuesday, July 27, 2021 at 6:18 PM To: stefanberger/swtpm @.> Cc: Chris Lyons @.>, Mention @.> Subject: Re: [stefanberger/swtpm] 0.6.0: test suite is failing (#454)
Can you post the contents of the logs files tests/test_tpm2_swtpm_bios.log and tests/test_swtpm_bios.log?
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/stefanberger/swtpm/issues/454#issuecomment-887871727, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMNAQ2TTEQYB66C4NOFOLBTTZ4WDLANCNFSM46MYJJ3A.
This email has been scanned by Inbound Shield™.
mephmanx
commented
3 years ago Here is the run log…. Ill see if I have those files and can send those over also
From: Stefan Berger @.> Date: Tuesday, July 27, 2021 at 6:18 PM To: stefanberger/swtpm @.> Cc: Chris Lyons @.>, Mention @.> Subject: Re: [stefanberger/swtpm] 0.6.0: test suite is failing (#454)
Can you post the contents of the logs files tests/test_tpm2_swtpm_bios.log and tests/test_swtpm_bios.log?
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/stefanberger/swtpm/issues/454#issuecomment-887871727, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMNAQ2TTEQYB66C4NOFOLBTTZ4WDLANCNFSM46MYJJ3A.
This email has been scanned by Inbound Shield™.
stefanberger
commented
3 years ago Here is the run log….
Where is 'here'? I don't think you posted them as some sort of attachment, did you?
Reply to this email directly, view it on GitHub<#454 (comment)>, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMNAQ2TTEQYB66C4NOFOLBTTZ4WDLANCNFSM46MYJJ3A.
I think you don't need to post your whole notification email otherwise someone will possibly try to unsubscribe you..
mephmanx
commented
3 years ago Sorry, replied through email. openstack-install.log
stefanberger
commented
3 years ago I see these error messages here with odd looking PID files.
FAIL: test_swtpm_bios
=====================
Skipping test: swtpm was not compiled with CUSE interface
Skipping test: swtpm was not compiled with CUSE interface
==== Starting swtpm with interfaces socket+socket ====
swtpm: Could not open pidfile /tmp/tmp.aJV0nO0kxQ/https://github.com/stefanberger/swtpm.git.pid : No such file or directoryFAIL: test_tpm2_swtpm_bios
==========================
Skipping test: swtpm was not compiled with CUSE interface
Skipping test: swtpm was not compiled with CUSE interface
==== Starting swtpm with interfaces socket+socket ====
swtpm: Could not open pidfile /tmp/tmp.op37LarcFC/https://github.com/stefanberger/swtpm.git.pid : No such file or directoryThe code is this here:
TPM_PATH=$(mktemp -d)
STATE_FILE=$TPM_PATH/tpm-00.permall
VOLATILE_STATE_FILE=$TPM_PATH/tpm-00.volatilestate
PID_FILE=$TPM_PATH/${SWTPM}.pidAh, that could come from ${SWTPM}. Do you have the SWTPM environment variable set in your code somewhere? If so, please unset it. I will need to fix this one, though.
mephmanx
commented
3 years ago I don’t have it set anywhere…. This is the only bit of code I am using:
function vtpm() {
cd /root dnf -y update \ && dnf -y install diffutils make file automake autoconf libtool gcc gcc-c++ openssl-devel gawk git \ && git clone ${LIBTPMS} \ && dnf -y install which python3 python3-cryptography python3-pip python3-setuptools expect libtasn1-devel \ socat trousers tpm-tools gnutls-devel gnutls-utils net-tools libseccomp-devel json-glib-devel \ && pip3 install twisted \ && git clone ${SWTPM}
LIBTPMS_BRANCH=master
cd libtpms \ && runuser -l root -c 'echo ${date} > /.date' \ && git pull \ && git checkout ${LIBTPMS_BRANCH} \ && runuser -l root -c 'cd libtpms; ./autogen.sh --prefix=/usr --with-openssl --with-tpm2;' \ && make -j$(nproc) V=1 \ && make -j$(nproc) V=1 check \ && make install
SWTPM_BRANCH=master cd ../swtpm \ && git pull \ && git checkout ${SWTPM_BRANCH} \ && runuser -l root -c 'cd /root/swtpm; ./autogen.sh --prefix=/usr --with-openssl;' \ && make -j$(nproc) V=1 \ && make -j$(nproc) V=1 VERBOSE=1 check \ && make -j$(nproc) install
runuser -l root -c 'cd /usr/share/swtpm; ./swtpm-create-user-config-files --overwrite --root;' runuser -l root -c 'chown tss:tss /root/.config/*' ##################### }
From: Stefan Berger @.> Date: Wednesday, July 28, 2021 at 8:20 AM To: stefanberger/swtpm @.> Cc: Chris Lyons @.>, Mention @.> Subject: Re: [stefanberger/swtpm] 0.6.0: test suite is failing (#454)
I see these error messages here with odd looking PID files.
