Ubuntu
tpm-tools package

TPM 2.0 Module in Ubuntu:18.04 Container Image

Asked by Rahul

Q1. Is Trusted Platform Module (TPM) 2.0 module used in Ubuntu:18.04 container image available on Docker Hub?

Q2. I am using Ubuntu:18.04 container image as a base image for my application which is deployed in AKS. Is there any process related to Trusted Platform Module (TPM) 2.0 module which runs at runtime? The nodes in AKS are using Ubuntu 18.04 as well.

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu tpm-tools Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#1

18.04 is only (standard) supported until April next year. You could use this a a catalyst to upgrade.

Is there not an AKS with 20.04 or 22.04 ?

Revision history for this message
Rahul (rahul26136) said : 		#2

The nodes running on AKS are using Ubuntu:18.04 but I am not sure if TPM is enabled on it or not.

As per https://packages.ubuntu.com/search?suite=default&section=all&arch=any&keywords=tpm2&searchon=names, there are multiple packages related to TPM in Ubuntu namely "clevis-tpm2", "libtpm2-pkcs11-1", "libtpm2-pkcs11-1-dev", "libtpm2-pkcs11-tools", "python-tpm2-pytss-doc", "python3-tpm2-pkcs11-tools", "python3-tpm2-pytss", "tpm2-abrmd", "tpm2-initramfs-tool", "tpm2-openssl", "tpm2-pk11", "tpm2-tools" and few TPM TSS packages like "libsapi-dev", "libsapi-utils", "libsapi0".

The SBOM report of the Ubuntu:18.04 container image (Docker Hub) does not contain "tpm2-tss", "tpm2-abrmd" and "tpm2-tools" packages or any TPM related library. Based on this can we say that Ubuntu:18.04 Docker image is not using TPM specifications?

There is definitely a difference between the Ubuntu:18.04 available on Docker Hub and the one running on the AKS nodes since the Docker Hub image is a minimalistic one.

Is there any way by which an application deployed in AKS can call or use TPM related packages/specification during runtime?

Revision history for this message
Bernard Stafford (bernard010) said : 		#3

There is no longer support for AKS for Ubuntu 18.04: Too many issues.
https://github.com/Azure/AKS/issues/1487
https://github.com/Azure/AKS/issues

Revision history for this message
Rahul (rahul26136) said : 		#4

My query is about the TPM 2.0 module in Ubuntu. The SBOM report of the Ubuntu:18.04 container image (Docker Hub) does not contain "tpm2-tss", "tpm2-abrmd" and "tpm2-tools" packages or any TPM related library. Based on this can we say that the Ubuntu:18.04 Docker image is not using TPM specifications?

Is there any way by which an application deployed in AKS can call or use TPM related packages/specifications during runtime?

Can you help with this problem?

Provide an answer of your own, or ask Rahul for more information if necessary.

To post a message you must log in.