From 1494cb04ea145f8ce706413f05a28cadc93059f1 Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@amutable.com>
Date: Tue, 10 Mar 2026 08:04:52 +0100
Subject: [PATCH] pcrlock: don't fail if firmware measurements aren't available

With swtpm in place we now commonly have systems where TPM is available
during runtime, but not in the firmware. Handle that nicely.
---
 src/pcrlock/pcrlock.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/pcrlock/pcrlock.c b/src/pcrlock/pcrlock.c
index ddae43dc54..c940ab01e8 100644
--- a/src/pcrlock/pcrlock.c
+++ b/src/pcrlock/pcrlock.c
@@ -899,6 +899,10 @@ static int event_log_load_firmware(EventLog *el) {
         path = tpm2_firmware_log_path();
 
         r = read_full_file(path, (char**) &buf, &bufsize);
+        if (r == -ENOENT) {
+                log_notice("No '%s' file, assuming TPM without firmware support.", path);
+                return 0;
+        }
         if (r < 0)
                 return log_error_errno(r, "Failed to open TPM2 event log '%s': %m", path);