Bug 1221908

Summary:	[Build 20240322] openQA in ansible: sdbootutil asks for recovery key to decrypt root
Product:	[openSUSE] openSUSE Tumbleweed	Reporter:	Dominique Leuenberger <dimstar>
Component:	Bootloader	Assignee:	Ludwig Nussel <lnussel>
Status:	RESOLVED FIXED	QA Contact:	E-mail List <qa-bugs>
Severity:	Normal
Priority:	P5 - None	CC:	aplanas, guillaume.gardet
Version:	Current
Target Milestone:	---
Hardware:	Other
OS:	Other
URL:	https://openqa.opensuse.org/tests/4035380/modules/ansible/steps/30
Whiteboard:
Found By:	openQA	Services Priority:
Business Priority:		Blocker:	Yes
Marketing QA Status:	---	IT Deployment:	---

Description Dominique Leuenberger 2024-03-25 07:50:21 UTC

## Observation

sdbootutil has been updated to
  +- Update to version 1+git20240314.3472899:

in snapshot 0321 - and since then, the ansible test module which happens to reboot the machine, fails to decrypt the disk transparently.

openQA test in scenario microos-Tumbleweed-MicroOS-Image-sdboot-x86_64-microos-wizard-tpm@uefi fails in
[ansible](https://openqa.opensuse.org/tests/4035380/modules/ansible/steps/30)

## Test suite description
Like MicroOS, but use neither combustion nor ignition for the intial configuration, so jeos-firstboot runs.


## Reproducible

Fails since (at least) Build [20240322](https://openqa.opensuse.org/tests/4035380) (current job)


## Expected result

Last good: [20240321](https://openqa.opensuse.org/tests/4031454) (or more recent)


## Further details

Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=microos&flavor=MicroOS-Image-sdboot&machine=uefi&test=microos-wizard-tpm&version=Tumbleweed)

Comment 1 Ludwig Nussel 2024-03-25 08:11:35 UTC

this is an error that appears when the initrd is larger than 64MB
https://openqa.opensuse.org/tests/4035380#step/firstrun/10

Workaround:
https://build.opensuse.org/request/show/1161328

Comment 2 Alberto Planas Dominguez 2024-03-25 08:16:58 UTC

I fixed it upstream (sd-pcrlock): https://github.com/systemd/systemd/pull/31889/files

The patch was in the merge queue, but sadly during the weekend was moved to need-more-work.

Comment 3 Dominique Leuenberger 2024-03-27 09:34:54 UTC

confirmed as fixed by openQA:
  https://openqa.opensuse.org/tests/4043315