TPM boot failure on fresh installation (omarchy 3.3.2 iso)

[felixzsh]

System details

thinkpad t480

What's wrong?

i just installed omarchy on a t480, everything seems well, but i havent been able to use the system yet, every time i enter the correct decryption password it freezes while loading and then after a couple minutes it just reboots.

edit:
Initially thought this was a LUKS issue, but after checking logs from a live USB, the root cause is TPM (Trusted Platform Module) initialization failures.

see the logs commented below

[felixzsh]

btw my password is 39 characters long

[mariomenjr]

I am also having the same issue. It's not related to LUKS. I was able to mount my disk in live USB. It's about this error message, but I've been unable to fix it. All solutions given by GenAI have failed so far.

https://x.com/mariomenjr/status/2012670536799699053

[felixzsh]

now i see, by watching the logs and filtering errors i got the same:

Jan 17 17:27:42 omarchy-480 kernel: tpm tpm0: invalid TPM_STS.x 0x01, dumping stack for forensics
Jan 17 17:27:42 omarchy-480 bootctl[644]:  Mount point '/boot' which backs the random seed file is world accessible, which is a security hole! 
Jan 17 17:27:42 omarchy-480 bootctl[644]: Random seed file '/boot/loader/random-seed' is world accessible, which is a security hole!
Jan 17 17:27:44 omarchy-480 kernel: Bluetooth: hci0: Reading supported features failed (-16)
Jan 17 17:29:42 omarchy-480 systemd-pcrextend[485]: Could not extend NvPCR: State not recoverable
Jan 17 17:29:42 omarchy-480 kernel: tpm tpm0: Operation Timed out
Jan 17 17:29:42 omarchy-480 systemd-tpm2-setup[488]: Failed to acquire anchor secret: Operation not supported
Jan 17 17:29:42 omarchy-480 systemd[1]: Failed to start TPM NvPCR Product ID Measurement.
Jan 17 17:29:42 omarchy-480 systemd[1]: Failed to start Early TPM SRK Setup.
Jan 17 17:29:42 omarchy-480 systemd-tpm2-setup[678]: Failed to create TPM2 context: State not recoverable
Jan 17 17:29:42 omarchy-480 systemd-tpm2-setup[678]: Failed to create TPM2 context: State not recoverable
Jan 17 17:29:42 omarchy-480 systemd[1]: Failed to start TPM SRK Setup.
Jan 17 17:29:42 omarchy-480 systemd-pcrextend[680]: Failed to create TPM2 context: State not recoverable
Jan 17 17:29:42 omarchy-480 systemd[1]: Failed to start TPM PCR NvPCR Initialization Separator.
Jan 17 17:29:47 omarchy-480 kernel: watchdog: watchdog0: watchdog did not stop!

[felixzsh]

i found this has already been solved in : #4120 as the docs say:

You must turn off Secure Boot and/or TPM in the BIOS. You have to turn these off to be able to install Omarchy. They're Microsoft security schemes meant for Windows and Microsoft-affiliated Linux distributions.

[mariomenjr]

That did it. Thank you.