** Changed in: linux (Ubuntu Noble)
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2055083

Title:
  Drop fips-checks script from trees

Status in linux package in Ubuntu:
  Fix Committed
Status in linux source package in Focal:
  Fix Committed
Status in linux source package in Jammy:
  Fix Committed
Status in linux source package in Mantic:
  Fix Committed
Status in linux source package in Noble:
  Fix Committed

Bug description:
  [Impact]

  When producing a new version of some kernels, we need to check for
  changes that might affect FIPS certs and justify why a commit was
  kept. For that, we have a fips-checks script that lives under debian/
  in Focal, Jammy, Mantic and Noble.

  This script has been moved to `cranky`[1], so now there is no need to
  have this script in the kernel Git trees as well.

  [1] https://git.launchpad.net/~canonical-kernel/+git/kteam-
  tools/commit/?id=2ab9364d4b4c18bee7d835787d7dd11990103bca

  [Fix]

  Remove the fips-checks script and its calls.

  [Test Plan]

  Prepare a kernel and ensure that the `cranky close` step runs without
  any errors.

  [Where problems could occur]

  This only affects the preparation of FIPS kernels and not the kernel final 
binary. Moreover, I've prepared some FIPS kernels from the 2024.03.04 cycle 
relying on `cranky check-fips` to ensure that
  we have it working well on the cranky side too.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2055083/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to