[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-09-23 Thread Dimitri John Ledkov
** Changed in: zfcpdump-kernel (Ubuntu) Status: Won't Fix => Confirmed ** Changed in: zfcpdump-kernel (Ubuntu Focal) Status: Won't Fix => Confirmed ** Changed in: zfcpdump-kernel (Ubuntu Groovy) Status: Won't Fix => Confirmed ** Summary changed: - zfcpdump kernel can not

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-08-27 Thread Dimitri John Ledkov
** Changed in: zfcpdump-kernel (Ubuntu) Status: In Progress => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1877089 Title: zfcpdump kernel can not be IPLed when secure boot is

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-08-26 Thread Frank Heimes
Closing as Won't Fix on Launchpad, too. ** Changed in: zfcpdump-kernel (Ubuntu Groovy) Status: In Progress => Won't Fix ** Changed in: zfcpdump-kernel (Ubuntu Focal) Status: In Progress => Won't Fix ** Changed in: ubuntu-z-systems Status: In Progress => Won't Fix -- You

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-08-26 Thread Frank Heimes
@IBM Can we agree to close this then? (based on comments 8, 10 and 11) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1877089 Title: zfcpdump kernel can not be IPLed when secure boot is requested

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-08-26 Thread Dimitri John Ledkov
In that case we should not be signing zfcpdump-kernel for now. To minimize amount of things the sipl key signs. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1877089 Title: zfcpdump kernel can not

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-07-23 Thread Frank Heimes
It's in the new queue since 2020-07-08: https://launchpad.net/ubuntu/focal/+queue?queue_state=0_text=zfcpdump-kernel -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1877089 Title: zfcpdump kernel can

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-07-23 Thread Andrew Cloke
** Changed in: ubuntu-z-systems Status: Confirmed => In Progress ** Changed in: zfcpdump-kernel (Ubuntu Focal) Status: Confirmed => In Progress ** Changed in: zfcpdump-kernel (Ubuntu Groovy) Status: Confirmed => In Progress -- You received this bug notification because you

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-07-08 Thread Dimitri John Ledkov
** Description changed: + [Impact] + + * zfcpdump-kernel incompatible with s390-tools in focal + * zfcpdump-kernel incompatible with SIPL (secure IPL) + * fix all that for focal and up + + * Upgrade to the v5.4 kernel + * Enable signing + * Update the path of the image, to the one that

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-06-25 Thread Frank Heimes
** Changed in: ubuntu-z-systems Status: Triaged => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1877089 Title: zfcpdump kernel can not be IPLed when secure boot is requested To

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-05-14 Thread Dimitri John Ledkov
Thank you for those details. For example, if and when we bump ubuntu minimum abi to z15 we might be able to kill the zfcpdump kernel. If there are no modules i guess any initrd will not be able to do much. -- You received this bug notification because you are a member of Ubuntu Bugs, which is

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-05-12 Thread Dimitri John Ledkov
Hm, I'm not sure we can sign the zfcpdump-kernel. By convention, in Focal, signed kernels enforce signed module loading & lockdown that prevents unsigned module loading, kexec unsigned kernels or reading arbitrary kernel memory from userspace. And I am under impression that zfcpdump kernel/initrd

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-05-11 Thread Frank Heimes
** Changed in: zfcpdump-kernel (Ubuntu Focal) Assignee: (unassigned) => Canonical Kernel Team (canonical-kernel-team) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1877089 Title: zfcpdump

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-05-11 Thread Andrew Cloke
** Changed in: ubuntu-z-systems Status: New => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1877089 Title: zfcpdump kernel can not be IPLed when secure boot is requested To manage

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-05-08 Thread Dimitri John Ledkov
In that case we will need to create zfcpdump-signed-kernel & backport that to focal. ** Changed in: s390-tools (Ubuntu) Status: New => Invalid ** Changed in: zfcpdump-kernel (Ubuntu) Status: New => Confirmed ** Also affects: s390-tools (Ubuntu Groovy) Importance: Undecided

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-05-06 Thread Frank Heimes
** Changed in: zfcpdump-kernel (Ubuntu) Assignee: (unassigned) => Canonical Kernel Team (canonical-kernel-team) ** Changed in: s390-tools (Ubuntu) Assignee: (unassigned) => Canonical Foundations Team (canonical-foundations) ** Changed in: ubuntu-z-systems Assignee: (unassigned)

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-05-06 Thread Frank Heimes
** Changed in: ubuntu-z-systems Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1877089 Title: zfcpdump kernel can not be IPLed when secure boot is requested To

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-05-06 Thread Frank Heimes
** Also affects: ubuntu-z-systems Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1877089 Title: zfcpdump kernel can not be IPLed when secure boot is

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-05-06 Thread Dimitri John Ledkov
(this is due to s390-tools renaming the expected zfcpdump kernel name) Separately, are you expecting for the zfcpdump-kernel to be secure boot signed? because currently it is not. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1877089] Re: zfcpdump kernel can not be IPLed when secure boot is requested

2020-05-06 Thread Dimitri John Ledkov
We can either revert the path change in s390-tools or rebuild the zfcpdump kernel flavour with the new name. ** Also affects: zfcpdump-kernel (Ubuntu) Importance: Undecided Status: New ** Also affects: s390-tools (Ubuntu) Importance: Undecided Status: New ** No longer