[rhel-9.6] ext.config.shared.var-mount.luks failing

[c4rt0]

When building a rhel-9.4 & 9.6 variants on x86_64, the ext.config.shared.var-mount.luks fails.

[2024-11-28T12:53:38.065Z] --- FAIL: ext.config.shared.var-mount.luks (27.24s)
[2024-11-28T12:53:38.065Z]         harness.go:1823: mach.Start() failed: machine 6fb46fd3-e03d-4132-a88b-c5209d3629ee entered emergency.target in initramfs

In the attached console.txt an error is found:

[   21.257136] ignition[835]: Ignition failed: failed to create luks: binding clevis device: exit status 1: Cmd: "clevis" "luks" "bind" "-f" "-k" "/tmp/ignition-luks-1296438722" "-d" "/run/ignition/dev_aliases/dev/disk/by-partlabel/varlog" "sss" "{\"pins\":{\"tpm2\":{}},\"t\":1}" Stdout: "" Stderr: "/usr/bin/clevis-encrypt-tpm2: line 137: tpm2_getcap: command not found\nUnable to find non-empty PCR algorithm bank, please check output of tpm2_getcap pcrs\nUnable to perform encryption with PIN 'sss' and config '{\"pins\":{\"tpm2\":{}},\"t\":1}'\nError adding new binding to /run/ignition/dev_aliases/dev/disk/by-partlabel/varlog\n"
0;1;31m*[0m[0;31m*    [0m] A start job is running for Ignition (disks) (19s / no limit)
[   21.273424] systemd[1]: ignition-disks.service: Main process exited, code=exited, status=1/FAILURE
[   21.275361] systemd[1]: ignition-disks.service: Failed with result 'exit-code'.
[   21.277132] systemd[1]: Failed to start Ignition (disks).
[0;1;31mFAILED[0m] Failed to start [0;1;39mIgnition (disks)[0m].
See 'systemctl status ignition-disks.service' for details.
[   21.280439] systemd[1]: Dependency failed for Ignition Complete.

Attaching remaining artifacts for completeness:
ignition.json
ignition-virtio-dump.txt

[jlebon]

Looks like the RHEL equivalent of coreos/fedora-coreos-tracker#1836 which should be fixed by coreos/ignition#1978.

[jlebon]

Should be fixed once clevis-21-207.el9 lands.