Title: vTPM on KVM does not persist data (ACS 4.20.1.0, Ubuntu 24.04) · Issue #11842 · apache/cloudstack · GitHub
Open Graph Title: vTPM on KVM does not persist data (ACS 4.20.1.0, Ubuntu 24.04) · Issue #11842 · apache/cloudstack
X Title: vTPM on KVM does not persist data (ACS 4.20.1.0, Ubuntu 24.04) · Issue #11842 · apache/cloudstack
Description: problem after a shutdown, the /var/lib/libvirt/swtpm/ which holds the tpm data is gone. When starting the vm again, the folder is re-created with empty tpm files. I am using a similar tpm definition in manually configured kvm guests, if ...
Open Graph Description: problem after a shutdown, the /var/lib/libvirt/swtpm/ which holds the tpm data is gone. When starting the vm again, the folder is re-created with empty tpm files. I am using a similar tpm definitio...
X Description: problem after a shutdown, the /var/lib/libvirt/swtpm/ which holds the tpm data is gone. When starting the vm again, the folder is re-created with empty tpm files. I am using a similar tpm definitio...
Opengraph URL: https://github.com/apache/cloudstack/issues/11842
X: @github
Domain: github.com
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"vTPM on KVM does not persist data (ACS 4.20.1.0, Ubuntu 24.04)","articleBody":"\u003e### problem\n\nafter a shutdown, the /var/lib/libvirt/swtpm/\u003cvmuuid\u003e which holds the tpm data is gone. When starting the vm again, the folder is re-created with empty tpm files.\n\nI am using a similar tpm definition in manually configured kvm guests, if those vm are powered off the folder remains. \n\n### versions\n\n4.20.1.0\nUbuntu 24.04\n\n### The steps to reproduce the bug\n\n```\nroot@VM-647bf7bc-bdca-48fa-8329-8b7a103f9ab6:~# echo \"Hello, TPM!\" \u003e datafile\nroot@VM-647bf7bc-bdca-48fa-8329-8b7a103f9ab6:~# tpm2_nvwrite -C o -i datafile 0x1500016\nroot@VM-647bf7bc-bdca-48fa-8329-8b7a103f9ab6:~# tpm2_nvread -C o 0x1500016\nWARN: Reading full size of the NV index\nHello, TPM!\n```\n\nInstance power cycle, and tryi to read our value again from the tpm\n\n```\nroot@VM-647bf7bc-bdca-48fa-8329-8b7a103f9ab6:~# tpm2_nvread -C o 0x1500016\nWARN: Reading full size of the NV index\nWARNING:esys:src/tss2-esys/api/Esys_NV_ReadPublic.c:309:Esys_NV_ReadPublic_Finish() Received TPM Error\nERROR:esys:src/tss2-esys/esys_tr.c:243:Esys_TR_FromTPMPublic_Finish() Error NV_ReadPublic ErrorCode (0x0000018b)\nERROR:esys:src/tss2-esys/esys_tr.c:398:Esys_TR_FromTPMPublic() Error TR FromTPMPublic ErrorCode (0x0000018b)\nERROR: Esys_TR_FromTPMPublic(0x18B) - tpm:handle(1):the handle is not correct for the use\nERROR: Unable to run tpm2_nvread\nroot@VM-647bf7bc-bdca-48fa-8329-8b7a103f9ab6:\n```\n\n### What to do about it?\n\n_No response_","author":{"url":"https://github.com/jgotteswinter","@type":"Person","name":"jgotteswinter"},"datePublished":"2025-10-15T10:06:40.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":15},"url":"https://github.com/11842/cloudstack/issues/11842"}
| route-pattern | /_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format) |
| route-controller | voltron_issues_fragments |
| route-action | issue_layout |
| fetch-nonce | v2:53db054d-5a0b-0955-646a-54002bf70cd8 |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | A216:24AD96:4FB120:70C383:6A4D219E |
| html-safe-nonce | a19476c287467f3b2fad9280b5a96888b20ed2565d4b516fe50bacfa475b5d00 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBMjE2OjI0QUQ5Njo0RkIxMjA6NzBDMzgzOjZBNEQyMTlFIiwidmlzaXRvcl9pZCI6IjE3NTgxMDkwNDQzNzM3OTExMzQiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 6535af33d67a9ef79f2aa11fc5cf80461c507bce959d0096ba4f911be9476daf |
| hovercard-subject-tag | issue:3517303613 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/apache/cloudstack/11842/issue_layout |
| twitter:image | https://opengraph.githubassets.com/aa6b6115d09b9f7cdd9da6dba0ffa1785cf6dd28f170672ad8f1e72f72cdbeb2/apache/cloudstack/issues/11842 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/aa6b6115d09b9f7cdd9da6dba0ffa1785cf6dd28f170672ad8f1e72f72cdbeb2/apache/cloudstack/issues/11842 |
| og:image:alt | problem after a shutdown, the /var/lib/libvirt/swtpm/ which holds the tpm data is gone. When starting the vm again, the folder is re-created with empty tpm files. I am using a similar tpm definitio... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | jgotteswinter |
| hostname | github.com |
| expected-hostname | github.com |
| None | 92571a8944142227b7e19cd10918b1ddd06e5066c1ad5bc7e4769cf6140a87e6 |
| turbo-cache-control | no-preview |
| go-import | github.com/apache/cloudstack git https://github.com/apache/cloudstack.git |
| octolytics-dimension-user_id | 47359 |
| octolytics-dimension-user_login | apache |
| octolytics-dimension-repository_id | 9759448 |
| octolytics-dimension-repository_nwo | apache/cloudstack |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 9759448 |
| octolytics-dimension-repository_network_root_nwo | apache/cloudstack |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 93f17a978ee60bc4668e1d7b90e6bd2d622261fd |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width