[meta-intel] ovmf build failure

Trevor Woerner twoerner at gmail.com
Tue Sep 17 10:20:49 PDT 2019


For what it's worth, when I try to build meta-intel's bbappend of ovmf, it
fails. Specifically, meta-intel's addition of the "secureboot" PACKAGECONFIG
flag is what does it.

	| ERROR: Execution of '/z/build-master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-stable201905-r0/temp/run.do_deploy.7832' failed with exit code 1:
	| Generating a RSA private key
	| Error Generating Key
	| 140383841510400:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
	| 140383841510400:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
	| 140383841510400:error:2406B072:random number generator:RAND_DRBG_generate:in error state:../openssl-1.1.1d/crypto/rand/drbg_lib.c:589:
	| 140383841510400:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
	| 140383841510400:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
	| 140383841510400:error:2406B072:random number generator:RAND_DRBG_generate:in error state:../openssl-1.1.1d/crypto/rand/drbg_lib.c:589:
	| 140383841510400:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
	| 140383841510400:error:2406B072:random number generator:RAND_DRBG_generate:in error state:../openssl-1.1.1d/crypto/rand/drbg_lib.c:589:
	| 140383841510400:error:04081003:rsa routines:rsa_builtin_keygen:BN lib:../openssl-1.1.1d/crypto/rsa/rsa_gen.c:387:
	| WARNING: /z/build-master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-stable201905-r0/temp/run.do_deploy.7832:1 exit 1 from 'openssl req -new -x509 -newkey rsa:2048 -keyout /z/build-master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-stable201905-r0/deploy-ovmf/OvmfPkKek1.key -out /z/build-master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-stable201905-r0/deploy-ovmf/OvmfPkKek1.crt -nodes -days 20 -subj "/CN=OVMFSecBootTest"'

Googling for an answer all I find is "maybe my system doesn't have
/dev/urandom" and/or "maybe /dev/urandom isn't readable by the user" but my
/dev/urandom seems fine:

	$ ls -l /dev | grep random
	crw-rw-rw-   1 root   root      1,   8 Aug 27 19:44 random
	crw-rw-rw-   1 root   root      1,   9 Aug 27 19:44 urandom

but maybe the build environment is doing something unexpected :-(


More information about the meta-intel mailing list