noble/linux-ibm: 6.8.0-1006.6 -proposed tracker

[Roxana Nicolescu]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: bb01a56bc26e8b82
  route-entry: 1
comments:
  abi-testing: 1
delta:
  promote-to-proposed: [lrm, lrs, main, meta, signed, lrg, generate]
  promote-to-security: []
  promote-to-updates: [lrm, lrs, main, meta, signed]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
issue: KSRU-12384
kernel-stable-master-bug: 2065886
packages:
  generate: linux-generate-ibm
  lrg: linux-restricted-generate-ibm
  lrm: linux-restricted-modules-ibm
  lrs: linux-restricted-signatures-ibm
  main: linux-ibm
  meta: linux-meta-ibm
  signed: linux-signed-ibm
phase: Complete
phase-changed: Thursday, 06. June 2024 16:52 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Fix Released
variant: debs
versions:
  lrm: 6.8.0-1006.6
  main: 6.8.0-1006.6
  meta: 6.8.0-1006.6
  signed: 6.8.0-1006.6
~~:
  announce:
    swm-transition-crankable: 2024-05-22 09:30:46.194865
  clamps:
    new-review: bb01a56bc26e8b82
    promote-to-proposed: bb01a56bc26e8b82
    self: 6.8.0-1006.6
    sru-review: bb01a56bc26e8b82
  tracker:
    last-message: '2024-06-06 10:06:18.878739+00:00'

[Ubuntu Kernel Ancillary Bot (ubuntu-kernel-ancillary-bot)]

amd64/ibm canonical-certs.pem unchanged
amd64/ibm canonical-revoked-certs.pem unchanged
amd64/ibm fwinfo unchanged
amd64/ibm modules unchanged

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

New kernel with signed kernels; signing-review required.

[John Cabaj (john-cabaj)]

Kernel successfully booted under Secure Boot:

$ dmesg | grep -i secure
[ 0.000000] secureboot: Secure boot enabled
[ 0.000000] Kernel is locked down from EFI Secure Boot mode; see man kernel_lockdown.7
[ 0.004740] secureboot: Secure boot enabled
[ 1.269948] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing: 61482aa2830d0ab2ad5af10b7250da9033ddcef0'
[ 1.271239] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2017): 242ade75ac4a15e50d50c84b0d45ff3eae707a03'
[ 1.272604] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (ESM 2018): 365188c1d374d6b07c3c8f240f8ef722433d6a8b'
[ 1.274044] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2019): c0746fd6c5da3ae827864651ad66ae47fe24b3e8'
[ 1.277385] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v1): a8d54bbb3825cfb94fa13c9f8a594a195c107b8d'
[ 1.278871] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v2): 4cf046892d6fd3c9a5b03f98d845f90851dc6a8c'
[ 1.280338] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v3): 100437bb6de6e469b581e61cd66bce3ef4ed53af'
[ 1.281821] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (Ubuntu Core 2019): c1d57b8f6b743f23ee41f4f7ee292f06eecadfb9'
root@noble-signing-vm:~# cat /sys/kernel/security/lockdown
none [integrity] confidentiality

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

The following packages ended up in the wrong component in the Proposed pocket:

linux-restricted-modules-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-470-6.8.0-1006-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-470-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-470-ibm-classic 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-470-ibm-lts-24.04 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-470-server-6.8.0-1006-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-470-server-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-470-server-ibm-classic 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-470-server-ibm-lts-24.04 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-525-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-525-ibm-classic 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-525-ibm-lts-24.04 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-525-open-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-525-open-ibm-classic 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-525-open-ibm-lts-24.04 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-525-server-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-525-server-ibm-classic 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-525-server-ibm-lts-24.04 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-525-server-open-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-525-server-open-ibm-classic 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-525-server-open-ibm-lts-24.04 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-535-6.8.0-1006-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-535-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-535-ibm-classic 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-535-ibm-lts-24.04 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-535-open-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-535-open-ibm-classic 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-535-open-ibm-lts-24.04 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-535-server-6.8.0-1006-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-535-server-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-535-server-ibm-classic 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-535-server-ibm-lts-24.04 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-535-server-open-ibm 6.8.0-1006.6 - is in universe instead of restricted
linux-modules-nvidia-535-server-open-ibm-classic 6.8.0-1006.6 - is in universe instead...

[John Cabaj (john-cabaj)]

No new regressions in ADT matrix not already hinted.

[John Cabaj (john-cabaj)]

No noble:linux-ibm specific LP bugs to verify.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-ibm - 6.8.0-1006.6

---------------
linux-ibm (6.8.0-1006.6) noble; urgency=medium

  * noble/linux-ibm: 6.8.0-1006.6 -proposed tracker (LP: #2064331)

  * Add Real-time Linux Analysis tool (rtla) to linux-tools (LP: #2059080)
    - [Packaging] ibm: add Real-time Linux Analysis tool (rtla) to linux-tools
    - [Packaging] ibm: update dependencies for rtla

  * Provide python perf module (LP: #2051560)
    - [Packaging] ibm: enable perf python module

  * linux: please move erofs.ko (CONFIG_EROFS for EROFS support) from linux-
    modules-extra to linux-modules (LP: #2054809)
    - UBUNTU [Packaging]: ibm: Include erofs in linux-modules instead of linux-
      modules-extra

  * linux: please move dmi-sysfs.ko (CONFIG_DMI_SYSFS for SMBIOS support) from
    linux-modules-extra to linux-modules (LP: #2045561)
    - [Packaging] ibm: Move dmi-sysfs.ko into linux-modules

  * Don't produce linux-*-cloud-tools-common, linux-*-tools-common and
    linux-*-tools-host binary packages (LP: #2048183)
    - [Packaging] ibm: Move indep tools package stubs to debian/control.d
    - [Packaging] ibm: Build indep tools packages only for the main kernel

  * Miscellaneous Ubuntu changes
    - [Packaging] ibm: remove debian/scripts/misc/arch-has-odm-enabled.sh

  [ Ubuntu: 6.8.0-35.35 ]

  * noble/linux: 6.8.0-35.35 -proposed tracker (LP: #2065886)
  * CVE-2024-21823
    - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
    - dmaengine: idxd: add a new security check to deal with a hardware erratum
    - dmaengine: idxd: add a write() method for applications to submit work

  [ Ubuntu: 6.8.0-34.34 ]

  * noble/linux: 6.8.0-34.34 -proposed tracker (LP: #2065167)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2024.04.29)

  [ Ubuntu: 6.8.0-32.32 ]

  * noble/linux: 6.8.0-32.32 -proposed tracker (LP: #2064344)
  * Packaging resync (LP: #1786013)
    - [Packaging] drop getabis data
    - [Packaging] update variants
    - [Packaging] update annotations scripts
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2024.04.29)
  * Enable Nezha board (LP: #1975592)
    - [Config] Enable CONFIG_REGULATOR_FIXED_VOLTAGE on riscv64
  * Enable Nezha board (LP: #1975592) // Enable StarFive VisionFive 2 board
    (LP: #2013232)
    - [Config] Enable CONFIG_SERIAL_8250_DW on riscv64
  * RISC-V kernel config is out of sync with other archs (LP: #1981437)
    - [Config] Sync riscv64 config with other architectures
  * obsolete out-of-tree ivsc dkms in favor of in-tree one (LP: #2061747)
    - ACPI: scan: Defer enumeration of devices with a _DEP pointing to IVSC device
    - Revert "mei: vsc: Call wake_up() in the threaded IRQ handler"
    - mei: vsc: Unregister interrupt handler for system suspend
    - media: ipu-bridge: Add ov01a10 in Dell XPS 9315
    - SAUCE: media: ipu-bridge: Support more sensors
  * Fix after-suspend-mediacard/sdhc-insert test failed (LP: #2042500)
    - PCI/ASPM: Move pci_configure_ltr() to aspm.c
    - PCI/ASPM: Always build aspm.c
    - PCI/ASPM: Move pci_save_ltr_state() to aspm.c
    - PCI/A...

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed