In dracut/modules.d/91tpm2-tss/module-setup.sh , it references
inst_sysusers tpm2-tss.conf , but there's no package installing a
tpm2-tss.conf.


tpm-udev creates a tss user in it's postinst script, but not via
sysusers.


Either the dracut module should inject it's own tpm2-tss.conf to create
the relevant tss user , or tpm2-udev should carry a tpm2-tss.conf file
matching the tss user it creates in the postinst script, or replacing
that.


Currently one can se things like:
Mar 19 14:57:48 localhost systemd-tmpfiles[335]: Failed to parse ACL "default:group:tss:rwx", ignoring: Invalid argument
Mar 19 14:57:48 localhost systemd-tmpfiles[335]: Failed to parse ACL "default:group:tss:rwx", ignoring: Invalid argument
Mar 19 14:57:48 localhost systemd-tmpfiles[360]: /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:2: Failed to resolve user 'tss': No such process
Mar 19 14:57:48 localhost systemd-tmpfiles[360]: Failed to parse ACL "default:group:tss:rwx", ignoring: Invalid argument Mar 19 14:57:48 localhost systemd-tmpfiles[360]:
/usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:4: Failed to resolve user 'tss': No such process Mar 19 14:57:48 localhost systemd-tmpfiles[360]: Failed to parse ACL "default:group:tss:rwx", ignoring: Invalid argument
Mar 19 14:57:48 localhost systemd-tmpfiles[360]: /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:6: Failed to resolve group 'tss': No such process
Mar 19 14:57:48 localhost systemd-tmpfiles[360]: /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:7: Failed to resolve group 'tss': No such process
Mar 19 14:57:48 localhost systemd-udevd[440]: /usr/lib/udev/rules.d/60-tpm-udev.rules:3 Unknown user 'tss', ignoring.
Mar 19 14:57:48 localhost systemd-udevd[440]: /usr/lib/udev/rules.d/60-tpm-udev.rules:4 Unknown user 'tss', ignoring.
Mar 19 14:57:48 localhost systemd-udevd[440]: /usr/lib/udev/rules.d/60-tpm-udev.rules:4 Unknown group 'tss', ignoring.


In the log from the boot with a dracut built initramfs wihout the tss
user.


//Anton

even though everything is working, it keeps throwing this error

I hope it will be fixed, or at least give me a hint on how to fix it manually


- -- System Information:
Debian Release: 13.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 7.0.10+deb13-amd64 (SMP w/32 CPU threads; PREEMPT)
Locale: LANG=ru_UA.UTF-8, LC_CTYPE=ru_UA.UTF-8 (charmap=UTF-8), LANGUAGE=ru_UA:ru
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dracut depends on:
ii  dracut-core  106-6
ii  linux-base   4.12.1

dracut recommends no packages.

Versions of packages dracut suggests:
pn  dracut-network  <none>

- -- no debconf information
-----BEGIN PGP SIGNATURE-----

iIgEARYKADAWIQT4P30cYZSeUYFEf3aAmIksszJJ0QUCah2iyBIcbWl0dHdlcmtA
ZHVjay5jb20ACgkQgJiJLLMySdHFKQD8D/lvR1BiNeKIwvtLX+atfD2SrUHl/qs3
DAqk77vuZUkBAPrmdMjV39M4/RVaaVhva1W1Ebjk1sdPbGvtlppzvb4K
=6j86
-----END PGP SIGNATURE-----

manually
(500, 'unstable'), (500, 'stable')
LANGUAGE=ru_UA:ru

Yeah, it looks like I fixed it by adding the tss user/group to this
file /etc/sysusers.d/basic.conf and recompile it