| 2024-03-03 16:49:34 |
Koteswara Uppalapati |
bug |
|
|
added bug |
| 2024-03-03 16:50:39 |
Koteswara Uppalapati |
attachment added |
|
dist-upgrade-screenlog.0.txt https://bugs.launchpad.net/ubuntu/+source/apt/+bug/2055825/+attachment/5752088/+files/dist-upgrade-screenlog.0.txt |
|
| 2024-03-28 15:41:00 |
Launchpad Janitor |
apt (Ubuntu): status |
New |
Confirmed |
|
| 2024-04-10 18:57:08 |
Lalo |
bug |
|
|
added subscriber Lalo |
| 2024-06-24 19:05:42 |
Magali Lemes do Sacramento |
bug task added |
|
linux (Ubuntu) |
|
| 2024-06-24 19:06:33 |
Magali Lemes do Sacramento |
summary |
Upgrade from 20.04 to 22.04 failed with "Fatal: unexpected error from getentropy: Invalid argument" |
fips: upgrade from 20.04 to 22.04 fails |
|
| 2024-06-24 19:06:41 |
Magali Lemes do Sacramento |
linux (Ubuntu): status |
New |
In Progress |
|
| 2024-06-24 19:06:44 |
Magali Lemes do Sacramento |
linux (Ubuntu): importance |
Undecided |
Medium |
|
| 2024-06-24 19:06:47 |
Magali Lemes do Sacramento |
linux (Ubuntu): assignee |
|
Magali Lemes do Sacramento (magalilemes) |
|
| 2024-06-24 19:07:11 |
Magali Lemes do Sacramento |
summary |
fips: upgrade from 20.04 to 22.04 fails |
fips-updates: upgrade from 20.04 to 22.04 fails |
|
| 2024-06-25 20:23:41 |
William Van Hevelingen |
bug |
|
|
added subscriber William Van Hevelingen |
| 2024-07-05 18:36:02 |
Magali Lemes do Sacramento |
description |
Upgrade from 20.04 to 22.04 failed with "Fatal: unexpected error from getentropy: Invalid argument". We have fips-updates enabled thru Ubuntu pro subscription. Tried to upgrade from 18.04 to 22.04. Upgrade from 18.04 to 204 is successful but upgrade from 20.04 to 22.04 failed. Apt or do-release-upgrade commands no longer working after the upgrade failed so we have to restore the host to the Ubuntu 20.04 snapshots.
# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 20.04.6 LTS
Release: 20.04
Codename: focal
Upgrade log:
Processing triggers for libc-bin (2.35-0ubuntu3.6) ...
Errors were encountered while processing:
systemd
ntfs-3g
dbus
libpam-systemd:amd64
systemd-sysv
libnss-systemd:amd64
friendly-recovery
samba-common-bin
samba
update-notifier-common
Fatal: unexpected error from getentropy: Invalid argument
fatal error in libgcrypt, file ../../src/misc.c, line 146, function _gcry_logv: internal error (fatal or bug) |
SRU Justification
[Impact]
Focal systems with fips-updates enabled cannot be upgraded to Jammy. During
the upgrade, there is a point where the userspace packages are upgraded to
their Jammy version, but are run on a Focal FIPS kernel. Specifically, the
Jammy version of libgcrypt relies on the getrandom syscall with the GRND_RESEED
flag set. This flag, however, is only implemented on the Jammy FIPS kernel. So,
when the Jammy version of libgcrypt is run alongside a Focal FIPS kernel,
a fatal error occurs.
[Fix]
Have getrandom not reject the GRND_RESEED flag. For Focal systems, this flag
should only be used during the upgrade process from Focal to Jammy, as the
Jammy userspace packages running on the Focal kernel will rely on it.
[Test]
Summary: In a FIPS enabled machine using the fips-updates channel, test the
upgrade from Focal to Jammy.
[Where things could go wrong]
This touches the getrandom syscall, so we have many places where things could
go wrong. However, we are just adding another possible flag for it, and not
really adding/removing/altering any other functionality, so the regression
potential is low.
