OS Update Fails on One Device – Need Help Resolving

Product support balenaOS
1

Hi team,

I’m facing an issue while trying to update the OS on one of my devices. Every time I initiate the update, it gets stuck and eventually shows “OS update failed”.

I’ve tried restarting the device and reattempting the update, but the problem persists. Other devices are updating fine — it’s just this one that’s causing trouble.

Has anyone encountered this before or can suggest steps to troubleshoot and resolve it?

Thanks in advance for your support!
WARNING:esys:../tpm2-tss-3.2.0/src/tss2-esys/api/Esys_EvictControl.c:330:Esys_EvictControl_Finish() Received TPM Error
ERROR:esys:../tpm2-tss-3.2.0/src/tss2-esys/api/Esys_EvictControl.c:114:Esys_EvictControl() Esys Finish ErrorCode (0x0000014b)
ERROR: Esys_EvictControl(0x14B) - tpm:error(2.0): insufficient space for NV allocation
ERROR:esys:../tpm2-tss-3.2.0/src/tss2-esys/esys_tr.c:356:Esys_TR_Close() Error: Esys handle does not exist (70018).
ERROR: Esys_TR_Close(0x70018) - esapi:The ESYS_TR resource object is bad
ERROR: Unable to run tpm2_evictcontrol
[hostapp-update][ERROR] Failed to run the new hooks. Running current hooks..

2

Hi @Aditya1 ,

Can you do me a favour and run journalctl | grep "VPN connection is" on the HostOS just to make sure your VPN connection is stable when performing the update?

3

Hi @samuel-duffield1 **
it gives result this and VPN connection is stable when i am upgrading the OS**

Oct 14 11:12:17 f6ff590 8bc19dc80882[3306]: [info] VPN connection is not active.
Oct 14 11:12:17 f6ff590 balena-supervisor[5921]: [info] VPN connection is not active.
Oct 14 11:13:35 f6ff590 8bc19dc80882[3315]: [info] VPN connection is not active.
Oct 14 11:13:35 f6ff590 balena-supervisor[5918]: [info] VPN connection is not active.
Oct 14 11:13:43 f6ff590 8bc19dc80882[3315]: [info] VPN connection is active.
Oct 14 11:13:43 f6ff590 8bc19dc80882[3315]: [info] VPN connection is active.
Oct 14 11:13:43 f6ff590 balena-supervisor[5918]: [info] VPN connection is active.
Oct 14 11:13:43 f6ff590 balena-supervisor[5918]: [info] VPN connection is active.
Oct 14 11:13:43 f6ff590 balena-supervisor[5918]: [info] VPN connection is active.
Oct 14 11:13:43 f6ff590 balena-supervisor[5918]: [info] VPN connection is active.
Oct 14 11:13:43 f6ff590 8bc19dc80882[3315]: [info] VPN connection is active.
Oct 14 11:13:43 f6ff590 8bc19dc80882[3315]: [info] VPN connection is active.

4

@samuel-duffield1 What can i do further to resolve this issue

5

@Aditya1, what device type are you using? Given the TPM errors, I’m guessing Generic x86_64 (GPT) with secure boot enabled. True?

6

@rosswesleyporter Yes it is and secure boot enabled

7

This is the most likely cause. Yes, we’ve encountered this error in the lab and the only solution I could find so far is to clear TPM (tpm2_clear) and re-flash, which is obviously rather destructive. There may be another solution, we’ll need to check and come back to this here.

8

@ab77 thanks for checking in. Waiting for your response regarding the other solution

9

Hi @Aditya1,

A few follow-up questions:

  • What is the current balenaOS version on the device?
  • What balenaOS version are you trying to upgrade to?
  • What hardware (or virtual machine) are you using?
  • Has the device been provisioned or upgraded an unusual number of times e.g. more than 10?
  • Are you using the TPM for anything besides secure boot?