FAIL: test_swtpm_bios
=====================
Skipping test: swtpm was not compiled with CUSE interface
Skipping test: swtpm was not compiled with CUSE interface
==== Starting swtpm with interfaces socket+socket ====
swtpm: Could not open pidfile /tmp/tmp.aJV0nO0kxQ/https://github.com/stefanberger/swtpm.git.pid : No such file or directory
FAIL: test_tpm2_swtpm_bios
==========================
Skipping test: swtpm was not compiled with CUSE interface
Skipping test: swtpm was not compiled with CUSE interface
==== Starting swtpm with interfaces socket+socket ====
swtpm: Could not open pidfile /tmp/tmp.op37LarcFC/https://github.com/stefanberger/swtpm.git.pid : No such file or directory
The code is this here:
TPM_PATH=$(mktemp -d)
STATE_FILE=$TPM_PATH/tpm-00.permall
VOLATILE_STATE_FILE=$TPM_PATH/tpm-00.volatilestate
PID_FILE=$TPM_PATH/${SWTPM}.pid
Ah, that could come from ${SWTPM}. Do you have the SWTPM environment variable set in your code somewhere? If so, please unset it. I will need to fix this one, though.
—
This email has been scanned by Inbound Shield™.
mephmanx
commented
3 years ago Wait, it looks like it might be in my code as it looks like I used it for the git url. Ill fix. Thanks.
From: Stefan Berger @.> Date: Wednesday, July 28, 2021 at 8:20 AM To: stefanberger/swtpm @.> Cc: Chris Lyons @.>, Mention @.> Subject: Re: [stefanberger/swtpm] 0.6.0: test suite is failing (#454)
I see these error messages here with odd looking PID files.
FAIL: test_swtpm_bios
=====================
Skipping test: swtpm was not compiled with CUSE interface
Skipping test: swtpm was not compiled with CUSE interface
==== Starting swtpm with interfaces socket+socket ====
swtpm: Could not open pidfile /tmp/tmp.aJV0nO0kxQ/https://github.com/stefanberger/swtpm.git.pid : No such file or directory
FAIL: test_tpm2_swtpm_bios
==========================
Skipping test: swtpm was not compiled with CUSE interface
Skipping test: swtpm was not compiled with CUSE interface
==== Starting swtpm with interfaces socket+socket ====
swtpm: Could not open pidfile /tmp/tmp.op37LarcFC/https://github.com/stefanberger/swtpm.git.pid : No such file or directory
The code is this here:
TPM_PATH=$(mktemp -d)
STATE_FILE=$TPM_PATH/tpm-00.permall
VOLATILE_STATE_FILE=$TPM_PATH/tpm-00.volatilestate
PID_FILE=$TPM_PATH/${SWTPM}.pid
Ah, that could come from ${SWTPM}. Do you have the SWTPM environment variable set in your code somewhere? If so, please unset it. I will need to fix this one, though.
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/stefanberger/swtpm/issues/454#issuecomment-888263627, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMNAQ2WBUM44MYVFHC5VPALTZ7YYFANCNFSM46MYJJ3A.
This email has been scanned by Inbound Shield™.
stefanberger
commented
3 years ago @mephmanx Is it fixed now? I have PR #507 that I will also apply to stable-0.6 branch that should fix the issue entirely.
mephmanx
commented
3 years ago Yes, its fixed now. Thanks.
From: Stefan Berger @.> Date: Wednesday, July 28, 2021 at 9:45 AM To: stefanberger/swtpm @.> Cc: Chris Lyons @.>, Mention @.> Subject: Re: [stefanberger/swtpm] 0.6.0: test suite is failing (#454)
@mephmanxhttps://github.com/mephmanx Is it fixed now? I have PR #507https://github.com/stefanberger/swtpm/pull/507 that I will also apply to stable-0.6 branch that should fix the issue entirely.
