Merge ~jocave/plainbox-provider-tpm2:move-to-roots-home into plainbox-provider-tpm2:master

[Jonathan Cave]

We need a quick solution for tpm2 tests to pass now that checkbox is running as a service as root. This is quickest (and dirtiest) solution I think we have.

[Sylvain Pineau (sylvain-pineau)]

+/- 1

Let me xplain, it's probably the less annoying way to solve the problem but keep in mind the same test are used via deb packages too.

So let's keep your first commit but also add user: root to every single job in: https://git.launchpad.net/plainbox-provider-tpm2/tree/units/tpm2_1.1.pxu

review: Needs Fixing

[Jonathan Cave (jocave)]

Modifed the tpm2_1.1 jobs to ensure run as root.

review: Needs Resubmitting

[Sylvain Pineau (sylvain-pineau)]

"Don't push the red button!"

I did

review: Approve

[Devices Certification Bot (ce-certification-qa)]

The merge was fine but running tests failed.

[trusty] [07:51:28] starting container
Device project added to trusty-testing
[xenial] [07:51:33] starting container
[xenial] [07:51:34] Unable to start ephemeral container!
[xenial] output: https://paste.ubuntu.com/p/gHZx4CkTDj/
[xenial] NOTE: unable to execute tests, marked as failed
[xenial] Destroying failed container to reclaim resources
[bionic] [07:51:48] starting container
[bionic] [07:51:49] Unable to start ephemeral container!
[trusty] [07:51:50] provisioning container
[bionic] output: https://paste.ubuntu.com/p/ymp684z5H7/
[bionic] NOTE: unable to execute tests, marked as failed
[bionic] Destroying failed container to reclaim resources
[trusty] [07:53:17] Starting tests...
[trusty] Found a test script: ./requirements/container-tests-provider-tpm2
[trusty] [07:54:47] container-tests-provider-tpm2: PASS
[trusty] [07:54:47] Fixing file permissions in source directory
[trusty] [07:54:47] Destroying container

review: Needs Fixing

[Devices Certification Bot (ce-certification-qa)]

The merge was fine but running tests failed.

[xenial] [10:10:54] starting container
[xenial] [10:10:55] Unable to start ephemeral container!
[bionic] [10:10:56] starting container
[bionic] [10:10:57] Unable to start ephemeral container!
[xenial] output: https://paste.ubuntu.com/p/7d4TZp2TV9/
[xenial] NOTE: unable to execute tests, marked as failed
[xenial] Destroying failed container to reclaim resources
[bionic] output: https://paste.ubuntu.com/p/zWnTMT2NQH/
[bionic] NOTE: unable to execute tests, marked as failed
[bionic] Destroying failed container to reclaim resources
[trusty] [10:11:14] starting container
Device project added to trusty-testing
[trusty] [10:11:25] provisioning container
[trusty] [10:12:42] Starting tests...
[trusty] Found a test script: ./requirements/container-tests-provider-tpm2
[trusty] [10:13:26] container-tests-provider-tpm2: PASS
[trusty] [10:13:26] Fixing file permissions in source directory
[trusty] [10:13:26] Destroying container

review: Needs Fixing

diff --git a/bin/test_tpm2_activecredential.sh b/bin/test_tpm2_activecredential.sh
index 01d31b6..a2f67c7 100755
--- a/bin/test_tpm2_activecredential.sh
+++ b/bin/test_tpm2_activecredential.sh
@@ -37,12 +37,12 @@ ak_alg=0x0001
 digestAlg=0x000B 
 signAlg=0x0014
 
-file_input_data=/home/$USER/secret.data
-output_ek_pub=/home/$USER/ek_pub.out
-output_ak_pub=/home/$USER/ak_pub.out
-output_ak_pub_name=/home/$USER/ak_name_pub.out
-output_mkcredential=/home/$USER/mkcredential.out
-output_actcredential=/home/$USER/actcredential.out
+file_input_data=/root/secret.data
+output_ek_pub=/root/ek_pub.out
+output_ak_pub=/root/ak_pub.out
+output_ak_pub_name=/root/ak_name_pub.out
+output_mkcredential=/root/mkcredential.out
+output_actcredential=/root/actcredential.out
 
 fail()
 {
@@ -62,12 +62,12 @@ if [ $? != 0 ] || [ ! -e $output_ek_pub ];then
 	fail getpubek 
 fi
 
-tpm2_getpubak  -E $handle_ek  -k $handle_ak -g $ak_alg -D $digestAlg -s $signAlg -f $output_ak_pub  -n $output_ak_pub_name |tee /home/$USER/output_ak
-if [ $? != 0 ] || [ ! -e /home/$USER/output_ak ];then
+tpm2_getpubak  -E $handle_ek  -k $handle_ak -g $ak_alg -D $digestAlg -s $signAlg -f $output_ak_pub  -n $output_ak_pub_name |tee /root/output_ak
+if [ $? != 0 ] || [ ! -e /root/output_ak ];then
 	fail getpubak 
 fi
-grep  -A 3 "Name of loaded key:" /home/$USER/output_ak|tr "\n" " " >/home/$USER/grep.txt
-Loadkeyname=`sed -e 's/ //g'  /home/$USER/grep.txt | awk  -F':' '{print $2}'`
+grep  -A 3 "Name of loaded key:" /root/output_ak|tr "\n" " " >/root/grep.txt
+Loadkeyname=`sed -e 's/ //g'  /root/grep.txt | awk  -F':' '{print $2}'`
 
 tpm2_makecredential -e $output_ek_pub  -s $file_input_data  -n $Loadkeyname -o $output_mkcredential
 if [ $? != 0 ];then
diff --git a/bin/test_tpm2_akparse.sh b/bin/test_tpm2_akparse.sh
index 40785f0..ff00ae5 100755
--- a/bin/test_tpm2_akparse.sh
+++ b/bin/test_tpm2_akparse.sh
@@ -34,8 +34,8 @@
 new_path=`dirname $0`
 PATH="$PATH":"$new_path"
 
