Regression: bcvk fails systemd-boot installation: Cannot allocate memory

[travier]

Using latest bcvk built from git here and downloaded with ORAS (https://github.com/bootc-dev/bcvk/blob/main/docs/src/installation.md#development-binaries), the following commands fails:

./bcvk libvirt run --name bootc-test --detach --firmware=uefi-secure --secure-boot-keys=$PWD/secureboot/keys --label=bootc.test=1 --filesystem=btrfs --composefs-backend --bootloader=systemd localhost/uki

With:

...
Bootloader: systemd
Installing bootloader via systemd-boot
Running in a chroot, enabling --graceful.
Created "/tmp/.tmpulGeO5/EFI".
Created "/tmp/.tmpulGeO5/EFI/systemd".
Created "/tmp/.tmpulGeO5/EFI/BOOT".
Created "/tmp/.tmpulGeO5/loader".
Created "/tmp/.tmpulGeO5/loader/keys".
Created "/tmp/.tmpulGeO5/loader/entries".
Created "/tmp/.tmpulGeO5/EFI/Linux".
Failed to read "/usr/lib/systemd/boot/efi": Cannot allocate memory
error: Installing to disk: Setting up composefs boot: Installing bootloader: Failed to run command: Command {
    program: "bootctl",
    args: [
        "bootctl",
        "install",
        "--esp-path",
        "/tmp/.tmpulGeO5",
    ],
    create_pidfd: false,
}
...

With bcvk 0.10.0 from Fedora and the same container image and same command, it goes pass that step. I have not bissected the issue yet.

[gursewak1997]

Hi @travier I'm trying to reproduce this issue but need more details about your localhost/uki image:

• How was it built? Can you share the Containerfile or which public image it's based on?

The issue is I'm hitting fs-verity errors with newer bootc images before even reaching the bootctl stage, so I need your exact image to reproduce.

[travier]

Hum, I can not reproduce this issue with https://github.com/cgwalters/rhel-bootc-examples/tree/sealed/sealing. I'll share my image.

[gursewak1997]

I'll share my image.

@travier any update on this if this is still an issue?