[2673546595] Upstream Reporter: Aashish Radhakrishnan
Upstream issue status: Closed
Upstream description:

1. 1. 1. Describe the bug

The ext.config.var-mount.luks kola test failed in the latest rawhide [build](https://jenkins-fedora-coreos-pipeline.apps.ocp.fedoraproject.org/job/build/3182/) . The reason for the failure what that the machine entered emergency.target in the initramfs stage causing the test to fail.

kola test failure:
```
[2024-11-19T13:12:28.282Z] — FAIL: ext.config.var-mount.luks (24.31s)
[2024-11-19T13:12:28.282Z] harness.go:1823: mach.Start() failed: machine 28319516-ff0b-4c0f-a1b0-7d1d045204ae entered emergency.target in initramfs
[2024-11-19T13:12:28.282Z] FAIL, output in /home/jenkins/agent/workspace/build/tmp/kola-lf7Xi/kola/rerun
[2024-11-19T13:12:28.282Z] Error: harness: test suite failed
[2024-11-19T13:12:28.282Z] 2024-11-19T13:12:25Z cli: harness: test suite failed
[2024-11-19T13:12:28.282Z] failed to execute cmd-kola: exit status 1
```

This issue is found to occur after the clevis pkg upgrade from clevis-21-6.fc42 -> 21-7.fc42

```
clevis (21-6.fc42 ? 21-7.fc42)
clevis-dracut (21-6.fc42 ? 21-7.fc42)
clevis-luks (21-6.fc42 ? 21-7.fc42)
clevis-systemd (21-6.fc42 ? 21-7.fc42)

```

Console log:
From the console log, an ignition-disks.service failure seem to have occurred as the Clevis bind operation for setting up LUKS encryption failed due to missing tools in the environment

[console.txt](https://github.com/user-attachments/files/17821702/console.txt)

```
[ 16.662679] ignition[871]: disks: createLuks: op(b): [finished] opening luks device varlog
[ 16.666771] ignition[871]: disks: createLuks: op(c): [started] Clevis bind
[ 18.695645] ignition[871]: disks: createLuks: op(c): [failed] Clevis bind: exit status 1: Cmd: "clevis" "luks" "bind" "-f" "-k" "/tmp/ignition-luks-229972637" "-d" "/run/ignition/dev_aliases/dev/disk/by-partlabel/varlog" "sss" "{"pins":{"tpm2":{}},"t":1}" Stdout: "Warning: keyslot operation could fail as it requires more than available memory.n" Stderr: "/usr/bin/clevis-encrypt-tpm2: line 137: tpm2_getcap: command not foundnUnable to find non-empty PCR algorithm bank, please check output of tpm2_getcap pcrsnUnable to perform encryption with PIN 'sss' and config '{"pins":{"tpm2":{}},"t":1}'nError adding new binding to /run/ignition/dev_aliases/dev/disk/by-partlabel/varlogn"
M
[FAILED] Failed to start ignition-disks.service - Ignition (disks).

See 'systemctl status ignition-disks.service' for details.

[[0;1;38:5:185mDEPEND] Dependency failed for ignition-complete.target - Ignition Complete.

[[0;1;38:5:185mDEPEND] Dependency failed for initrd.target - Initrd Default Target.

[ 18.713497] systemd[1]: ignition-disks.service: Main process exited, code=exited, status=1/FAILURE
[ 18.715874] ignition[871]: disks failed

```

1. 1. 1. Reproduction steps

```
git checkout rawhide in fedora-coreos-config
cosa fetch && cosa build
kola run ext.config.var-mount.luks
```

1. 1. 1. Expected behavior

ext.config.var-mount.luks test to pass

1. 1. 1. Actual behavior

ext.config.var-mount.luks test fails as the machine enters emergency.target in the initramfs

1. 1. 1. System details

[rawhide][x86_64]

1. 1. 1. Butane or Ignition config

No response

1. 1. 1. Additional information

No response