Your message dated Wed, 12 Aug 2026 22:17:06 +0200
with message-id <[email protected]>
and subject line Re: linux-image-amd64: missing CONFIG_CRYPTO_SHA384 causes IMA
error
has caused the Debian Bug report #1144056,
regarding linux-image-amd64: missing CONFIG_CRYPTO_SHA384 causes IMA error
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1144056: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1144056
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: linux-image-amd64Severity: important
Version: 7.1.7+deb14-amd64
Distribution: sid (testing)
Description:
Kernel compiled without CONFIG_CRYPTO_SHA384 despite IMA being enabled.
Causes boot-time error: "[ 0.607362] ima: can not allocate sha384 (reason: -2)"
System Information:
- Kernel: 7.1.7+deb14-amd64
- Distribution: Debian testing (sid)
- Architecture: amd64
- Kernel packages installed: linux-image-amd64,
linux-image-amd64-signed-template
Evidence:
1. /proc/crypto | grep sha384 → no output
2. /boot/config-$(uname -r) shows:
- CONFIG_CRYPTO_SHA256=y
- CONFIG_CRYPTO_SHA512=m
- CONFIG_CRYPTO_SHA384 → MISSING entirely
- CONFIG_IMA=y (enabled)
Impact:
IMA subsystem cannot allocate SHA-384 hash algorithm at boot time,
resulting in error message. Default IMA hash is SHA-256, but some
component requests SHA-384 which is unavailable.
Proposed Fix:
Enable CONFIG_CRYPTO_SHA384=y (or =m) in kernel configuration.
References:
https://lists.debian.org/debian-devel/ [link to relevant thread if any]
Sent with Proton Mail secure email.
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
On Mon, 10 Aug 2026 12:08:30 +0000 Jeroensky <[email protected]> wrote:
> Package: linux-image-amd64Severity: important
> Version: 7.1.7+deb14-amd64
> Distribution: sid (testing)
>
> Description:
> Kernel compiled without CONFIG_CRYPTO_SHA384 despite IMA being
enabled.
[...]
There is no such config option. Don't use LLMs to generate bug reports.
Ben.
--
Ben Hutchings
No political challenge can be met by shopping. - George Monbiot
signature.asc
Description: This is a digitally signed message part
--- End Message ---
