Talos II - 0.6 Release - Cannot boot if no TPM - TPM module cannot be expected (cannot be bought)

[tlaurion]

USB boot results in:

TPM_OpenClientCharDev: Could not open char device /dev/tpm0: No such file or directory
Error I/O error from TPM_Extend
!!! Could not find any ISO, trying bootable USB
TPM_OpenClientCharDev: Could not open char device /dev/tpm0: No such file or directory
Error I/O error from TPM_Extend
Failed to extend PCR 4
!!!!! Something failed during USB boot
TPM_OpenClientCharDev: Could not open char device /dev/tpm0: No such file or directory
Error I/O error from TPM_Extend
!!!!! Starting recovery shell

Internally, this requires TPM to extend PCR4 with kernel modules hashes prior of loading them.

~ # usb-scan
!!! Could not find any ISO, trying bootable USB
TPM_OpenClientCharDev: Could not open char device /dev/tpm0: No such file or directory
Error I/O error from TPM_Extend
Failed to extend PCR 4

I think 0.6.1 needs to be released prior of going further, which should be based on linuxboot/heads@493149b

Otherwise, willing testers will become unwilling testers.
We cannot consider any tester today to have non-buyable assembled TPM module.

[macpijan]

See here for TPM availability.

[miczyg1]

We will need a v0.7.0 release or something to close it.

[macpijan]

TPM module can be bought here: https://shop.3mdeb.com/shop/modules/tpm-1-2-compatible-with-raptor-computing-systems-talos-ii-mainboard/

The design files are here: https://github.com/3mdeb/talos-tpm-module

What is the expectation here @tlaurion ? Do we want heads on Talos to boot without TPM? What is heads usefulness in such a case? Are there more platforms like this? Do we need to test for the "booting heads without TPM" for each release?

Or maybe it can be closed, as TPM is already available, as this was the main point in the original comment.

[macpijan]

According to: https://github.com/Dasharo/dasharo/pull/43#discussion_r1273470307 we should be able to close this one.

[SergiiDmytruk]

Some context: this was opened after linuxboot/heads#1200 was already merged which happened after v0.6.0 release. The release of v0.6.1 was suggested to pick up that change and avoid requiring TPM presence. So, yes, this should be fixed.