Project

General

Profile

Actions
Copy link

action #152829

open

microos/sdboot: recovery key needed to decrypt without TPM

Added by dimstar 4 months ago. Updated 4 months ago.

Status:
In Progress
Priority:
Normal
Assignee:
favogt
Category:
Bugs in existing tests
Target version:
-
Start date:
2023-12-21
Due date:
% Done:

100%

Estimated time:
Difficulty:

Description

Observation

Using the wizard to encypt the HDD, when there is no TPM present, requires to enter the decryption key upon reboot

The key was published in https://openqa.opensuse.org/tests/3829004#step/firstrun/9

openQA test in scenario microos-Tumbleweed-MicroOS-Image-sdboot-x86_64-microos-wizard@uefi fails in
ansible

Test suite description

Like MicroOS, but use neither combustion nor ignition for the intial configuration, so jeos-firstboot runs.

Reproducible

Fails since (at least) Build 20231128

Expected result

Last good: 20231127 (or more recent)

Further details

Always latest result in this scenario: latest

Actions
Copy link
 #1

Updated by openqa_review 4 months ago

This is an autogenerated message for openQA integration by the openqa_review script:

This bug is still referenced in a failing openQA test: microos-wizard@uefi
https://openqa.opensuse.org/tests/3847222#step/ansible/1

To prevent further reminder comments one of the following options should be followed:

  1. The test scenario is fixed by applying the bug fix to the tested product or the test is adjusted
  2. The openQA job group is moved to "Released" or "EOL" (End-of-Life)
  3. The bugref in the openQA scenario is removed or replaced, e.g. label:wontfix:boo1234

Expect the next reminder at the earliest in 28 days if nothing changes in this ticket.

Actions
Copy link
 #2

Updated by favogt 4 months ago

  • Assignee set to favogt
  • % Done changed from 0 to 50

PRs to fix the failure by enabling TPM enrollment: https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/18430 https://github.com/os-autoinst/opensuse-jobgroups/pull/411

I'll also try to get password based unlocking working (using the root PW, not the recovery key for now), to cover both scenarios.

Actions
Copy link
 #3

Updated by favogt 4 months ago

  • Status changed from New to In Progress
Actions
Copy link
 #4

Updated by favogt 4 months ago

  • % Done changed from 50 to 100

favogt wrote in #note-2:

I'll also try to get password based unlocking working (using the root PW, not the recovery key for now), to cover both scenarios.

Done:
https://github.com/os-autoinst/os-autoinst-needles-opensuse/pull/807
https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/18437
https://github.com/os-autoinst/opensuse-jobgroups/pull/411

Actions
Copy link

Also available in: Atom PDF