GRUB Out Of Memory on TPM 2.0 Platform

[alexander-bauer]

Kairos version:

NAME="openSUSE Leap"
VERSION="15.5"
ID="opensuse-leap"
ID_LIKE="suse opensuse"
VERSION_ID="15.5"
PRETTY_NAME="openSUSE Leap 15.5"
ANSI_COLOR="0;32"
CPE_NAME="cpe:/o:opensuse:leap:15.5"
BUG_REPORT_URL="https://bugs.opensuse.org"
HOME_URL="https://www.opensuse.org/"
DOCUMENTATION_URL="https://en.opensuse.org/Portal:Leap"
LOGO="distributor-logo-Leap"
KAIROS_NAME="kairos-standard-opensuse-leap-15.5"
KAIROS_VERSION="v2.4.2-k3sv1.28.2+k3s1"
KAIROS_ID="kairos"
KAIROS_ID_LIKE="kairos-standard-opensuse-leap-15.5"
KAIROS_VERSION_ID="v2.4.2-k3sv1.28.2+k3s1"
KAIROS_PRETTY_NAME="kairos-standard-opensuse-leap-15.5 v2.4.2-k3sv1.28.2+k3s1"
KAIROS_BUG_REPORT_URL="https://github.com/kairos-io/kairos/issues"
KAIROS_HOME_URL="https://github.com/kairos-io/kairos"
KAIROS_IMAGE_REPO="quay.io/kairos/opensuse"
KAIROS_IMAGE_LABEL="v2.4.2-k3sv1.28.2+k3s1"
KAIROS_GITHUB_REPO="kairos-io/provider-kairos"
KAIROS_VARIANT="standard"
KAIROS_FLAVOR="opensuse"
KAIROS_ARTIFACT="kairos-opensuse-leap-15.5-standard-amd64-generic-v2.4.2-k3sv1.28.2+k3s1

CPU architecture, OS, and Version:

Linux mgmt-server-01 5.14.21-150500.55.36-default #1 SMP PREEMPT_DYNAMIC Tue Oct 31 08:37:43 UTC 2023 (e7a2e23) x86_64 x86_64 x86_64 GNU/Linux

Describe the bug

I was attempting a fresh install from stock Kairos Standard Opensuse Leap 15.5 for amd64; I booted the ISO, supplied a cloud-config via WebUI, performed the install, removed the USB, and rebooted. During reboot, the Kairos boot menu appeared and launched the first option, but immediately failed with the below GRUB out of memory error.

After reaching out to the Kairos community IRC, visualpheonix described having seen the same issue on a TPM 2.0-enabled host. I confirmed that my platform (a Beelink U59) has SecureBoot and TPM 2.0 enabled by default. I was able to disable the former from the BIOS config, but TPM 2.0 could not be disabled.

Visualpheonix suggested a temporary fix: to use the GRUB CLI to run rmmod tpm prior to booting Kairos. I tried this, and the boot was successful. I was able to apply this semi-permanently, noted below. They suggested that updating GRUB might solve this misbehavior with it booting on TPM 2.0

To Reproduce

Perform a standard Kairos install from Opensuse Leap 15.5 stock ISO on a host with TPM 2.0 enabled.

Expected behavior

Successful boot with default GRUB options.

Logs

Additional context

Semi-permanent GRUB config fix

1. Temporarily boot into the install by entering the GRUB CLI at the boot menu (Ctrl-e), and prepend the boot option with rmmod tpm on a new line. Boot this option. (Ctrl-x)
2. After boot, remount the COS_STATE partition as read-write: mount -o remount,rw /dev/sda4 /run/initramfs/cos-state
3. Edit /run/initramfs/cos-state/grub2/grub.cfg, add rmmod tpm. A reasonable place is adjacent to the block fo insmod directives.
4. Remount the partition, or reboot. mount -o remount,ro /dev/sda4 /run/initramfs/cos-state

[alexander-bauer]

Oops, misclicked open -- will finish filling content as soon as I'm back at my desk.

[jimmykarily]

@alexander-bauer this is a duplicate of: #1842

please add any additional info you have on the other ticket. Closing this.