From: Vitaly Kuznetsov <vkuzn...@redhat.com> uki: enable FIPS mode
Enable FIPS module for the UKI. Note: 'kernel-uki-virt-addons' already ship fips=1' cmdline extension and this can now be used. Note: to work properly, dracut >= 104 is needed. Signed-off-by: Vitaly Kuznetsov <vkuzn...@redhat.com> diff --git a/redhat/dracut-virt.conf b/redhat/dracut-virt.conf index blahblah..blahblah 100644 --- a/redhat/dracut-virt.conf +++ b/redhat/dracut-virt.conf @@ -27,6 +27,11 @@ dracutmodules+=" systemd-sysext " # modules: root disk integrity protection dracutmodules+=" systemd-veritysetup " +# modules: FIPS +dracutmodules+=" fips " +# FIPS mode requires early crypto drivers test +drivers+=" =crypto " + # drivers: virtual buses, pci drivers+=" virtio-pci virtio-mmio " # qemu-kvm drivers+=" hv-vmbus pci-hyperv " # hyperv -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3675 -- _______________________________________________ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
