** Changed in: linux (Ubuntu Noble)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2055083
Title:
Drop fips-checks script from trees
Status
** Summary changed:
- Drop fips-check script from trees
+ Drop fips-checks script from trees
** Description changed:
[Impact]
When producing a new version of some kernels, we need to check for
changes that might affect FIPS certs and justify why a commit was kept.
- For that, we have a
nee: (unassigned) => Magali Lemes do Sacramento (magalilemes)
** Changed in: linux (Ubuntu Mantic)
Assignee: (unassigned) => Magali Lemes do Sacramento (magalilemes)
** Changed in: linux (Ubuntu Mantic)
Status: New => In Progress
** Changed in: linux (Ubuntu Focal)
Importanc
** Summary changed:
- Make fips-check script aware of commit reverts
+ Drop fips-check script from trees
** Description changed:
[Impact]
When producing a new version of some kernels, we need to check for
changes that might affect FIPS certs and justify why a commit was kept.
+ For
]
This only affects the preparation of FIPS kernels and not the kernel
final binary.
** Affects: linux (Ubuntu)
Importance: Medium
Assignee: Magali Lemes do Sacramento (magalilemes)
Status: In Progress
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee
Similarly, the following tests also fail (crash the instance) on j/gcp-fips
with version 5.15.0-1048.56+fips1 during development cycle d2024.01.02 on the
n2d-standard-4.sev_snp instance:
- cpuhotplug:cpuhotplug02 in ubuntu_ltp and
- cpu-hotplug:cpu-on-off-test.sh in ubuntu_kernel_selftests
This is also been seen on j/gcp-fips with version 5.15.0-1048.56+fips1
during development cycle d2024.01.02 on the n2d-standard-4.sev_snp
instance. If necessary, another bug could be filed targeting GCP
specifically.
--
You received this bug notification because you are a member of Kernel
This seems to be related to the way hisi_sec2 implements aead,
specifically with authenc(hmac(sha1),cbc(aes)),
authenc(hmac(sha256),cbc(aes)) and authenc(hmac(sha512),cbc(aes)). Other
aead algorithms seem to work fine as they don't rely on this module.
Notice that net:xfrm_policy.sh also fails
Script's working well on FIPS kernels.
** Tags removed: verification-needed-jammy-linux
** Tags added: verification-done-jammy-linux
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1945989
Seen on f/aws-fips with version 5.4.0-1112.121+fips1 during cycle
s2023.09.04 on the m5a.large instance.
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1876687
Title:
FIPS kernels are no longer failing with these tests, as they are now skipped. I
verified the output of the net:tls tests from the following kernels:
- j:fips 5.15.0-85.95+fips1
- j:aws-fips 5.15.0-1046.51+fips3
- j:ibm-gt-fips 5.15.0-1045.48+fips1
Test results output:
# # PASSED: 179 / 179 tests
FIPS kernels are no longer failing with these tests. I verified the output of
the net:vrf-xfrm-tests.sh tests from the following kernels:
- j:fips 5.15.0-85.95+fips1
- j:aws-fips 5.15.0-1046.51+fips3
- j:ibm-gt-fips 5.15.0-1045.48+fips1
Test results output:
# Tests passed: 14
# Tests failed:
) => (unassigned)
** Changed in: linux (Ubuntu Mantic)
Status: Fix Released => New
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Magali Lemes do Sacramento (magalilemes)
** Changed in: linux (Ubuntu Mantic)
Assignee: (unassigned) => Magali Lemes do Sacramento
Seems to still be found on f:linux-aws-fips, cycle 2023-07-10
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-azure in Ubuntu.
https://bugs.launchpad.net/bugs/1882669
Title:
Focal Azure AMD64 instances crash with
Found on Jammy 5.15.0-70.77+fips1 on openstack amd64, 2023-03-20 cycle.
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1950627
Title:
ubuntu_kernel_selftests:net:udpgro_fwd.sh:
Found on Jammy 5.15.0-70.77+fips1 on openstack, 2023-03-20 cycle.
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-oem-5.17 in Ubuntu.
https://bugs.launchpad.net/bugs/1973261
Title:
f88ba6a2a in ubuntu_btrfs_kernel_fixes failed on
Found on Jammy 5.15.0-70.77+fips1 on openstack, 2023-03-20 cycle.
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-oracle in Ubuntu.
https://bugs.launchpad.net/bugs/1991215
Title:
test_verifier in ubuntu_bpf failed with 40 test
17 matches
Mail list logo
