Comment 2 for bug 2064326

Revision history for this message
Tim Gardner (timg-tpi) wrote :

ubuntu@jammy-amd64-secure-boot:~$ uname -a
Linux jammy-amd64-secure-boot 6.8.0-1008-azure #8~22.04.1-Ubuntu SMP Tue May 21 16:38:10 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
ubuntu@jammy-amd64-secure-boot:~$ sudo dmesg|grep -i "secure boot"
[ 0.000000] secureboot: Secure boot enabled
[ 0.000000] Kernel is locked down from EFI Secure Boot mode; see man kernel_lockdown.7
[ 0.014983] secureboot: Secure boot enabled
[ 2.106052] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing: 61482aa2830d0ab2ad5af10b7250da9033ddcef0'
[ 2.109047] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2017): 242ade75ac4a15e50d50c84b0d45ff3eae707a03'
[ 2.111878] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (ESM 2018): 365188c1d374d6b07c3c8f240f8ef722433d6a8b'
[ 2.115041] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2019): c0746fd6c5da3ae827864651ad66ae47fe24b3e8'
[ 2.117881] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v1): a8d54bbb3825cfb94fa13c9f8a594a195c107b8d'
[ 2.120083] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v2): 4cf046892d6fd3c9a5b03f98d845f90851dc6a8c'
[ 2.122211] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v3): 100437bb6de6e469b581e61cd66bce3ef4ed53af'
[ 2.124970] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (Ubuntu Core 2019): c1d57b8f6b743f23ee41f4f7ee292f06eecadfb9'
[ 2.198411] integrity: Loaded X.509 cert 'SomeOrg: Secure Boot Signing: 1591bdab18db9a6781b7cf89969b673970971481'

I was unable to get arm64 keys enrolled, but since amd64 worked I think we can assume arm64 is good to go as well.