-file_input_data=/home/$USER/ak_pub.out
-output_akparse=/home/$USER/akparse.out
+file_input_data=/root/ak_pub.out
+output_akparse=/root/akparse.out
 
 rm $output_ekparse -rf 
 
diff --git a/bin/test_tpm2_certify.sh b/bin/test_tpm2_certify.sh
index 56e23a6..dd1e17d 100755
--- a/bin/test_tpm2_certify.sh
+++ b/bin/test_tpm2_certify.sh
@@ -30,13 +30,13 @@
 # THE POSSIBILITY OF SUCH DAMAGE.
 #;**********************************************************************;
 #!/bin/bash
-file_primary_key_ctx=/home/$USER/context.p_B1
-file_certify_key_pub=/home/$USER/opuB1_B8
-file_certify_key_priv=/home/$USER/oprB1_B8
-file_certify_key_ctx=/home/$USER/context_load_out_B1_B8
-file_certify_key_name=/home/$USER/name.load.B1_B8
-file_output_attest=/home/$USER/attest.out
-file_output_signature=/home/$USER/certify_signature.out
+file_primary_key_ctx=/root/context.p_B1
+file_certify_key_pub=/root/opuB1_B8
+file_certify_key_priv=/root/oprB1_B8
+file_certify_key_ctx=/root/context_load_out_B1_B8
+file_certify_key_name=/root/name.load.B1_B8
+file_output_attest=/root/attest.out
+file_output_signature=/root/certify_signature.out
   
 
 alg_hash=0x000B
diff --git a/bin/test_tpm2_create_all.sh b/bin/test_tpm2_create_all.sh
index 7664c70..81056a3 100755
--- a/bin/test_tpm2_create_all.sh
+++ b/bin/test_tpm2_create_all.sh
@@ -39,9 +39,9 @@ GAlg=
 gAlgList="0x04 0x0B"
 STATUS=0
 
-rm -f /home/$USER/create.error.log /home/$USER/opr* /home/$USER/opu*
+rm -f /root/create.error.log /root/opr* /root/opu*
 
-ctx_count=`ls /home/$USER/ | grep -c ^ctx.cpri`
+ctx_count=`ls /root/ | grep -c ^ctx.cpri`
 if [ $ctx_count -le 1 ];then
 	echo "we should execute test_tpm2_createprimary_all.sh first!"
     test_tpm2_createprimary_all.sh
@@ -59,16 +59,16 @@ if [[ "$@" == *"--sm3256"* ]]; then
     gAlgList="$gAlgList 0x12"
 fi
 
-for pCtx in `ls /home/$USER/ctx.cpri*`
+for pCtx in `ls /root/ctx.cpri*`
     do
     for gAlg in $gAlgList
         do 
         for GAlg in 0x01 0x08 0x23 0x25
             do 
-            tpm2_create -c $pCtx -g $gAlg -G $GAlg -o /home/$USER/opu."$pCtx".g"$gAlg".G"$GAlg" -O /home/$USER/opr."$pCtx".g"$gAlg".G"$GAlg"
+            tpm2_create -c $pCtx -g $gAlg -G $GAlg -o /root/opu."$pCtx".g"$gAlg".G"$GAlg" -O /root/opr."$pCtx".g"$gAlg".G"$GAlg"
             if [ $? != 0 ];then 
             echo "tpm2_create error: pCtx=$pCtx gAlg=$gAlg GAlg=$GAlg"
-            echo "tpm2_create error: pCtx=$pCtx gAlg=$gAlg GAlg=$GAlg" >> /home/$USER/create.error.log
+            echo "tpm2_create error: pCtx=$pCtx gAlg=$gAlg GAlg=$GAlg" >> /root/create.error.log
             STATUS=1
             fi
         done
diff --git a/bin/test_tpm2_createprimary_all.sh b/bin/test_tpm2_createprimary_all.sh
index b7f5f9a..658b6ab 100755
--- a/bin/test_tpm2_createprimary_all.sh
+++ b/bin/test_tpm2_createprimary_all.sh
@@ -54,7 +54,7 @@ if [[ "$@" == *"--platform"* ]]; then
     AtypeList="$AtypeList p"
 fi
 
-rm -f /home/$USER/createprimary.error.log /home/$USER/ctx.cpri.*
+rm -f /root/createprimary.error.log /root/ctx.cpri.*
 
 for gAlg in $gAlgList
     do 
@@ -62,10 +62,10 @@ for gAlg in $gAlgList
             do 
                 for Atype in $AtypeList
                     do 
-                    tpm2_createprimary -A $Atype -g $gAlg -G $GAlg -C /home/$USER/ctx.cpri."$Atype".g"$gAlg".G"$GAlg"
+                    tpm2_createprimary -A $Atype -g $gAlg -G $GAlg -C /root/ctx.cpri."$Atype".g"$gAlg".G"$GAlg"
                     if [ $? != 0 ];then 
                     echo "tpm2_createprimary error: Atype=$Atype gAlg=$gAlg GAlg=$GAlg"
-                    echo "tpm2_createprimary error: Atype=$Atype gAlg=$gAlg GAlg=$GAlg" >> /home/$USER/createprimary.error.log
+                    echo "tpm2_createprimary error: Atype=$Atype gAlg=$gAlg GAlg=$GAlg" >> /root/createprimary.error.log
                     STATUS=1
                     fi
                 done
diff --git a/bin/test_tpm2_encryptdecrypt.sh b/bin/test_tpm2_encryptdecrypt.sh
index 1d7f4ff..5373595 100755
--- a/bin/test_tpm2_encryptdecrypt.sh
+++ b/bin/test_tpm2_encryptdecrypt.sh
@@ -35,14 +35,14 @@ alg_primary_key=0x0001
 alg_create_obj=0x000B
 alg_create_key=0x0025
 
-file_input_data=/home/$USER/secret.data
-file_primary_key_ctx=/home/$USER/context.p_"$alg_primary_obj"_"$alg_primary_key"
-file_en_decrypt_key_pub=/home/$USER/opu_"$alg_create_obj"_"$alg_create_key"
-file_en_decrypt_key_priv=/home/$USER/opr_"$alg_create_obj"_"$alg_create_key"
-file_en_decrypt_key_name=/home/$USER/name.load_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
-file_en_decrypt_key_ctx=/home/$USER/ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
-file_encrypt_output_data=/home/$USER/encrypt_ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
-file_decrypt_output_data=/home/$USER/decrypt_ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_input_data=/root/secret.data
+file_primary_key_ctx=/root/context.p_"$alg_primary_obj"_"$alg_primary_key"
+file_en_decrypt_key_pub=/root/opu_"$alg_create_obj"_"$alg_create_key"
+file_en_decrypt_key_priv=/root/opr_"$alg_create_obj"_"$alg_create_key"
+file_en_decrypt_key_name=/root/name.load_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_en_decrypt_key_ctx=/root/ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_encrypt_output_data=/root/encrypt_ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_decrypt_output_data=/root/decrypt_ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
 
 fail()
 {
@@ -51,7 +51,7 @@ fail()
 }
 Pass()
 {
-	    echo ""$1" pass" >>/home/$USER/test_getpubak_pass.log
+	    echo ""$1" pass" >>/root/test_getpubak_pass.log
 }
 
 rm $file_primary_key_ctx $file_en_decrypt_key_pub $file_en_decrypt_key_priv $file_en_decrypt_key_name $file_en_decrypt_key_ctx  $file_encrypt_output_data $file_decrypt_output_data -rf
diff --git a/bin/test_tpm2_evictcontrol.sh b/bin/test_tpm2_evictcontrol.sh
index a35aeb5..d58ba45 100755
--- a/bin/test_tpm2_evictcontrol.sh
+++ b/bin/test_tpm2_evictcontrol.sh
@@ -30,11 +30,11 @@
 # THE POSSIBILITY OF SUCH DAMAGE.
 #;**********************************************************************;
 #!/bin/bash
-file_primary_key_ctx=/home/$USER/context.p_B1
-file_evict_key_pub=/home/$USER/opuB1_B8
-file_evict_key_priv=/home/$USER/oprB1_B8
-file_evict_key_ctx=/home/$USER/context_load_out_B1_B8
-file_evict_key_name=/home/$USER/name.load.B1_B8
+file_primary_key_ctx=/root/context.p_B1
+file_evict_key_pub=/root/opuB1_B8
+file_evict_key_priv=/root/oprB1_B8
+file_evict_key_ctx=/root/context_load_out_B1_B8
+file_evict_key_name=/root/name.load.B1_B8
   
 persistentHandle=0x81010003
 
diff --git a/bin/test_tpm2_getpubak.sh b/bin/test_tpm2_getpubak.sh
index 618173e..139473f 100755
--- a/bin/test_tpm2_getpubak.sh
+++ b/bin/test_tpm2_getpubak.sh
@@ -36,9 +36,9 @@ ek_alg=0x001
 ak_alg=0x0001
 digestAlg=0x000B 
 signAlg=0x0014
-output_ek_pub=/home/$USER/ek_pub.out
-output_ak_pub=/home/$USER/ak_pub.out
-output_ak_pub_name=/home/$USER/ak_name_pub.out
+output_ek_pub=/root/ek_pub.out
+output_ak_pub=/root/ak_pub.out
+output_ak_pub_name=/root/ak_name_pub.out
 
 rm $output_ek_pub $output_ak_pub $output_ak_pub_name -rf 
 
diff --git a/bin/test_tpm2_getpubek.sh b/bin/test_tpm2_getpubek.sh
index 1025578..ad8eaf0 100755
--- a/bin/test_tpm2_getpubek.sh
+++ b/bin/test_tpm2_getpubek.sh
@@ -32,7 +32,7 @@
 #!/bin/bash
 handle_ek=0x81010005
 ek_alg=0x001
-output_ek_pub=/home/$USER/ek_pub.out
+output_ek_pub=/root/ek_pub.out
 
 rm -f $output_ek_pub
 
diff --git a/bin/test_tpm2_getrandom.sh b/bin/test_tpm2_getrandom.sh
index 826162a..7b50ec7 100755
--- a/bin/test_tpm2_getrandom.sh
+++ b/bin/test_tpm2_getrandom.sh
@@ -33,9 +33,9 @@
 
 size=32
 
-rm -f  /home/$USER/random.out
+rm -f  /root/random.out
 
-tpm2_getrandom -s 32  -o /home/$USER/random.out
+tpm2_getrandom -s 32  -o /root/random.out
 if [ $? != 0 ];then
 	    echo "getrandom test fail, please check the environment or parameters!"
 		exit 1
diff --git a/bin/test_tpm2_getrandom_func.sh b/bin/test_tpm2_getrandom_func.sh
index 2182ea8..e431e86 100755
--- a/bin/test_tpm2_getrandom_func.sh
+++ b/bin/test_tpm2_getrandom_func.sh
@@ -32,7 +32,7 @@
 #!/bin/sh
 #this script for tpm2_getrandom verification 
 