-------------------------------- Original Report -------------------------------
Upgrade from 20.04 to 22.04 failed with "Fatal: unexpected error from getentropy: Invalid argument". We have fips-updates enabled thru Ubuntu pro subscription. Tried to upgrade from 18.04 to 22.04. Upgrade from 18.04 to 204 is successful but upgrade from 20.04 to 22.04 failed. Apt or do-release-upgrade commands no longer working after the upgrade failed so we have to restore the host to the Ubuntu 20.04 snapshots.
# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 20.04.6 LTS
Release: 20.04
Codename: focal
Upgrade log:
Processing triggers for libc-bin (2.35-0ubuntu3.6) ...
Errors were encountered while processing:
systemd
ntfs-3g
dbus
libpam-systemd:amd64
systemd-sysv
libnss-systemd:amd64
friendly-recovery
samba-common-bin
samba
update-notifier-common
Fatal: unexpected error from getentropy: Invalid argument
fatal error in libgcrypt, file ../../src/misc.c, line 146, function _gcry_logv: internal error (fatal or bug) |
|
| 2024-07-11 14:38:45 |
Magali Lemes do Sacramento |
nominated for series |
|
Ubuntu Focal |
|
| 2024-07-11 14:38:45 |
Magali Lemes do Sacramento |
bug task added |
|
apt (Ubuntu Focal) |
|
| 2024-07-11 14:38:45 |
Magali Lemes do Sacramento |
bug task added |
|
linux (Ubuntu Focal) |
|
| 2024-07-11 14:38:58 |
Magali Lemes do Sacramento |
linux (Ubuntu Focal): assignee |
|
Magali Lemes do Sacramento (magalilemes) |
|
| 2024-07-11 14:39:01 |
Magali Lemes do Sacramento |
linux (Ubuntu Focal): importance |
Undecided |
Medium |
|
| 2024-07-11 14:39:05 |
Magali Lemes do Sacramento |
linux (Ubuntu Focal): status |
New |
In Progress |
|
| 2024-07-22 19:38:16 |
Magali Lemes do Sacramento |
linux (Ubuntu): status |
In Progress |
Fix Committed |
|
| 2024-07-22 19:38:21 |
Magali Lemes do Sacramento |
linux (Ubuntu Focal): status |
In Progress |
Fix Committed |
|
| 2024-07-25 05:44:50 |
Ubuntu Kernel Bot |
tags |
|
kernel-spammed-focal-linux-gcp-fips-v2 verification-needed-focal-linux-gcp-fips |
|
| 2024-07-25 05:46:20 |
Ubuntu Kernel Bot |
tags |
kernel-spammed-focal-linux-gcp-fips-v2 verification-needed-focal-linux-gcp-fips |
kernel-spammed-focal-linux-fips-v2 kernel-spammed-focal-linux-gcp-fips-v2 verification-needed-focal-linux-fips verification-needed-focal-linux-gcp-fips |
|
| 2024-07-29 18:15:38 |
Ubuntu Kernel Bot |
tags |
kernel-spammed-focal-linux-fips-v2 kernel-spammed-focal-linux-gcp-fips-v2 verification-needed-focal-linux-fips verification-needed-focal-linux-gcp-fips |
kernel-spammed-focal-linux-aws-fips-v2 kernel-spammed-focal-linux-fips-v2 kernel-spammed-focal-linux-gcp-fips-v2 verification-needed-focal-linux-aws-fips verification-needed-focal-linux-fips verification-needed-focal-linux-gcp-fips |
|
| 2024-08-01 21:40:20 |
Ubuntu Kernel Bot |
tags |
kernel-spammed-focal-linux-aws-fips-v2 kernel-spammed-focal-linux-fips-v2 kernel-spammed-focal-linux-gcp-fips-v2 verification-needed-focal-linux-aws-fips verification-needed-focal-linux-fips verification-needed-focal-linux-gcp-fips |
kernel-spammed-focal-linux-aws-fips-v2 kernel-spammed-focal-linux-azure-fips-v2 kernel-spammed-focal-linux-fips-v2 kernel-spammed-focal-linux-gcp-fips-v2 verification-needed-focal-linux-aws-fips verification-needed-focal-linux-azure-fips verification-needed-focal-linux-fips verification-needed-focal-linux-gcp-fips |
|
