Uki: manual enroll keys succeeded only after a few retries

[nianyush]

Kairos version 3.0.11

I built the ISO with auto enroll set to false. After I reset the device into setup mode, i am able to the boot menu to enroll the keys. However, when i clicked on it, it instantly exited and return to boot menu again(seems like rebooted). And I cannot find any errors on the screen. However, after a few attempts(around 5 or 6) on choosing the enrollment boot entry, it was finally able to enter into the screen which would enroll the keys. After that, installation is also successful. I also checked that all the keys enrolled after that looks correct. Any idea where i can start to debug?

[ci-robbot]

Hello, I'm a bot helping to audit Github issues in the kairos project. Thank you for reporting the issue with manual key enrollment in Kairos version 3.0.11. However, the issue description does not clearly state the steps to reproduce the problem. Please provide more details about the process you followed to encounter this issue, specifically what exact actions you took, and any relevant log files or error messages that you encountered during the process. Additionally, please mention the versions of any other relevant artifacts you used (e.g., boot loader, operating system, etc.). Once you provide more information, we'll be better equipped to assist you in resolving the issue. Thank you for your contribution to the project, and remember, I am a bot created by @mudler and @jimmykarily.

[Itxaka]

umm, bit difficult. You could try to manually build systemd-boot with debug mode enabled so it can print stuff but Im not sure you would get anywhere :(

You can use this as a guide on how to build only the minimum required systemd-boot: https://github.com/kairos-io/packages/blob/main/packages/system/systemd/build.yaml

Basically

• clone systemd, change to desired branch (255)
• meson setup blablabla from here but with -Dmode=developer instead of -Dmode=release
• meson compile -j $(nproc)
• You will get the efi files under the $BUILDIR

And to override the files when building with enki you will need to build your own osbuilder image and override the existing /usr/kairos/systemd-bootx64.efi in the osbuilder image with yours as that it where enki looks for the systemd boot files to use

[Itxaka]

Attached a build of the efi files from 255 in developer mode

systemd-debug.zip

[jimmykarily]

@nianyush if there is anything more we could debug please re-open. This can't be kairos relates so we should open an upstream bug report if one isn't there already.