I think I got it, it is around that .rnd file as mentioned in the log. Indeed after running this as root I have: $ sudo ls -laF /root/.rnd -rw------- 1 root root 1024 Apr 7 08:16 /root/.rnd
But running as swtpm I get this with strace: This is the initial failure: [pid 3049] 13:10:20 (+ 0.000102) openat(AT_FDCWD, "./.rnd", O_RDONLY) = -1 EACCES (Permission denied) [pid 3047] 13:10:20 (+ 0.000027) read(5, "Can't load ./.rnd into RNG\n40977"..., 4096) = 161 And the others are follow ups: [pid 3049] 13:10:20 (+ 0.000153) newfstatat(AT_FDCWD, "./.rnd", 0x7ffec42c6260, 0) = -1 EACCES (Permission denied) [pid 3049] 13:10:20 (+ 0.000099) openat(AT_FDCWD, "./.rnd", O_WRONLY|O_CREAT, 0600) = -1 EACCES (Permission denied) [pid 3049] 13:10:20 (+ 0.000112) openat(AT_FDCWD, "./.rnd", O_WRONLY|O_CREAT|O_TRUNC, 0666) = -1 EACCES (Permission denied) [pid 3049] 13:10:20 (+ 0.000101) write(2, "Cannot write random bytes:\n", 27) = 27 [pid 3049] 13:10:20 (+ 0.000104) write(2, "40977E3CD27F0000:error:12000079:"..., 135 <unfinished ...> -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1968131 Title: Starting VM with UEFI firmware fails with swtpm To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1968131/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs