[meta-intel] ovmf build failure

[Mittal, Anuj]

It looks it was introduced by a recent openssl upgrade in oe-core and
was discussed on the list yesterday:

http://lists.openembedded.org/pipermail/openembedded-core/2019-September/287031.html

There is a fix as well:

http://lists.openembedded.org/pipermail/openembedded-core/2019-September/287049.html

Thanks,

Anuj

On Tue, 2019-09-17 at 13:20 -0400, Trevor Woerner wrote:
> For what it's worth, when I try to build meta-intel's bbappend of
> ovmf, it
> fails. Specifically, meta-intel's addition of the "secureboot"
> PACKAGECONFIG
> flag is what does it.
> 
> 	| ERROR: Execution of '/z/build-master/minnow/build/tmp-
> glibc/work/corei7-64-oe-linux/ovmf/edk2-stable201905-
> r0/temp/run.do_deploy.7832' failed with exit code 1:
> 	| Generating a RSA private key
> 	| Error Generating Key
> 	| 140383841510400:error:2406C06E:random number
> generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-
> 1.1.1d/crypto/rand/drbg_lib.c:342:
> 	| 140383841510400:error:2406C06E:random number
> generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-
> 1.1.1d/crypto/rand/drbg_lib.c:342:
> 	| 140383841510400:error:2406B072:random number
> generator:RAND_DRBG_generate:in error state:../openssl-
> 1.1.1d/crypto/rand/drbg_lib.c:589:
> 	| 140383841510400:error:2406C06E:random number
> generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-
> 1.1.1d/crypto/rand/drbg_lib.c:342:
> 	| 140383841510400:error:2406C06E:random number
> generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-
> 1.1.1d/crypto/rand/drbg_lib.c:342:
> 	| 140383841510400:error:2406B072:random number
> generator:RAND_DRBG_generate:in error state:../openssl-
> 1.1.1d/crypto/rand/drbg_lib.c:589:
> 	| 140383841510400:error:2406C06E:random number
> generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-
> 1.1.1d/crypto/rand/drbg_lib.c:342:
> 	| 140383841510400:error:2406B072:random number
> generator:RAND_DRBG_generate:in error state:../openssl-
> 1.1.1d/crypto/rand/drbg_lib.c:589:
> 	| 140383841510400:error:04081003:rsa
> routines:rsa_builtin_keygen:BN lib:../openssl-
> 1.1.1d/crypto/rsa/rsa_gen.c:387:
> 	| WARNING: /z/build-master/minnow/build/tmp-glibc/work/corei7-
> 64-oe-linux/ovmf/edk2-stable201905-r0/temp/run.do_deploy.7832:1 exit
> 1 from 'openssl req -new -x509 -newkey rsa:2048 -keyout /z/build-
> master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-
> stable201905-r0/deploy-ovmf/OvmfPkKek1.key -out /z/build-
> master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-
> stable201905-r0/deploy-ovmf/OvmfPkKek1.crt -nodes -days 20 -subj
> "/CN=OVMFSecBootTest"'
> 
> Googling for an answer all I find is "maybe my system doesn't have
> /dev/urandom" and/or "maybe /dev/urandom isn't readable by the user"
> but my
> /dev/urandom seems fine:
> 
> 	$ ls -l /dev | grep random
> 	crw-rw-rw-   1 root   root      1,   8 Aug 27 19:44 random
> 	crw-rw-rw-   1 root   root      1,   9 Aug 27 19:44 urandom
> 
> but maybe the build environment is doing something unexpected :-(