apt upgrade on new image fails (nullboot)

[Reid Price]

This is on a brand new instance

# rm -rf /var/lib/apt/lists/*
# apt upgrade -y -o Dpkg::Options::=--force-confnew
 ...
1 not fully installed or removed.
After this operation, 0 B of additional disk space will be used.
Setting up nullboot (0.4.0-0ubuntu0.22.04.2) ...
2023/05/22 18:26:16 cannot trust boot assets used for current boot: open /sys/kernel/security/tpm0/binary_bios_measurements: no such file or directory
dpkg: error processing package nullboot (--configure):
 installed nullboot package post-installation script subprocess returned error exit status 1
Errors were encountered while processing:
 nullboot
needrestart is being skipped since dpkg has failed
E: Sub-process /usr/bin/dpkg returned an error code (1)

This is the first command run on a brand new Ubuntu 22.04 image in Azure China.
The same issue does not occur in non-China Azure.

The package could not be removed, reinstalled, or installed as 0.4.0-0ubuntu0.22.04.2 or 0.3.0-0ubuntu1.

Any workarounds or recommendations appreciated.

[Reid Price (reid-price)]

As a workaround I added `apt hold nullboot` beforehand, which unblocked me.

[John Chittum (jchittum)]

Is this running in a confidential VM instance type? `nullboot` currently has strict requirements that are only strictly set when using confidential vm instance types. In this case it looks like the instance does not have the TPM mounted in the correct location

[Reid Price (reid-price)]

Yes, this is a confidential VM instance (the only 22.04 image available in Azure China).

[John Chittum (jchittum)]

there isn't a specific CVM image available, and you're trying to create one? There is a specific image we produce for CVM:

https://azuremarketplace.microsoft.com/en-us/marketplace/apps/canonical.0001-com-ubuntu-confidential-vm-jammy?tab=Overview

This should be available in China. If not, we'll need to work with Microsoft to ensure it is getting published there. Partner Center handles pushing to all the regions, so if it's not there, we'll need to work with the Partner Center team to ensure it's there.

We'll sync internally and find out more info

[Gauthier Jolly (gjolly)]

reid-price this link should bring you to the 22.04 LTS image in the Chinese marketplace:

https://portal.azure.cn/#create/canonical.0001-com-ubuntu-server-jammy22_04-lts-gen2

[Reid Price (reid-price)]

Thanks for the links and responses, appreciate it!