[Bug 2127725] Re: [Ubuntu 25.10 Questing] Errors during boot related to lack of "tss" user and group

[Launchpad Bug Tracker]

This bug was fixed in the package dracut - 109-11ubuntu1

---------------
dracut (109-11ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - autopkgtest: skip failing 43-kernel-install on arm64 (see LP 2133402)
    - autopkgtest: skip too slow 41-full-systemd on arm64 and armhf
      (see LP 2133401)
    - dracut-core: Declare breaking rust-coreutils before version 0.5.0

dracut (109-11) unstable; urgency=medium

  * autopkgtest: explicitly depend on dmsetup for test 60-nfs

dracut (109-10) unstable; urgency=medium

  * Let firmware package updates trigger the dracut autopkgtest
  * dracut-core: document which Dracut module needs suggested packages
  * Merge dracut-squash into dracut-core
  * Move the livenet Dracut module to dracut-network and merge the remaining
    dracut-live into dracut-core
  * fix(tpm2-tss): add tss user/group in addition to sysusers config
    (LP: #2127725)
  * autopkgtest: depend on erofs-utils and xorriso in test 30

 -- Benjamin Drung <bdrung at ubuntu.com>  Wed, 04 Feb 2026 01:04:58 +0100

** Changed in: dracut (Ubuntu)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to tpm2-tss in Ubuntu.
https://bugs.launchpad.net/bugs/2127725

Title:
  [Ubuntu 25.10 Questing] Errors during boot related to lack of "tss"
  user and group

Status in Dracut:
  Fix Released
Status in dracut package in Ubuntu:
  Fix Released
Status in tpm-udev package in Ubuntu:
  New
Status in tpm2-tss package in Ubuntu:
  New

Bug description:
  After upgrading from Ubuntu 25.04 plucky to 25.10 questing there are
  several errors shown during every boot process:

  systemd-tmpfiles[305]: Failed to parse ACL "default:group:tss:rwx", ignoring: No such file or directory
  systemd-tmpfiles[305]: Failed to parse ACL "default:group:tss:rwx", ignoring: No such file or directory
  systemd-tmpfiles[340]: /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:2: Failed to resolve user 'tss': No such process
  systemd-tmpfiles[340]: Failed to parse ACL "default:group:tss:rwx", ignoring: No such file or directory
  systemd-tmpfiles[340]: /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:4: Failed to resolve user 'tss': No such process
  systemd-tmpfiles[340]: Failed to parse ACL "default:group:tss:rwx", ignoring: No such file or directory
  systemd-tmpfiles[340]: /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:6: Failed to resolve group 'tss': No such process
  systemd-tmpfiles[340]: /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:7: Failed to resolve group 'tss': No such process
  systemd-udevd[430]: /usr/lib/udev/rules.d/60-tpm-udev.rules:3 Unknown user 'tss', ignoring.
  systemd-udevd[430]: /usr/lib/udev/rules.d/60-tpm-udev.rules:4 Unknown user 'tss', ignoring.
  systemd-udevd[430]: /usr/lib/udev/rules.d/60-tpm-udev.rules:4 Unknown group 'tss', ignoring.

  I've checked that both "tss" user and group exists.

  I think that these errors are caused as a result of "initramfs-tools"
  being replaced by "dracut". Probably old "initramfs-tools" didn't
  insert the tpm udev and tmpfiles rules in the initramfs so there were
  no problems. Seems that new "dracut" is inserting these rules/files in
  initramfs but it's not inserting the "tss" user and group needed for
  these to work.

  Additional info:
  tmpfiles rules: /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf
  udev rules: /usr/lib/udev/rules.d/60-tpm-udev.rules

To manage notifications about this bug go to:
https://bugs.launchpad.net/dracut/+bug/2127725/+subscriptions