-LOG_FILE=/home/$USER/random_pass_count.log
+LOG_FILE=/root/random_pass_count.log
  if [ -e "$LOG_FILE" ];then
   rm -f "$LOG_FILE"
  fi
@@ -40,7 +40,7 @@ i=
 
 #for((i=1;i<=10;i++)); do
 for i in `seq 100`; do
-	tpm2_getrandom -s 32  -o /home/$USER/random_"$i".out
+	tpm2_getrandom -s 32  -o /root/random_"$i".out
 	 if  [ $? != 0 ];then
 	  echo " create random_"$i".out fail, please check the environment or parameters!"
 	  exit 2
diff --git a/bin/test_tpm2_hash.sh b/bin/test_tpm2_hash.sh
index 11cc26c..5b24b0b 100755
--- a/bin/test_tpm2_hash.sh
+++ b/bin/test_tpm2_hash.sh
@@ -35,14 +35,14 @@
 halg=0x000B
 Hierarchy=e
 
-rm -f  /home/$USER/hash_out_"$Hierarchy"_"$halg" /home/$USER/hash_tk_"$Hierarchy"_"$halg"
+rm -f  /root/hash_out_"$Hierarchy"_"$halg" /root/hash_tk_"$Hierarchy"_"$halg"
 
-if [ ! -f /home/$USER/hash.in ];then
-echo "T0naX0u123abc" >/home/$USER/hash.in
+if [ ! -f /root/hash.in ];then
+echo "T0naX0u123abc" >/root/hash.in
 fi
 
 	
-tpm2_hash -H $Hierarchy -g $halg -I /home/$USER/hash.in -o /home/$USER/hash_out_"$Hierarchy"_"$halg" -t /home/$USER/hash_tk_"$Hierarchy"_"$halg"
+tpm2_hash -H $Hierarchy -g $halg -I /root/hash.in -o /root/hash_out_"$Hierarchy"_"$halg" -t /root/hash_tk_"$Hierarchy"_"$halg"
 if [ $? != 0 ];then
 	    echo "hash forHierarchy:"$Hierarchy"halg:"$halg" fail, please check the environment or parameters!"
 		exit 1
diff --git a/bin/test_tpm2_hmac.sh b/bin/test_tpm2_hmac.sh
index a0b5000..e668bd9 100755
--- a/bin/test_tpm2_hmac.sh
+++ b/bin/test_tpm2_hmac.sh
@@ -38,14 +38,14 @@ halg=0x000B
 
 handle_hmac_key=0x81010013
 
-file_primary_key_ctx=/home/$USER/context.p_"$alg_primary_obj"_"$alg_primary_key"
-file_hmac_key_pub=/home/$USER/opu_"$alg_create_obj"_"$alg_create_key"
-file_hmac_key_priv=/home/$USER/opr_"$alg_create_obj"_"$alg_create_key"
-file_hmac_key_name=/home/$USER/name.load_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
-file_hmac_key_ctx=/home/$USER/ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
-file_hmac_output=/home/$USER/hmac_ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_primary_key_ctx=/root/context.p_"$alg_primary_obj"_"$alg_primary_key"
+file_hmac_key_pub=/root/opu_"$alg_create_obj"_"$alg_create_key"
+file_hmac_key_priv=/root/opr_"$alg_create_obj"_"$alg_create_key"
+file_hmac_key_name=/root/name.load_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_hmac_key_ctx=/root/ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_hmac_output=/root/hmac_ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
 
-file_input_data=/home/$USER/secret.data
+file_input_data=/root/secret.data
 
 fail()
 {
@@ -54,7 +54,7 @@ fail()
 }
 Pass()
 {
-	    echo ""$1" pass" >>/home/$USER/test_getpubak_pass.log
+	    echo ""$1" pass" >>/root/test_getpubak_pass.log
 }
 
 rm $file_primary_key_ctx $file_hmac_key_pub $file_hmac_key_priv $file_hmac_key_name $file_hmac_key_ctx  $file_hmac_output  -rf
@@ -87,9 +87,9 @@ fi
 
 ####handle test
 rm -f $file_hmac_output  
-tpm2_evictcontrol -A o -c $file_hmac_key_ctx -S $handle_hmac_key |tee /home/$USER/evict.log
+tpm2_evictcontrol -A o -c $file_hmac_key_ctx -S $handle_hmac_key |tee /root/evict.log
 c1="$?"
-grep "persistentHandle: "$handle_hmac_key"" /home/$USER/evict.log
+grep "persistentHandle: "$handle_hmac_key"" /root/evict.log
 c2="$?"
 
 if [ $c1 != 0 ] || [ $c2 != 0  ];then
diff --git a/bin/test_tpm2_listpcrs.sh b/bin/test_tpm2_listpcrs.sh
index 3fac1cf..beaa55d 100755
--- a/bin/test_tpm2_listpcrs.sh
+++ b/bin/test_tpm2_listpcrs.sh
@@ -46,9 +46,9 @@ if [ $? != 0 ];then
  exit 1
 fi
 
