Bug 925524

Summary:	sys-kernel/dracut: systemd + app-crypt/tpm2-tss - unknown group tss reported
Product:	Gentoo Linux	Reporter:	Andrew Udvare <audvare>
Component:	Current packages	Assignee:	Alexander Tsoy <alexander>
Status:	CONFIRMED ---
Severity:	normal	CC:	andrewammerlaan, audvare, floppym, proxy-maint, salah.coronya
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/dracutdevs/dracut/issues/1700
See Also:	https://github.com/dracut-ng/dracut-ng/issues/274
Whiteboard:
Package list:		Runtime testing required:	---

Description Andrew Udvare 2024-02-26 05:33:14 UTC

After building an initrd with Dracut with systemd (which pulls in tpm2-tss module), prior to switching sysroot, these non-fatal errors will appear:

/usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:2: Failed to resolve user 'tss': No such process
/usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:4: Failed to resolve user 'tss': No such process
/usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:6: Failed to resolve group 'tss': No such process
/usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:7: Failed to resolve group 'tss': No such process
/usr/lib/udev/rules.d/60-tpm-udev.rules:3 Unknown user 'tss', ignoring.
/usr/lib/udev/rules.d/60-tpm-udev.rules:4 Unknown group 'tss', ignoring.

The tpm2-tss module does attempt to create at least the tss user via a file in sysusers.d:

https://github.com/dracutdevs/dracut/blob/master/modules.d/91tpm2-tss/module-setup.sh#L35C21-L35C35

The problem is this file tpm2-tss.conf does not exist on Gentoo machines. It is normally installed by tpm2-tss but we do not because we have acct-user/tss and the group packages.

I think the best solution to send a patch upstream so that the acct-user/acct-group files are considered as well as the standard file.