I’m looking at creating a custom image for deployment, but based on UC20. Initially just locally testing, but will be using a Brand Store eventually. We are particularly interested in the FDE in combination with a TPM2 device.
Trying everything in stages, I have so far:
Created working image from http://cdimage.ubuntu.com/ubuntu-core/20/beta/current/ubuntu-core-20-amd64.model-assertion.
Created custom Image Model Assertion, and created a working image using that.
Created a custom gadget snap based on pc-amd64-gadget - there was a minor issue here, but I reverted a most recent two commits and got it building. I added some info to this feature issue: https://github.com/snapcore/pc-amd64-gadget/issues/49
Created a new Model Assertion based on my initial test, that included my new custom gadget snap, and set the “grade” to
dangerous- image built successfully.
Although the final test image built fine, it does not finish installing properly on a test system with a TPM2 device [ where all the previous test images installed ok with FDE ].
After initial boot and setup [ including the checks for Secure Boot enabled and TPM available etc ], it reboots. On reaching target
Basic System it then moves onto mounting
ubuntu-seed and finally on mounting
ubuntu-data-enc there is a prompt for a recovery key:
Please enter the recovery key for disk /dev/disk/by-label/ubuntu-data-enc: (press TAB for no echo)
…as I don’t have any input, it eventually times out with:
[FAILED] Failed to start the-tool.service.
The image works fine in a VM without a TPM device.
Any idea what the issue could ?
Thanks in advance,