-rm -rf /home/$USER/pcrs
+rm -rf /root/pcrs
 
-tpm2_listpcrs -L 0x04:17,18,19+0x0b:0,17,18,19 -o /home/$USER/pcrs
+tpm2_listpcrs -L 0x04:17,18,19+0x0b:0,17,18,19 -o /root/pcrs
 
 if [ $? != 0 ];then 
  echo "listpcrs  fail!"
diff --git a/bin/test_tpm2_load.sh b/bin/test_tpm2_load.sh
index e348d79..297a980 100755
--- a/bin/test_tpm2_load.sh
+++ b/bin/test_tpm2_load.sh
@@ -37,12 +37,12 @@ alg_create_key=0x0008
 
 alg_load=0x0004
 
-file_primary_key_ctx=/home/$USER/context.p_"$alg_primary_obj"_"$alg_primary_key"
-file_load_key_pub=/home/$USER/opu_"$alg_create_obj"_"$alg_create_key"
-file_load_key_priv=/home/$USER/opr_"$alg_create_obj"_"$alg_create_key"
-file_load_key_name=/home/$USER/name.load_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
-file_load_key_ctx=/home/$USER/ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
-file_load_output=/home/$USER/load_"$file_load_key_ctx"
+file_primary_key_ctx=/root/context.p_"$alg_primary_obj"_"$alg_primary_key"
+file_load_key_pub=/root/opu_"$alg_create_obj"_"$alg_create_key"
+file_load_key_priv=/root/opr_"$alg_create_obj"_"$alg_create_key"
+file_load_key_name=/root/name.load_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_load_key_ctx=/root/ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_load_output=/root/load_"$file_load_key_ctx"
 
 Handle_parent=0x81010018
 Handle_ek_load=0x81010017
@@ -55,7 +55,7 @@ fail()
 }
 Pass()
 {
-	    echo ""$1" pass" >>/home/$USER/test_getpubak_pass.log
+	    echo ""$1" pass" >>/root/test_getpubak_pass.log
 }
 
 rm $file_primary_key_ctx $file_load_key_pub $file_load_key_priv $file_load_key_name $file_load_key_ctx  $file_load_output  -rf
diff --git a/bin/test_tpm2_loadexternal.sh b/bin/test_tpm2_loadexternal.sh
index 60da495..c60f363 100755
--- a/bin/test_tpm2_loadexternal.sh
+++ b/bin/test_tpm2_loadexternal.sh
@@ -36,12 +36,12 @@ alg_create_obj=0x000B
 alg_create_key=0x0008
 
 
-file_primary_key_ctx=/home/$USER/context.p_"$alg_primary_obj"_"$alg_primary_key"
-file_loadexternal_key_pub=/home/$USER/opu_"$alg_create_obj"_"$alg_create_key"
-file_loadexternal_key_priv=/home/$USER/opr_"$alg_create_obj"_"$alg_create_key"
-file_loadexternal_key_name=/home/$USER/name.loadexternal_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
-file_loadexternal_key_ctx=/home/$USER/ctx_loadexternal_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
-file_loadexternal_output=/home/$USER/loadexternal_"$file_loadexternal_key_ctx"
+file_primary_key_ctx=/root/context.p_"$alg_primary_obj"_"$alg_primary_key"
+file_loadexternal_key_pub=/root/opu_"$alg_create_obj"_"$alg_create_key"
+file_loadexternal_key_priv=/root/opr_"$alg_create_obj"_"$alg_create_key"
+file_loadexternal_key_name=/root/name.loadexternal_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_loadexternal_key_ctx=/root/ctx_loadexternal_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_loadexternal_output=/root/loadexternal_"$file_loadexternal_key_ctx"
 
 Handle_parent=0x81010019
 
@@ -53,7 +53,7 @@ fail()
 }
 Pass()
 {
-	    echo ""$1" pass" >>/home/$USER/test_getpubak_pass.log
+	    echo ""$1" pass" >>/root/test_getpubak_pass.log
 }
 
 rm $file_primary_key_ctx $file_loadexternal_key_pub $file_loadexternal_key_priv $file_loadexternal_key_name $file_loadexternal_key_ctx  $file_loadexternal_output  -rf
diff --git a/bin/test_tpm2_makecredential.sh b/bin/test_tpm2_makecredential.sh
index 741ec4e..04969fd 100755
--- a/bin/test_tpm2_makecredential.sh
+++ b/bin/test_tpm2_makecredential.sh
@@ -37,11 +37,11 @@ ak_alg=0x0001
 digestAlg=0x000B 
 signAlg=0x0014
 
-file_input_data=/home/$USER/secret.data
-output_ek_pub=/home/$USER/ek_pub.out
-output_ak_pub=/home/$USER/ak_pub.out
-output_ak_pub_name=/home/$USER/ak_name_pub.out
-output_mkcredential=/home/$USER/mkcredential.out
+file_input_data=/root/secret.data
+output_ek_pub=/root/ek_pub.out
+output_ak_pub=/root/ak_pub.out
+output_ak_pub_name=/root/ak_name_pub.out
+output_mkcredential=/root/mkcredential.out
 
 rm $output_ek_pub $output_ak_pub $output_ak_pub_name $output_mkcredential -rf 
 
@@ -56,14 +56,14 @@ if [ $? != 0 ] || [ ! -e $output_ek_pub ];then
 	exit 1
 fi
 
-tpm2_getpubak  -E $handle_ek  -k $handle_ak -g $ak_alg -D $digestAlg -s $signAlg -f $output_ak_pub  -n $output_ak_pub_name |tee /home/$USER/output_ak
+tpm2_getpubak  -E $handle_ek  -k $handle_ak -g $ak_alg -D $digestAlg -s $signAlg -f $output_ak_pub  -n $output_ak_pub_name |tee /root/output_ak
 
