[meta-intel] ovmf build failure
Trevor Woerner
twoerner at gmail.com
Tue Sep 17 10:20:49 PDT 2019
For what it's worth, when I try to build meta-intel's bbappend of ovmf, it
fails. Specifically, meta-intel's addition of the "secureboot" PACKAGECONFIG
flag is what does it.
| ERROR: Execution of '/z/build-master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-stable201905-r0/temp/run.do_deploy.7832' failed with exit code 1:
| Generating a RSA private key
| Error Generating Key
| 140383841510400:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
| 140383841510400:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
| 140383841510400:error:2406B072:random number generator:RAND_DRBG_generate:in error state:../openssl-1.1.1d/crypto/rand/drbg_lib.c:589:
| 140383841510400:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
| 140383841510400:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
| 140383841510400:error:2406B072:random number generator:RAND_DRBG_generate:in error state:../openssl-1.1.1d/crypto/rand/drbg_lib.c:589:
| 140383841510400:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
| 140383841510400:error:2406B072:random number generator:RAND_DRBG_generate:in error state:../openssl-1.1.1d/crypto/rand/drbg_lib.c:589:
| 140383841510400:error:04081003:rsa routines:rsa_builtin_keygen:BN lib:../openssl-1.1.1d/crypto/rsa/rsa_gen.c:387:
| WARNING: /z/build-master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-stable201905-r0/temp/run.do_deploy.7832:1 exit 1 from 'openssl req -new -x509 -newkey rsa:2048 -keyout /z/build-master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-stable201905-r0/deploy-ovmf/OvmfPkKek1.key -out /z/build-master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-stable201905-r0/deploy-ovmf/OvmfPkKek1.crt -nodes -days 20 -subj "/CN=OVMFSecBootTest"'
Googling for an answer all I find is "maybe my system doesn't have
/dev/urandom" and/or "maybe /dev/urandom isn't readable by the user" but my
/dev/urandom seems fine:
$ ls -l /dev | grep random
crw-rw-rw- 1 root root 1, 8 Aug 27 19:44 random
crw-rw-rw- 1 root root 1, 9 Aug 27 19:44 urandom
but maybe the build environment is doing something unexpected :-(
More information about the meta-intel
mailing list