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/stefanberger/swtpm/issues/454#issuecomment-888321822, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMNAQ2TNCI6WSMHQQTZE7M3T2ACYVANCNFSM46MYJJ3A.
This email has been scanned by Inbound Shield™.
stefanberger
commented
3 years ago Test 1 passed ./test_commandline: line 132: /dev/tcp/localhost/11234: No such file or directory
@kloczek A possible issue on your system may be that the bash doesn't support the virtual device that allows it to connect to TCP server sockets. There's an exhaustive list of distros (Alpine, Debian, Fedora, CentOS, RHEL, SuSE, GenToo) and other runtimes (Cygwin, FreeBSD, OpenBSD, DragonflyBSD) that do support this in bash. So, what distro are you trying to compile this on? If that's the issue I would file a bug with the distro. I do not intend to change this since it's working across so many environments.
kloczek
commented
3 years ago So, what distro are you trying to compile this on? If that's the issue I would file a bug with the distro. I do not intend to change this since it's working across so many environments.
I'm using my own distribution.
[tkloczko@barrel SPECS]$ bash --version
GNU bash, version 5.1.8(1)-release (x86_64-redhat-linux-gnu)
Copyright (C) 2020 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software; you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.Then I guess I cannot help you debugging this.
kloczek
commented
3 years ago Just cheked how I'm building bash.
%configure \
--disable-rpath \
--disable-help-builtin \
--disable-net-redirections \
--disable-separate-helpfiles \
--enable-alias \
--enable-dparen-arithmetic \
--enable-extended-glob \
--enable-job-control \
--enable-largefile \
--enable-readline \
--enable-restricted \
--with-afs \
--with-curses \
--with-installed-readline \
--without-bash-malloc \
--without-included-gettext \
%{nil}so indeed I have disabled net redirections IIRC to have as much close POSIX sh compatibility as it is possible. .. and nothing more. I can change that but issue may probably pop up if in test suite bash is not explicit executed .. because I'm planning transition to use pure POSIX sh as /bin/sh (I've already managed to removed all bashisms in ~all other packages).
stefanberger
commented
3 years ago bash is use in every test script. 2 exceptions are python programs.
$ grep -E "#!" * | grep -v bash
grep: data: Is a directory
grep: patches: Is a directory
test_clientfds.py:#!/usr/bin/env python3
test_setdatafd.py:#!/usr/bin/env python3Yeah I see that
[tkloczko@barrel swtpm-0.6.0]$ grep -rh bash | sort | uniq
- bash
- bash
bash -c "kill $sig $pid &>/dev/null"
bash -c "TCSD_USE_TCP_DEVICE=1 TCSD_TCP_DEVICE_PORT=${SWTPM_SERVER_PORT} tcsd -c "${TCSD_CONF}" -e -f &>/dev/null & echo \$! > "${TCSD_PIDFILE}"; wait" &
bash -c "tpm2-abrmd --tcti=mssim:host=127.0.0.1,port=${SWTPM_SERVER_PORT} --allow-root & echo \$! > "${TPM2_ABRMD_PIDFILE}"; wait" &
bash _test_encrypted_state
bash _test_getcap
bash _test_hashing
bash _test_hashing2
bash _test_init
bash _test_locality
bash _test_migration_key
bash test_migration_key
bash _test_print_capabilities
bash _test_resume_volatile
bash _test_save_load_encrypted_state
bash _test_save_load_state
bash _test_setbuffersize
bash _test_swtpm_bios
bash _test_tpm2_derived_keys
bash _test_tpm2_encrypted_state
bash _test_tpm2_getcap
bash _test_tpm2_hashing
bash _test_tpm2_hashing2
bash _test_tpm2_hashing3
bash _test_tpm2_init
bash _test_tpm2_locality
bash _test_tpm2_migration_key
bash _test_tpm2_print_capabilities
bash _test_tpm2_probe
bash _test_tpm2_resume_volatile
bash _test_tpm2_save_load_encrypted_state
bash _test_tpm2_save_load_state
bash _test_tpm2_save_load_state_da_timeout
bash _test_tpm2_savestate
bash _test_tpm2_setbuffersize
bash _test_tpm2_swtpm_bios
bash _test_tpm2_volatilestate
bash _test_tpm2_wrongorder
bash _test_tpm_probe
bash _test_volatilestate
bash _test_wrongorder
#!/bin/bash
#!/bin/bash
echo "Could not find NON-bash builtin echo tool."
