Proposed package update did not fix the issue for me.
VERSION TESTED:
clevis_18-1ubuntu1.1/jammy-proposed
TEST CASE:
1. Select existing workstation running 22.04/jammy with fips-updates enabled
2. Ensure all apt packages are up to date
3. Confirm fips mode is enabled:
cat /proc/sys/crypto/fips_enabled
4. Attempt clevis-luks bind against tpm2:
clevis luks bind -d /dev/nvme0n1p3 tpm2
'{"hash":"sha256","pcr_bank":"sha256","key":"rsa","pcr_ids":"0,2,4,7"}}'
EXPECTED RESULTS:
From (3): 1
From (4): Successful clevis-luks bind to /dev/nvme0n1p3
ACTUAL RESULTS:
From (3): 1
From (4): Error adding new binding to /dev/nvme0n1p3 (output attached as
clevis-luks-18-1ubuntu1.1_bind_attempt_ks-chrisu_20250307.txt)
** Attachment added:
"clevis-luks-18-1ubuntu1.1_bind_attempt_ks-chrisu_20250307.txt"
https://bugs.launchpad.net/ubuntu/+source/clevis/+bug/2073429/+attachment/5863305/+files/clevis-luks-18-1ubuntu1.1_bind_attempt_ks-chrisu_20250307.txt
** Tags removed: verification-needed-jammy
** Tags added: verification-failed-jammy
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2073429
Title:
Jammy clevis forces argon2id for keyslots
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/clevis/+bug/2073429/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs