Observing random behaviour (rate limit?)

[pkel]

I have a Lenovo T470s in front of me and am trying to luks open my disk on boot. I'm following this guide. I'm on Fedora 29 with the latest updates. UEFI is also up to date.

I don't know much about TPMs and never used one under Linux.

echo Hello World | clevis encrypt tpm2 '{}' > test.txt
clevis decrypt < test.txt

When doing this hello world, I observe inconsistent behavior. Sometimes I hit one of the following two lines, sometimes decryption succeeds.

clevis/src/pins/tpm2/clevis-decrypt-tpm2

Line 124 in 3375b08

echo "Loading jwk to TPM2 failed!" >&2

clevis/src/pins/tpm2/clevis-decrypt-tpm2

Line 129 in 3375b08

echo "Unsealing jwk from TPM failed!" >&2

A small sample suggest that success correlates with preceding idle time. Thus I suspect this is caused by some kind of rate limit. If intentional, the error reporting should be improved.

[pkel]

Not an issue any more on Fedora 30.