-if [ $? != 0 ] || [ ! -e /home/$USER/output_ak ];then
+if [ $? != 0 ] || [ ! -e /root/output_ak ];then
 	echo "getpubak fail, please check the environment or parameters!"
 	exit 1
 fi
-grep  -A 3 "Name of loaded key:" /home/$USER/output_ak|tr "\n" " " >/home/$USER/grep.txt
-Loadkeyname=`sed -e 's/ //g'  /home/$USER/grep.txt | awk  -F':' '{print $2}'`
+grep  -A 3 "Name of loaded key:" /root/output_ak|tr "\n" " " >/root/grep.txt
+Loadkeyname=`sed -e 's/ //g'  /root/grep.txt | awk  -F':' '{print $2}'`
 
 tpm2_makecredential -e $output_ek_pub  -s $file_input_data  -n $Loadkeyname -o $output_mkcredential
 
diff --git a/bin/test_tpm2_nv.sh b/bin/test_tpm2_nv.sh
index 4ee0fbe..636455e 100755
--- a/bin/test_tpm2_nv.sh
+++ b/bin/test_tpm2_nv.sh
@@ -55,10 +55,10 @@ fi
 
 
 if [ ! -f nv.test_w ];then
-echo "please123abc" >/home/$USER/nv.test_w
+echo "please123abc" >/root/nv.test_w
 fi
 
-tpm2_nvwrite -x $nv_test_index -a $nv_auth_handle  -f /home/$USER/nv.test_w
+tpm2_nvwrite -x $nv_test_index -a $nv_auth_handle  -f /root/nv.test_w
 if [ $? != 0 ];then 
 echo "nvwrite fail!"
 exit 1
diff --git a/bin/test_tpm2_readpublic.sh b/bin/test_tpm2_readpublic.sh
index 5281709..2aa56f0 100755
--- a/bin/test_tpm2_readpublic.sh
+++ b/bin/test_tpm2_readpublic.sh
@@ -35,12 +35,12 @@ alg_primary_key=0x0001
 alg_create_obj=0x000B
 alg_create_key=0x0008
 
-file_primary_key_ctx=/home/$USER/context.p_"$alg_primary_obj"_"$alg_primary_key"
-file_readpub_key_pub=/home/$USER/opu_"$alg_create_obj"_"$alg_create_key"
-file_readpub_key_priv=/home/$USER/opr_"$alg_create_obj"_"$alg_create_key"
-file_readpub_key_name=/home/$USER/name.load_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
-file_readpub_key_ctx=/home/$USER/ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
-file_readpub_output=/home/$USER/readpub_ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_primary_key_ctx=/root/context.p_"$alg_primary_obj"_"$alg_primary_key"
+file_readpub_key_pub=/root/opu_"$alg_create_obj"_"$alg_create_key"
+file_readpub_key_priv=/root/opr_"$alg_create_obj"_"$alg_create_key"
+file_readpub_key_name=/root/name.load_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_readpub_key_ctx=/root/ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_readpub_output=/root/readpub_ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
 
 Handle_readpub=0x81010014
 
@@ -51,7 +51,7 @@ fail()
 }
 Pass()
 {
-	    echo ""$1" pass" >>/home/$USER/test_getpubak_pass.log
+	    echo ""$1" pass" >>/root/test_getpubak_pass.log
 }
 
 rm $file_primary_key_ctx $file_readpub_key_pub $file_readpub_key_priv $file_readpub_key_name $file_readpub_key_ctx  $file_readpub_output  -rf
diff --git a/bin/test_tpm2_rsadecrypt.sh b/bin/test_tpm2_rsadecrypt.sh
index 156c703..7cf7797 100755
--- a/bin/test_tpm2_rsadecrypt.sh
+++ b/bin/test_tpm2_rsadecrypt.sh
@@ -30,16 +30,16 @@
 # THE POSSIBILITY OF SUCH DAMAGE.
 #;**********************************************************************;
 #!/bin/bash
-file_primary_key_ctx=/home/$USER/context.p_B1
-file_rsaencrypt_key_pub=/home/$USER/opuB1_B8
-file_rsaencrypt_key_priv=/home/$USER/oprB1_B8
-file_rsaencrypt_key_ctx=/home/$USER/context_loadext_out_B1_B8
-file_rsadecrypt_key_ctx=/home/$USER/context_load_out_B1_B8
-file_rsaencrypt_key_name=/home/$USER/name.load.B1_B8
+file_primary_key_ctx=/root/context.p_B1
+file_rsaencrypt_key_pub=/root/opuB1_B8
+file_rsaencrypt_key_priv=/root/oprB1_B8
+file_rsaencrypt_key_ctx=/root/context_loadext_out_B1_B8
+file_rsadecrypt_key_ctx=/root/context_load_out_B1_B8
+file_rsaencrypt_key_name=/root/name.load.B1_B8
 
-file_rsa_en_output_data=/home/$USER/rsa_en.out
-file_rsa_de_output_data=/home/$USER/rsa_de.out
-file_input_data=/home/$USER/secret.data
+file_rsa_en_output_data=/root/rsa_en.out
+file_rsa_de_output_data=/root/rsa_de.out
+file_input_data=/root/secret.data
   
 alg_hash=0x000B
 alg_primary_key=0x0001
diff --git a/bin/test_tpm2_rsaencrypt.sh b/bin/test_tpm2_rsaencrypt.sh
index 0edb6a9..0b560b2 100755
--- a/bin/test_tpm2_rsaencrypt.sh
+++ b/bin/test_tpm2_rsaencrypt.sh
@@ -30,14 +30,14 @@
 # THE POSSIBILITY OF SUCH DAMAGE.
 #;**********************************************************************;
 #!/bin/bash
-file_primary_key_ctx=/home/$USER/context.p_B1
-file_rsaencrypt_key_pub=/home/$USER/opuB1_B8
-file_rsaencrypt_key_priv=/home/$USER/oprB1_B8
-file_rsaencrypt_key_ctx=/home/$USER/context_load_out_B1_B8
-file_rsaencrypt_key_name=/home/$USER/name.load.B1_B8
+file_primary_key_ctx=/root/context.p_B1
+file_rsaencrypt_key_pub=/root/opuB1_B8
+file_rsaencrypt_key_priv=/root/oprB1_B8
+file_rsaencrypt_key_ctx=/root/context_load_out_B1_B8
+file_rsaencrypt_key_name=/root/name.load.B1_B8
 
