Comment 7 for bug 2026833

------- Comment From <email address hidden> 2023-08-22 07:22 EDT-------
we installed from ppa:canonical-kernel-team/unstable:
# cat /etc/os-release
PRETTY_NAME="Ubuntu Mantic Minotaur (development branch)"
NAME="Ubuntu"
VERSION_ID="23.10"
VERSION="23.10 (Mantic Minotaur)"
VERSION_CODENAME=mantic
...
...
# uname -r
6.5.0-4-generic
# grep [0-9] /sys/firmware/ipl/*sec*
/sys/firmware/ipl/has_secure:1
/sys/firmware/ipl/secure:0

# ls -l /boot/vmlinuz /boot/initrd.img
lrwxrwxrwx 1 root root 26 Aug 15 09:19 /boot/initrd.img -> initrd.img-6.5.0-4-generic
lrwxrwxrwx 1 root root 23 Aug 22 08:24 /boot/vmlinuz -> vmlinuz-6.5.0-4-generic

load with kernel vmlinuz-6.5.0-4-generic
- with secure boot enable
- with adding both PPA-keys
-> prod PPA key from 5.13.0-19.19 kernal packages
-> unstable PPA key from: https://ppa.launchpad.net/canonical-kernel-team/unstable/ubuntu/dists/devel/main/signed/linux-generate-unstable-s390x/6.5.0-4.4/signed.tar.gz

IPB received.
IPB sent.
System version 9.
Watchdog enabled.
Running 'ZBootLoader' version '3.2.2' level 'D51C.D51C_328.16'.
OK00000000 Success
[ 0.074381] Linux version 6.5.0-4-generic (buildd@bos01-s390x-015) (s390x-linux-gnu-gcc-13 (Ubuntu 13.2.0-1ubuntu1) 13.2.0, GNU ld (GNU Binutils for Ubuntu) 2.40.90.20230720) #4-Ubuntu SMP Mon Jul 31 16:02:15 UTC 2023 (Ubuntu 6.5.0-4.4-generic 6.5.0-rc4)
[ 0.074382] setup: Linux is running natively in 64-bit mode
[ 0.074383] setup: Linux is running with Secure-IPL enabled
[ 0.074383] setup: The IPL report contains the following components:
[ 0.074384] setup: 0000000000002000 - 0000000000006000 (not signed)
[ 0.074385] setup: 0000000000009000 - 0000000000009200 (not signed)
[ 0.074386] setup: 000000000000a000 - 000000000000e000 (signed, verified)
[ 0.074387] setup: 000000000000f000 - 0000000000010000 (not signed)
[ 0.074388] setup: 0000000000010000 - 0000000000974000 (signed, verified)
[ 0.074389] setup: 0000000000975000 - 0000000000975200 (not signed)
[ 0.074390] setup: 0000000000985000 - 0000000000986000 (not signed)
[ 0.074391] setup: 0000000000990000 - 00000000028ada00 (not signed)
[ 0.074392] Kernel is locked down from Secure IPL mode; see man kernel_lockdown.7

after load:
# grep [0-9] /sys/firmware/ipl/*sec*
/sys/firmware/ipl/has_secure:1
/sys/firmware/ipl/secure:1