Requires: trousers >= 0.3.9 bash gnutls-utils
set the environment variable XDG_CONFIG_HOME as follows (using bash for
sudo bash -c "echo "load=${SONAME}" > /etc/gnutls/pkcs11.conf"
sudo bash -c "SWTPM_TEST_EXPENSIVE=1 SWTPM_TEST_STORE_VOLATILE=1 SWTPM_TEST_IBMTSS2=1 make check"
#!/usr/bin/env bash[tkloczko@barrel swtpm-0.6.0]$ grep -rh /bin/sh | sort | uniq
#!/bin/shOK I think that I can close that ticket.
Thank you for your help :)
kloczek
commented
3 years ago I think that it would be good maybe to document somewhere that test suite needs bash with net redirections enabled .. but that is still something minor :)
kloczek
commented
3 years ago Just started build with corrected bash and still one unit is failing and I have no idea what it could be :/
FAIL: test_tpm2_samples_create_tpmca
====================================
==== Starting swtpm with interfaces socket+socket ====
** (process:1882131): WARNING **: 21:56:25.502: tcti_conf before: "(null)"
** (tpm2-abrmd:1882131): WARNING **: 21:56:25.502: tcti_conf after: "mssim:host=127.0.0.1,port=65455"
** (tpm2-abrmd:1882131): CRITICAL **: 21:56:25.505: Failed to acquire DBus name com.intel.tss2.Tabrmd. UID 0 must be allowed to "own" this name. Check DBus config and check that this is running as user tss or root.
Error: tpm2-abrmd with pid 1882131 must have terminated
/home/tkloczko/rpmbuild/BUILD/swtpm-0.6.0/tests/common: line 23: 1881512 Killed ${SWTPM_EXE} socket "$@" ${SWTPM_TEST_SECCOMP_OPT} --server type=tcp,port=${SWTPM_SERVER_PORT}${swtpm_server_disconnect} --ctrl type=tcp,port=${SWTPM_CTRL_PORT}
./test_tpm2_samples_create_tpmca: line 66: 1882098 Killed ncat -l ${SWTPM_FAKE_CTRL_PORT} -k -c "xargs --null -n1 printf '\x00\x00\x00\x00' 2>/dev/null"
FAIL test_tpm2_samples_create_tpmca (exit status: 1)May I ask for some help again?
stefanberger
commented
3 years ago It seems to be an Intel TSS2 issue. I haven't seen this issue. What version of the Intel tss2 are you using?
stefanberger
commented
3 years ago This is the list of packages on Fedora 34 that's working for me:
rpm -q -a | grep tpm2
tpm2-tss-3.1.0-1.fc34.x86_64
clevis-pin-tpm2-0.3.0-1.fc34.x86_64
tpm2-pkcs11-tools-1.6.0-1.fc34.x86_64
tpm2-pkcs11-1.6.0-1.fc34.x86_64
tpm2-abrmd-selinux-2.3.1-3.fc34.noarch
tpm2-abrmd-2.4.0-3.fc34.x86_64
tpm2-tools-5.1.1-1.fc34.x86_64This is the expected output:
sudo bash -c "./tests/test_tpm2_samples_create_tpmca "
==== Starting swtpm with interfaces socket+socket ====
** (process:1434474): WARNING **: 18:01:44.346: tcti_conf before: "(null)"
** (tpm2-abrmd:1434474): WARNING **: 18:01:44.346: tcti_conf after: "mssim:host=127.0.0.1,port=65455"
CA uses a PKCS#11 key; using SWTPM_PKCS11_PIN
Successfully created EK certificate locally.
./tests/common: line 274: 1434470 Killed ncat -l ${SWTPM_FAKE_CTRL_PORT} -k -c "xargs --null -n1 printf '\x00\x00\x00\x00' 2>/dev/null"
Test 1: OK
==== Starting swtpm with interfaces socket+socket ====
** (process:1434731): WARNING **: 18:01:53.417: tcti_conf before: "(null)"
** (tpm2-abrmd:1434731): WARNING **: 18:01:53.417: tcti_conf after: "mssim:host=127.0.0.1,port=65455"
CA uses a PKCS#11 key; using SWTPM_PKCS11_PIN
Successfully created EK certificate locally.
./tests/common: line 23: 1434727 Killed ncat -l ${SWTPM_FAKE_CTRL_PORT} -k -c "xargs --null -n1 printf '\x00\x00\x00\x00' 2>/dev/null"
Test 2: OKI'm using all those packages by recompiled by me. Only today I've noticed that chrome is failing on each tab. When I've started chrome on the terminal with --debug I found as well some tpm2 errors like below:
[tkloczko@barrel ~]$ google-chrome-stable --verbose
libva error: vaGetDriverNameByIndex() failed with unknown libva error, driver_name = (null)
[10297:10297:0728/191849.073794:ERROR:sandbox_linux.cc(374)] InitializeSandbox() called with multiple threads in process gpu-process.
[10297:10297:0728/191851.917897:ERROR:gl_surface_presentation_helper.cc(260)] GetVSyncParametersIfAvailable() failed for 1 times!
[10297:10297:0728/191852.463810:ERROR:gl_surface_presentation_helper.cc(260)] GetVSyncParametersIfAvailable() failed for 2 times!
[10297:10297:0728/191853.044476:ERROR:gl_surface_presentation_helper.cc(260)] GetVSyncParametersIfAvailable() failed for 3 times!
[10251:10335:0728/191914.413016:ERROR:browser_main_loop.cc(269)] <unknown>: failed to allocate dbus proxy object: Error calling StartServiceByName for com.intel.tss2.Tabrmd
: Timeout was reached
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-tabrmd.so.0
ERROR:tcti:src/tss2-tcti/tcti-device.c:442:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpmrm0: No such file or directory
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-device.so.0
ERROR:tcti:src/tss2-tcti/tcti-device.c:442:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpm0: No such file or directory
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-device.so.0
WARNING:tcti:src/util/io.c:252:socket_connect() Failed to connect to host 127.0.0.1, port 2321: errno 111: Connection refused
ERROR:tcti:src/tss2-tcti/tcti-swtpm.c:591:Tss2_Tcti_Swtpm_Init() Cannot connect to swtpm TPM socket
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-swtpm.so.0
WARNING:tcti:src/util/io.c:252:socket_connect() Failed to connect to host 127.0.0.1, port 2321: errno 111: Connection refused
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-mssim.so.0
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:254:tctildr_get_default() No standard TCTI could be loaded
ERROR:tcti:src/tss2-tcti/tctildr.c:428:Tss2_TctiLdr_Initialize_Ex() Failed to instantiate TCTI
ERROR:fapi:src/tss2-fapi/api/Fapi_Initialize.c:227:Fapi_Initialize_Finish() Initializing TCTI. ErrorCode (0x000a000a)
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-tabrmd.so.0
ERROR:tcti:src/tss2-tcti/tcti-device.c:442:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpmrm0: No such file or directory
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-device.so.0
ERROR:tcti:src/tss2-tcti/tcti-device.c:442:Tss2_Tcti_Device_Init() Failed to open specified TCTI device file /dev/tpm0: No such file or directory
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-device.so.0
WARNING:tcti:src/util/io.c:252:socket_connect() Failed to connect to host 127.0.0.1, port 2321: errno 111: Connection refused
ERROR:tcti:src/tss2-tcti/tcti-swtpm.c:591:Tss2_Tcti_Swtpm_Init() Cannot connect to swtpm TPM socket
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-swtpm.so.0
WARNING:tcti:src/util/io.c:252:socket_connect() Failed to connect to host 127.0.0.1, port 2321: errno 111: Connection refused
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-mssim.so.0
ERROR:tcti:src/tss2-tcti/tctildr-dl.c:254:tctildr_get_default() No standard TCTI could be loaded
ERROR:tcti:src/tss2-tcti/tctildr.c:428:Tss2_TctiLdr_Initialize_Ex() Failed to instantiate TCTI
ERROR: Could not initialize tpm ctx: 0x5Looks like failing swtpm test unit may have something in common with that chrome issue :/ Do you have any suggestion what exactly it could be.
(nevertheless in mean time will try switch to fedora tpm2 binaries to at least encircle which one of my packages is messing here)
stefanberger
commented
3 years ago No suggestions other than 'ask the Intel tss2 guys.'
Source tree configured with:
Than build and check: