tpm module malfunctions

[bluppfisk]

I originally filed a bug against the fwupd software (https://github.com/fwupd/fwupd/issues/2508) from where it transpired that this problem was with the tpm package rather than with fwupd.

Some evidence is in:

$ sudo cat /sys/kernel/security/tpm0/binary_bios_measurements
Killed

The device is an XPS 13 9300 (2020 model).

I can reproduce the problem on kernels 5.8, 5.9 and 5.9.1 too. Haven't tried any other kernel versions.

ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: linux-image-5.4.0-52-generic 5.4.0-52.57
ProcVersionSignature: Ubuntu 5.4.0-52.57-generic 5.4.65
Uname: Linux 5.4.0-52-generic x86_64
ApportVersion: 2.20.11-0ubuntu27.10
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC1: sander 2665 F.... pulseaudio
CasperMD5CheckResult: skip
CurrentDesktop: ubuntu:GNOME
Date: Sat Oct 24 14:29:34 2020
HibernationDevice:
 # RESUME=UUID=e2b4846f-867a-4f84-a3d7-0f5d10d24a33 resume_offset=31260671
 # RESUME=UUID=6a9d6823-9903-4887-bd63-11831c1218c0
 # RESUME=/dev/nvme0n1p7 resume_offset=31260671
 # RESUME=/dev/nvme0n1p7
 # Resume from /swapfile
InstallationDate: Installed on 2020-04-01 (206 days ago)
InstallationMedia: Ubuntu 19.10 "Eoan Ermine" - Release amd64 (20191017)
MachineType: Dell Inc. XPS 13 9300
ProcFB: 0 i915drmfb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-5.4.0-52-generic root=UUID=e1b4846f-867a-4f84-a3d7-0f5d10d24a33 ro quiet splash vt.handoff=7
RelatedPackageVersions:
 linux-restricted-modules-5.4.0-52-generic N/A
 linux-backports-modules-5.4.0-52-generic N/A
 linux-firmware 1.187.3
SourcePackage: linux
UpgradeStatus: Upgraded to focal on 2020-04-24 (183 days ago)
dmi.bios.date: 08/13/2020
dmi.bios.vendor: Dell Inc.
dmi.bios.version: 1.2.0
dmi.board.name: 0Y4GNJ
dmi.board.vendor: Dell Inc.
dmi.board.version: A01
dmi.chassis.type: 10
dmi.chassis.vendor: Dell Inc.
dmi.modalias: dmi:bvnDellInc.:bvr1.2.0:bd08/13/2020:svnDellInc.:pnXPS139300:pvr:rvnDellInc.:rn0Y4GNJ:rvrA01:cvnDellInc.:ct10:cvr:
dmi.product.family: XPS
dmi.product.name: XPS 13 9300
dmi.product.sku: 096D
dmi.sys.vendor: Dell Inc.

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

This change was made by a bot.

[Woodrow Shen (woodrow-shen)]

Hi bluppfisk,

Can you help to provide the following information:

1. upload the /sys/kernel/security/tpm0/binary_bios_measurements, you can cp it into ~/ and then upload it to Launchpad bug as it's in-memory file, so it should be amount of bytes in size.

2. check if TCG event log can be extracted by fwts
sudo add-apt-repository ppa:firmware-testing-team/ppa-fwts-stable
sudo apt-get update
sudo apt-get install fwts
sudo fwts tpmevlogdump

attach results.log to this bug

3. add loglevel=8 to kernel cmdline or GRUB_CMDLINE_LINUX_DEFAULT to capture dmesg with all levels. Also attach dmesg to this bug

I'm verifying various devices with TPM2 on ubuntu core and ubuntu 20.04 so maybe I can try to help for cross reference.

[bluppfisk (bluppfisk)]

Hello Woodrow

I think already at steps 1 and 2 something's going wrong:

1. sudo cp /sys/kernel/security/tpm0/binary_bios_measurements ~/temp/
Killed

(a 0-byte file now exists with this name in ~/temp/ - I assume it will be of no use to include it here)

$ sudo fwts tpmevlogdump
Running 1 tests, results appended to results.log
Test: Dump Tpm2 Event Log.
Killed Tpm2 Event Log.

$ cat results.log
Results generated by fwts: Version V20.09.00 (2020-09-17 18:08:13).

Some of this work - Copyright (c) 1999 - 2020, Intel Corp. All rights reserved.
Some of this work - Copyright (c) 2010 - 2020, Canonical.
Some of this work - Copyright (c) 2016 - 2020, IBM.
Some of this work - Copyright (c) 2017 - 2020, ARM Ltd.

This test run on 26/10/20 at 08:10:05 on host Linux tuhao2 5.4.0-52-generic
#57-Ubuntu SMP Thu Oct 15 10:57:00 UTC 2020 x86_64.

Command: "fwts tpmevlogdump".
Running tests: tpmevlogdump.

tpmevlogdump: Dump Tpm2 Event Log.
--------------------------------------------------------------------------------
Test 1 of 1: Dump Tpm2 Event Log.

tpm0

Happy to go on with step 3 if it is still necessary (I'd rather not reboot right now if not necessary yet because I'd have to restart some work)