ubuntu-desktop-installer

tpm install option fails

Bug #2034909 reported by James Paton-Smith on 2023-09-08

This bug report is a duplicate of: Bug #2031896: [canary] installation failed with "cannot seal the encryption keys". Edit Remove

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	subiquity	Incomplete	Undecided	Unassigned
	ubuntu-desktop-installer	New	Undecided	Unassigned

Bug Description

Using the mantic daily build (2023-09-08), TPM-based encryption fails for my test machine.
The installer simply fails after some time.

The disk is partitioned and unlocked, but attempting to reboot into the system fails

I tried again to boot into the live-USB and install with TPM-based encryption, but the option is now MISSING from the installer.

ProblemType: Bug
DistroRelease: Ubuntu 23.10
ProcVersionSignature: Ubuntu 6.3.0-7.7-generic 6.3.5
Uname: Linux 6.3.0-7-generic x86_64
NonfreeKernelModules: zfs
ApportVersion: 2.27.0-0ubuntu2
Architecture: amd64
CasperMD5CheckResult: pass
CasperVersion: 1.482
CurrentDesktop: ubuntu:GNOME
Date: Fri Sep 8 10:34:57 2023
LiveMediaBuild: Ubuntu 23.10 "Mantic Minotaur" - Daily amd64 (20230908)
ProcEnviron:
LANG=C.UTF-8
PATH=(custom, no user)
SHELL=/bin/bash
TERM=xterm-256color
XDG_RUNTIME_DIR=<set>
Snap: ubuntu-desktop-installer 0+git.09349bf4 ()
SnapChanges: no changes found
SnapConnections:

SnapSource: ubuntu-desktop-installer
UpgradeStatus: No upgrade log present (probably fresh install)

Tags:

Revision history for this message

James Paton-Smith (jamesps) wrote on 2023-09-08:

CrashDB.txt Edit (177 bytes, text/plain; charset="utf-8")
ProbeData.txt Edit (67.0 KiB, text/plain; charset="utf-8")
ProcCpuinfoMinimal.txt Edit (1.8 KiB, text/plain; charset="utf-8")
SnapInfo.core22.txt Edit (672 bytes, text/plain; charset="utf-8")
SnapInfo.ubuntu-desktop-installer.txt Edit (1.1 KiB, text/plain; charset="utf-8")
SubiquityLog.txt Edit (238.7 KiB, text/plain; charset="utf-8")

James Paton-Smith (jamesps) on 2023-09-11

tags:

added: fde

Revision history for this message

Dan Bungert (dbungert) wrote on 2023-09-12:

Hi James, thanks for the report.

There is a pitfall where, if you need the recovery key on first boot,
you don't have it yet (and we have no way to get you the recovery key
today until first boot).

> I tried again to boot into the live-USB and install with TPM-based
> encryption, but the option is now MISSING from the installer.

You may need to reset the TPM to allow that to continue. On an older
laptop I have, this is called "Clear TPM", which I set to "yes" and it
does the clear on the next boot.

As to your original problem, it may be one of LP: #2031896 or
LP: #2034715.

If you happen to repeat the test and get a crash dialog during the
install, please click that as it is better at log collection.

Changed in subiquity:
status:	New → Incomplete

Revision history for this message

James Paton-Smith (jamesps) wrote on 2023-09-13:

Thanks for the update.

After going back and viewing the logs I think the main issue here is a duplicate of #2031896

Regarding TPM clearing, I was able to perform a successful install on my VM after removing and re-adding the TPM device from the VM, and ensuring that CD/DVD boot was the first boot option.

Revision history for this message

Dan Bungert (dbungert) wrote on 2023-09-13:

Thanks for investigating, James. Glad to hear that your next attempt worked with the TPM reset. I'm going to merge this with LP: #2031896. Have a great day!