canonical-hw-cert team mailing list archive

[John Cabaj <2052274@xxxxxxxxxxxxxxxxxx>]

Passed Secure Boot testing

root@jammy-vm:~# dmesg | grep -i secure
[    0.000000] secureboot: Secure boot enabled
[    0.000000] Kernel is locked down from EFI Secure Boot mode; see man kernel_lockdown.7
[    0.003882] secureboot: Secure boot enabled
[    0.977112] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing: 61482aa2830d0ab2ad5af10b7250da9033ddcef0'
[    0.978556] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2017): 242ade75ac4a15e50d50c84b0d45ff3eae707a03'
[    0.979848] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (ESM 2018): 365188c1d374d6b07c3c8f240f8ef722433d6a8b'
[    0.982770] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2019): c0746fd6c5da3ae827864651ad66ae47fe24b3e8'
[    0.986137] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v1): a8d54bbb3825cfb94fa13c9f8a594a195c107b8d'
[    0.987342] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v2): 4cf046892d6fd3c9a5b03f98d845f90851dc6a8c'
[    0.988614] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v3): 100437bb6de6e469b581e61cd66bce3ef4ed53af'
[    0.989983] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (Ubuntu Core 2019): c1d57b8f6b743f23ee41f4f7ee292f06eecadfb9'
root@jammy-vm:~# cat /sys/kernel/security/lockdown
none [integrity] confidentiality


** Changed in: kernel-sru-workflow/security-signoff
       Status: New => Invalid

** Changed in: kernel-sru-workflow/signing-signoff
       Status: Confirmed => Fix Released

** Changed in: kernel-sru-workflow/signing-signoff
     Assignee: (unassigned) => John Cabaj (john-cabaj)

-- 
You received this bug notification because you are a member of hardware-
certification-users, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/2052274

Title:
  jammy/linux-gcp-6.5: 6.5.0-1014.14~22.04.1 -proposed tracker

Status in Kernel SRU Workflow:
  In Progress
Status in Kernel SRU Workflow abi-testing series:
  Fix Released
Status in Kernel SRU Workflow automated-testing series:
  New
Status in Kernel SRU Workflow boot-testing series:
  Fix Released
Status in Kernel SRU Workflow certification-testing series:
  Invalid
Status in Kernel SRU Workflow new-review series:
  Triaged
Status in Kernel SRU Workflow prepare-package series:
  Fix Released
Status in Kernel SRU Workflow prepare-package-generate series:
  Fix Released
Status in Kernel SRU Workflow prepare-package-lrg series:
  Fix Released
Status in Kernel SRU Workflow prepare-package-lrm series:
  Fix Released
Status in Kernel SRU Workflow prepare-package-lrs series:
  Fix Released
Status in Kernel SRU Workflow prepare-package-meta series:
  Fix Released
Status in Kernel SRU Workflow prepare-package-signed series:
  Fix Released
Status in Kernel SRU Workflow promote-signing-to-proposed series:
  New
Status in Kernel SRU Workflow promote-to-proposed series:
  Confirmed
Status in Kernel SRU Workflow promote-to-security series:
  Invalid
Status in Kernel SRU Workflow promote-to-updates series:
  New
Status in Kernel SRU Workflow regression-testing series:
  New
Status in Kernel SRU Workflow security-signoff series:
  Invalid
Status in Kernel SRU Workflow signing-signoff series:
  Fix Released
Status in Kernel SRU Workflow sru-review series:
  Fix Released
Status in Kernel SRU Workflow verification-testing series:
  New
Status in linux-gcp-6.5 source package in Jammy:
  New

Bug description:
  This bug will contain status and test results related to a kernel
  source (or snap) as stated in the title.

  For an explanation of the tasks and the associated workflow see:
    https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

  -- swm properties --
  built:
    from: c60e7f5a75a20644
    route-entry: 2
  comments:
    abi-testing: 1
  delta:
    promote-to-proposed: [lrm, lrs, main, meta, signed, lrg, generate]
  flag:
    boot-testing-requested: true
    stream-from-cycle: true
  issue: KSRU-11230
  kernel-stable-master-bug: 2052275
  packages:
    generate: linux-generate-gcp-6.5
    lrg: linux-restricted-generate-gcp-6.5
    lrm: linux-restricted-modules-gcp-6.5
    lrs: linux-restricted-signatures-gcp-6.5
    main: linux-gcp-6.5
    meta: linux-meta-gcp-6.5
    signed: linux-signed-gcp-6.5
  phase: Ready for Promote to Proposed
  phase-changed: Thursday, 15. February 2024 16:41 UTC
  reason:
    new-review: Stalled -s ready for review (built)
    promote-to-proposed: Pending -- ready for review
  synthetic:
    :promote-to-as-proposed: Invalid
  variant: debs
  versions:
    lrm: 6.5.0-1014.14~22.04.1
    main: 6.5.0-1014.14~22.04.1
    meta: 6.5.0.1014.14~22.04.1
    signed: 6.5.0-1014.14~22.04.1
  ~~:
    announce:
      swm-transition-crankable: 2024-02-10 00:53:43.220039
    clamps:
      new-review: c60e7f5a75a20644
      promote-to-proposed: c60e7f5a75a20644
      self: 6.5.0-1014.14~22.04.1
      sru-review: c60e7f5a75a20644
    tracker:
      last-message: '2024-02-15 16:40:25.130667+00:00'

To manage notifications about this bug go to:
https://bugs.launchpad.net/kernel-sru-workflow/+bug/2052274/+subscriptions