Hi,

Tpm is working just fine out of ceph and i can connect to tpm device and
verify it.

If you look at the error even ceph-volume complains about the tpm flag
missing on version 19.2.0

What I noticed in this commit , the tps related changes are introduced.

https://github.com/ceph/ceph/commit/88836135fd03d28131c58a7440f51de244076166

But when i check the release 19.2.0 version this commit is not included.


--------------
Kind Regards
<http://about.me/ehsan310?promo=email_sig>


Ehsan Golpayegani
[image: https://]www.ehsan.pw
<https://ehsan.pw?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=edit_panel&utm_content=plaintext>
SAVE PAPER - THINK BEFORE YOU PRINT!



On Sat, 28 Dec 2024 at 09:44, Frédéric Nass <frederic.n...@univ-lorraine.fr>
wrote:

> Hi,
>
> Ceph is using systemd-cryptenroll for tpm2 token enrollment. Have you
> check the requirements for hardware configuration (UEFI mode), kernel and
> systemd support for TPM 2.0?
>
> You can check for 'tpm' in the output of 'dmesg | grep -i tpm' and the
> presence of a /dev/tpmrm0 device.
>
> Maybe try using TPM 2.0 directly (outside of Ceph) and see how it goes.
>
> Regards,
> Frédéric
>
> ------------------------------
> *De :* Ehsan Golpayegani <e.golpayeg...@gmail.com>
> *Envoyé :* vendredi 27 décembre 2024 05:04
> *À :* ceph-users@ceph.io
> *Objet :* [ceph-users] Tpm2 in squid
>
> Hi ceph users,
>
> Has anyone successfully installed Ceph Squid with TPM2 enabled on an OSD?
> I'm encountering an error during installation: "stderr_lines": ["Error
> EINVAL: Failed to validate OSD spec "<unnamed>": Feature `tpm2` is not
> supported"].
>
> I've also attempted to prepare the disks with TPM2 before adding them to
> the cluster, but I receive the following error: "/usr/bin/podman: stderr
> ceph-volume lvm prepare: error: unrecognized arguments: --with-tpm".
>
> For reference, my cluster is deployed via Cephadm and I'm using Squid
> 19.2.0. Any guidance would be greatly appreciated.
>
> Thanks,
> Ehsan
>
>
> --------------
> Kind Regards
> <http://about.me/ehsan310?promo=email_sig>
>
>
> Ehsan Golpayegani
> [image: https://]www.ehsan.pw
> <
> https://ehsan.pw?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=edit_panel&utm_content=plaintext>
>
> SAVE PAPER - THINK BEFORE YOU PRINT!
> _______________________________________________
> ceph-users mailing list -- ceph-users@ceph.io
> To unsubscribe send an email to ceph-users-le...@ceph.io
>
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io

Reply via email to