DLPX-95335 delphix-sb-enroll.service fails on OCI VMs

[tonynguien]

Problem

On OCI VMs, the service fails to start

delphix@tonyn-oci-1-nic-1:~$ systemctl status delphix-sb-enroll
× delphix-sb-enroll.service - Enroll Secure Boot variables (PK/KEK/db) from .auth files
     Loaded: loaded (/usr/lib/systemd/system/delphix-sb-enroll.service; enabled; preset: enabled)
     Active: failed (Result: exit-code) since Thu 2025-09-04 15:11:07 UTC; 1min 47s ago
       Docs: man:efi-updatevar(1)
   Main PID: 527 (code=exited, status=1/FAILURE)
        CPU: 16ms

It turned out the OCI VMs don’t have the SecureBoot efivar, likely because secure boot is explicitly disabled.

delphix@tonyn-oci-1-nic-1:~$ sudo journalctl -u delphix-sb-enroll.service
Sep 04 15:11:07 tonyn-oci-1-nic-1 sb-enroll-efivars.sh[533]: od: '/sys/firmware/efi/efivars/SecureBoot-*': No such file or directory
Sep 04 15:11:07 tonyn-oci-1-nic-1 systemd[1]: Starting delphix-sb-enroll.service - Enroll Secure Boot variables (PK/KEK/db) from .auth files...
Sep 04 15:11:07 tonyn-oci-1-nic-1 systemd[1]: delphix-sb-enroll.service: Main process exited, code=exited, status=1/FAILURE
Sep 04 15:11:07 tonyn-oci-1-nic-1 systemd[1]: delphix-sb-enroll.service: Failed with result 'exit-code'.
Sep 04 15:11:07 tonyn-oci-1-nic-1 systemd[1]: Failed to start delphix-sb-enroll.service - Enroll Secure Boot variables (PK/KEK/db) from .auth files.

delphix@tonyn-oci-1-nic-1:~$ ls /sys/firmware/efi/efivars/SecureBoot-*
ls: cannot access '/sys/firmware/efi/efivars/SecureBoot-*': No such file or directory

Solution

A simple fix would be to move the check for AWS platform to earlier since secure boot is only supported on AWS at the moment. This way we wouldn’t even look for SecureBoot efivar for non-AWS systems.

Testing Done

Confirmed delphix-sb-enroll.service no longer fails on all platforms.

Successful appliance builds:
OCI - https://selfservice-jenkins.eng-tools-prd.aws.delphixcloud.com/job/appliance-build-orchestrator-pre-push/12072/console
ESX, AWS, Azure, GCP - https://selfservice-jenkins.eng-tools-prd.aws.delphixcloud.com/job/appliance-build-orchestrator-pre-push/12080/console