noble/linux-fips: 6.8.0-31.31+fips3 -proposed tracker

Bug #2062015 reported by Magali Lemes do Sacramento
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Kernel SRU Workflow
Fix Committed
Medium
Unassigned
Abi-testing
Invalid
Medium
Unassigned
Automated-testing
Invalid
Medium
Unassigned
Boot-testing
Fix Released
Medium
Unassigned
New-review
Fix Released
Medium
Andy Whitcroft
Prepare-package
Fix Released
Medium
Magali Lemes do Sacramento
Prepare-package-generate
Fix Released
Medium
Magali Lemes do Sacramento
Prepare-package-lrg
Fix Released
Medium
Magali Lemes do Sacramento
Prepare-package-lrm
Fix Released
Medium
Magali Lemes do Sacramento
Prepare-package-lrs
Fix Released
Medium
Magali Lemes do Sacramento
Prepare-package-meta
Fix Released
Medium
Magali Lemes do Sacramento
Prepare-package-signed
Fix Released
Medium
Magali Lemes do Sacramento
Promote-signing-to-proposed
Invalid
Medium
Unassigned
Promote-to-proposed
Fix Released
Medium
Canonical Kernel Team
Promote-to-release
Invalid
Medium
Ubuntu Package Archive Administrators
Regression-testing
Fix Released
Medium
Canonical Kernel Team
Signing-signoff
Fix Released
Medium
Magali Lemes do Sacramento
Sru-review
Fix Released
Medium
Andy Whitcroft
canonical-signing-jobs
Task00
Fix Released
Medium
Andy Whitcroft
linux (Ubuntu)
Noble
New
Medium
Unassigned

Bug Description

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: d2a37cd777e159f5
  route-entry: 1
delta:
  promote-to-proposed: [lrm, lrs, main, meta, signed, lrg, generate]
flag:
  boot-testing-requested: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
packages:
  generate: linux-generate-fips
  lrg: linux-restricted-generate-fips
  lrm: linux-restricted-modules-fips
  lrs: linux-restricted-signatures-fips
  main: linux-fips
  meta: linux-meta-fips
  signed: linux-signed-fips
phase: Complete
phase-changed: Thursday, 06. June 2024 12:45 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Invalid
variant: debs
versions:
  lrm: 6.8.0-31.31+fips3
  main: 6.8.0-31.31+fips3
  meta: 6.8.0-31.31+fips3
  signed: 6.8.0-31.31+fips3
~~:
  announce:
    swm-transition-crankable: 2024-04-21 15:45:49.355770
  clamps:
    new-review: d2a37cd777e159f5
    promote-to-proposed: d2a37cd777e159f5
    self: 6.8.0-31.31+fips3
    sru-review: d2a37cd777e159f5
  tracker:
    last-message: '2024-06-06 12:42:47.280045+00:00'

tags: added: kernel-release-tracking-bug-live
description: updated
tags: added: kernel-sru-cycle-d2024.02.29-2
description: updated
Changed in kernel-sru-workflow:
status: New → Confirmed
importance: Undecided → Medium
Changed in linux (Ubuntu Noble):
importance: Undecided → Medium
tags: added: kernel-block-derivatives
Changed in kernel-sru-workflow:
status: Confirmed → Triaged
description: updated
Changed in kernel-sru-workflow:
status: Triaged → In Progress
description: updated
description: updated
description: updated
description: updated
description: updated
summary: - noble/linux-fips: <version to be filled> -proposed tracker
+ noble/linux-fips: 6.8.0-28.28+fips1 -proposed tracker
description: updated
summary: - noble/linux-fips: 6.8.0-28.28+fips1 -proposed tracker
+ noble/linux-fips: 6.8.0-31.31+fips1 -proposed tracker
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote : Kernel requires additional signoff

New kernel with signed kernels; signing-review required.

description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
Revision history for this message
Andy Whitcroft (apw) wrote : Re: noble/linux-fips: 6.8.0-31.31+fips1 -proposed tracker

Clang version looks to be retrograde relative to master.

description: updated
summary: - noble/linux-fips: 6.8.0-31.31+fips1 -proposed tracker
+ noble/linux-fips: 6.8.0-31.31+fips2 -proposed tracker
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote : Kernel requires additional signoff

New kernel with signed kernels; signing-review required.

description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
Revision history for this message
Andy Whitcroft (apw) wrote : Re: noble/linux-fips: 6.8.0-31.31+fips2 -proposed tracker

Dropping a number of dkms-versions entries unexpectedly.

description: updated
summary: - noble/linux-fips: 6.8.0-31.31+fips2 -proposed tracker
+ noble/linux-fips: 6.8.0-31.31+fips3 -proposed tracker
description: updated
description: updated
description: updated
description: updated
description: updated
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote : Kernel requires additional signoff

New kernel with signed kernels; signing-review required.

description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
Revision history for this message
Magali Lemes do Sacramento (magalilemes) wrote :

root@noble:~# uname -a
Linux noble 6.8.0-31-fips #31+fips3-Ubuntu SMP PREEMPT_DYNAMIC Wed May 22 14:29:38 UTC 202 x86_64 x86_64 x86_64 GNU/Linux
root@noble:~# dmesg | grep -i "secure boot" | head -n2
[ 0.000000] secureboot: Secure boot enabled
[ 0.000000] Kernel is locked down from EFI Secure Boot mode; see man kernel_lockdown.7
root@noble:~# cat /sys/kernel/security/lockdown
none [integrity] confidentiality

root@noble:~# uname -a
Linux noble 6.8.0-31-fips #31+fips3-Ubuntu SMP PREEMPT_DYNAMIC Wed May 22 13:25:55 UTC 202 aarch64 aarch64 aarch64 GNU/Linux
root@noble:~# dmesg | grep -i "secure boot" | head -n2
[ 0.000000] secureboot: Secure boot enabled
[ 0.000000] Kernel is locked down from EFI Secure Boot mode; see man kernel_lockdown.7
root@noble:~# cat /sys/kernel/security/lockdown
none [integrity] confidentiality

description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
Revision history for this message
Magali Lemes do Sacramento (magalilemes) wrote :

A few test failures, but nothing alarming.
It should be better comparing the results with a most recent (-35) base version than this one (-31).

tags: added: regression-testing-passed
description: updated
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote : Workflow done!

All tasks have been completed and the bug is being closed

Changed in kernel-sru-workflow:
status: In Progress → Fix Committed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.