-file_rsa_en_output_data=/home/$USER/rsa_en.out
-file_input_data=/home/$USER/secret.data
+file_rsa_en_output_data=/root/rsa_en.out
+file_input_data=/root/secret.data
   
 alg_hash=0x000B
 alg_primary_key=0x0001
diff --git a/bin/test_tpm2_sign.sh b/bin/test_tpm2_sign.sh
index 1c6f431..8e23645 100755
--- a/bin/test_tpm2_sign.sh
+++ b/bin/test_tpm2_sign.sh
@@ -31,13 +31,13 @@
 #;**********************************************************************;
 #!/bin/bash
 
-file_primary_key_ctx=/home/$USER/context.p_B1
-file_signing_key_pub=/home/$USER/opuB1_B8
-file_signing_key_priv=/home/$USER/oprB1_B8
-file_signing_key_ctx=/home/$USER/context_load_out_B1_B8
-file_signing_key_name=/home/$USER/name.load.B1_B8
-file_input_data=/home/$USER/secret.data
-file_output_data=/home/$USER/sig.4
+file_primary_key_ctx=/root/context.p_B1
+file_signing_key_pub=/root/opuB1_B8
+file_signing_key_priv=/root/oprB1_B8
+file_signing_key_ctx=/root/context_load_out_B1_B8
+file_signing_key_name=/root/name.load.B1_B8
+file_input_data=/root/secret.data
+file_output_data=/root/sig.4
 
   
 handle_signing_key=0x81010005
@@ -53,7 +53,7 @@ fail()
 }
 Pass()
 {
-	    echo ""$1" pass" >>/home/$USER/test_getpubak_pass.log
+	    echo ""$1" pass" >>/root/test_getpubak_pass.log
 }
 
 
@@ -85,9 +85,9 @@ else
  rm $file_output_data -rf
 fi
 
-tpm2_evictcontrol -A o -c $file_signing_key_ctx -S $handle_signing_key |tee /home/$USER/evict.log
+tpm2_evictcontrol -A o -c $file_signing_key_ctx -S $handle_signing_key |tee /root/evict.log
 c1="$?"
-grep "persistentHandle: "$handle_signing_key"" /home/$USER/evict.log
+grep "persistentHandle: "$handle_signing_key"" /root/evict.log
 c2="$?"
 
 if [ $c1 != 0 ] || [ $c2 != 0  ];then
diff --git a/bin/test_tpm2_unseal.sh b/bin/test_tpm2_unseal.sh
index d66ef8d..9fec84e 100755
--- a/bin/test_tpm2_unseal.sh
+++ b/bin/test_tpm2_unseal.sh
@@ -35,13 +35,13 @@ alg_primary_key=0x0001
 alg_create_obj=0x000B
 alg_create_key=0x0008
 
-file_input_data=/home/$USER/secret.data
-file_primary_key_ctx=/home/$USER/context.p_"$alg_primary_obj"_"$alg_primary_key"
-file_unseal_key_pub=/home/$USER/opu_"$alg_create_obj"_"$alg_create_key"
-file_unseal_key_priv=/home/$USER/opr_"$alg_create_obj"_"$alg_create_key"
-file_unseal_key_ctx=/home/$USER/ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
-file_unseal_key_name=/home/$USER/name.load_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
-file_unseal_output_data=/home/$USER/usl_ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_input_data=/root/secret.data
+file_primary_key_ctx=/root/context.p_"$alg_primary_obj"_"$alg_primary_key"
+file_unseal_key_pub=/root/opu_"$alg_create_obj"_"$alg_create_key"
+file_unseal_key_priv=/root/opr_"$alg_create_obj"_"$alg_create_key"
+file_unseal_key_ctx=/root/ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_unseal_key_name=/root/name.load_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
+file_unseal_output_data=/root/usl_ctx_load_out_"$alg_primary_obj"_"$alg_primary_key"-"$alg_create_obj"_"$alg_create_key"
   
 rm $file_primary_key_ctx $file_unseal_key_pub $file_unseal_key_priv $file_unseal_key_ctx $file_unseal_key_name $file_unseal_output_data -rf
 
diff --git a/bin/test_tpm2_verifysignature.sh b/bin/test_tpm2_verifysignature.sh
index 6078971..e173f53 100755
--- a/bin/test_tpm2_verifysignature.sh
+++ b/bin/test_tpm2_verifysignature.sh
@@ -30,17 +30,17 @@
 # THE POSSIBILITY OF SUCH DAMAGE.
 #;**********************************************************************;
 #!/bin/bash
-file_primary_key_ctx=/home/$USER/context.p_B1
-file_signing_key_pub=/home/$USER/opuB1_B8
-file_signing_key_priv=/home/$USER/oprB1_B8
-file_signing_key_ctx=/home/$USER/context_load_out_B1_B8
-file_signing_key_name=/home/$USER/name.load.B1_B8
-file_input_data=/home/$USER/secret.data
-file_output_data=/home/$USER/sig.4
-file_verify_tk_data=/home/$USER/tickt_verify_sig.4
-
-file_input_data_hash=/home/$USER/secret_hash.data
-file_input_data_hash_tk=/home/$USER/secret_hash_tk.data
+file_primary_key_ctx=/root/context.p_B1
+file_signing_key_pub=/root/opuB1_B8
+file_signing_key_priv=/root/oprB1_B8
+file_signing_key_ctx=/root/context_load_out_B1_B8
+file_signing_key_name=/root/name.load.B1_B8
+file_input_data=/root/secret.data
+file_output_data=/root/sig.4
+file_verify_tk_data=/root/tickt_verify_sig.4
+
+file_input_data_hash=/root/secret_hash.data
+file_input_data_hash_tk=/root/secret_hash_tk.data
 
