IncusOS not updating / starting

IncusOS
1

Hi,

my IncusOS is having problems, e g. it all started that I was not able to start a container any longer, it complained that a config was missing?! The container runs fine on a different incusOS server, though.
After an manual move of all workloads to a different IncusOS host, I started an update.. which ended in a system not starting… and as the server is headless, I connected it after power off to my main monitor and saw that I had to apply the encryption key..

After doing that (which is a pain :slight_smile: ), the server downloaded the OS update, but failed to apply with the following error:

Error Failed to check for OS updates: unable to update PCR4+7
encryption bindings; if the system was booted with a recovery
passphrase, please re-bind the TPM and try again (provider: images )

I was not able to successfully get the system back online, no matter what I did in the Bios :frowning:

As I have two identical Server, this are the specs:

Minixforum UM780 TXT, 64G Ram, 256G SSD OS, and 1TB pool for workloads..
The Bios is not able to boot with SecureBoot enabled, hence I installed it with only TPM enabled..
I had a similar issue earlier this year, and re-installed the whole server. But that’s not an option for every update :slight_smile:

From the still running server:

Version	202601260318
Update status	Failed to check for OS updates
Installed applications	 incus 202603060011

That “fail to check for OS updates” is not a network issue, the other hardware based server is updating free, and the application is also “current”.

Any idea what to do? Happy to re-install, but I’d like to have along term solution…

Thanks

2

Did you run the rebind operation as requested?

incus admin os system security tpm-rebind
3

nope…was not aware of this command.. I was doing stuff in the Bios and finally messed it up :frowning: Clearing TMP was a bad idea …

I’m reinstalling right now, let’s see, if that solves the issue… I still have the second server to update

4

In case someone else has something similar in the future: the command provided by @stgraber worked on my 2nd server.

As the problem was exactly the same with my 2nd server, I guess it happened due to my ignorance rebooting the server for several weeks, hence not applying any OS update, but application updates..

The one thing I noticed: after providing the enc key first time, incusOS was not able to apply the newly downloaded image… after the tpm-rebind it did.. but I had to provide the enc key after that OS reboot one more time…

Don‘t know if that’s expected… but at least the 2nd server is now up2date w/o reinstalling

Thanks again for this great platform!