Comment 0 for bug 2069035

Revision history for this message
Paolo Pisati (p-pisati) wrote :

The Canonical kernel team is working on a kernel 6.10 for 'oracular' (24.10) and has some first kernel builds ready for secure-boot and lockdown testing (version 6.10.0-4.4).

To avoid potential negative implications that a broken secure-boot lockdown functionality, shipped with a new major kernel version, would cause (esp. using the production key), we ask as usual to get secure-boot lockdown tested (with every new major kernel release) early in the cycle, based on the following test kernel in the kernel team's PPA, using a test key for the signature.

The early test build is available in: ppa:canonical-kernel-team/unstable
(https://launchpad.net/~canonical-kernel-team/+archive/ubuntu/unstable/)

The PPA key used for signing can be found in the tarball available here:
https://ppa.launchpad.net/canonical-kernel-team/unstable/ubuntu/dists/devel/main/signed/linux-generate-unstable-s390x/current/

(Please note that this kernel is coming from the 'canonical-kernel-team' PPA, hence it is NOT signed with the regular archive/release/production key, BUT instead with the above PPA test signing key!)