 handle_signing_key=0x81010005
 
@@ -55,7 +55,7 @@ fail()
 }
 Pass()
 {
-	    echo ""$1" pass" >>/home/$USER/test_getpubak_pass.log
+	    echo ""$1" pass" >>/root/test_getpubak_pass.log
 }
 
 
diff --git a/units/tpm2_1.1.pxu b/units/tpm2_1.1.pxu
index 67a2947..d875f09 100644
--- a/units/tpm2_1.1.pxu
+++ b/units/tpm2_1.1.pxu
@@ -41,6 +41,7 @@ category_id: tpm2
 depends: tpm2.0/init-resource-mgr
 estimated_duration: 2
 plugin: shell
+user: root
 _summary: tpm2_takeownership
 command: test_tpm2_takeownership_all.sh
 flags: preserve-cwd
@@ -50,6 +51,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 2
 plugin: shell
+user: root
 _summary: tpm2_createprimary
 command: test_tpm2_createprimary_all.sh
 flags: preserve-cwd
@@ -59,6 +61,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_createprimary_all
 estimated_duration: 2
 plugin: shell
+user: root
 _summary: tpm2_create
 command: test_tpm2_create_all.sh
 flags: preserve-cwd
@@ -68,6 +71,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 2
 plugin: shell
+user: root
 _summary: tpm2 NV tools
 command: test_tpm2_nv.sh
 flags: preserve-cwd
@@ -77,6 +81,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 15
 plugin: shell
+user: root
 _summary: tpm2_listpcrs
 command: test_tpm2_listpcrs.sh
 flags: preserve-cwd
@@ -86,6 +91,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 2
 plugin: shell
+user: root
 _summary: tpm2_getrandom
 command: test_tpm2_getrandom.sh
 flags: preserve-cwd
@@ -95,6 +101,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 20
 plugin: shell
+user: root
 _summary: tpm2_load
 command: test_tpm2_load.sh
 flags: preserve-cwd
@@ -104,6 +111,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 20
 plugin: shell
+user: root
 _summary: tpm2_loadexternal
 command: test_tpm2_loadexternal.sh
 flags: preserve-cwd
@@ -113,6 +121,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 20
 plugin: shell
+user: root
 _summary: tpm2_evictcontrol
 command: test_tpm2_evictcontrol.sh
 flags: preserve-cwd
@@ -122,6 +131,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 20
 plugin: shell
+user: root
 _summary: tpm2_hash
 command: test_tpm2_hash.sh
 flags: preserve-cwd
@@ -131,6 +141,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 10
 plugin: shell
+user: root
 _summary: tpm2_hmac
 command: test_tpm2_hmac.sh
 flags: preserve-cwd
@@ -140,6 +151,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 10
 plugin: shell
+user: root
 _summary: tpm2_quote
 command: test_tpm2_quote.sh
 flags: preserve-cwd
@@ -149,6 +161,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 20
 plugin: shell
+user: root
 _summary: tpm2_unseal
 command: test_tpm2_unseal.sh
 flags: preserve-cwd
@@ -158,6 +171,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 20
 plugin: shell
+user: root
 _summary: tpm2_akparse
 command: test_tpm2_akparse.sh
 flags: preserve-cwd
@@ -167,6 +181,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 20
 plugin: shell
+user: root
 _summary: tpm2_certify
 command: test_tpm2_certify.sh
 flags: preserve-cwd
@@ -176,6 +191,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 10
 plugin: shell
+user: root
 _summary: tpm2_getpubek
 command: test_tpm2_getpubek.sh
 flags: preserve-cwd
@@ -185,6 +201,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 10
 plugin: shell
+user: root
 _summary: tpm2_getpubak
 command: test_tpm2_getpubak.sh
 flags: preserve-cwd
@@ -194,6 +211,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 20
 plugin: shell
+user: root
 _summary: tpm2_makecredential
 command: test_tpm2_makecredential.sh
 flags: preserve-cwd
@@ -203,6 +221,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 20
 plugin: shell
+user: root
 _summary: tpm2_activatecredential
 command: test_tpm2_activecredential.sh
 flags: preserve-cwd
@@ -212,6 +231,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 20
 plugin: shell
+user: root
 _summary: tpm2_readpublic
 command: test_tpm2_readpublic.sh
 flags: preserve-cwd
@@ -221,6 +241,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 40
 plugin: shell
+user: root
 _summary: tpm2_rsaencrypt
 command: test_tpm2_rsaencrypt.sh
 flags: preserve-cwd
@@ -230,6 +251,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 40
 plugin: shell
+user: root
 _summary: tpm2_rsadecrypt
 command: test_tpm2_rsadecrypt.sh
 flags: preserve-cwd
@@ -239,6 +261,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 40
 plugin: shell
+user: root
 _summary: tpm2_encryptdecrypt
 command: test_tpm2_encryptdecrypt.sh
 flags: preserve-cwd
@@ -248,6 +271,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 20
 plugin: shell
+user: root
 _summary: tpm2_sign
 command: test_tpm2_sign.sh
 flags: preserve-cwd
@@ -257,6 +281,7 @@ category_id: tpm2
 depends: tpm2.0/tpm2_takeownership
 estimated_duration: 20
 plugin: shell
+user: root
 _summary: tpm2_verifysignature
 command: test_tpm2_verifysignature.sh
 flags: preserve-cwd