canonical-ubuntu-qa team mailing list archive

[Po-Hsu Lin <2061365@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Issue found with X-fips 4.4.0-1100.107

Test failed with:
  fips: mandatory checksum data missing - aborting

Test log:
  Running 'sudo -u ubuntu /home/ubuntu/autotest/client/tests/ubuntu_kvm_smoke_test/the-test amd64'
  + SUT=bjf-test
  + SSH_KEY=/home/ubuntu/.ssh/id_rsa
  + SSH_OPTIONS='-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=quiet -i /home/ubuntu/.ssh/id_rsa'
  ++ awk '{print$2}'
  ++ lsb_release -c
  + DISTRO=xenial
  + ARCHITECTURE=amd64
  + trap cleanup EXIT
  + '[' -z amd64 ']'
  + kvm-ok
  INFO: /dev/kvm exists
  KVM acceleration can be used
  + '[' 0 '!=' 0 ']'
  + set -e
  + '[' '!' -f /home/ubuntu/.ssh/id_rsa ']'
  + ssh-keygen -f /home/ubuntu/.ssh/id_rsa -t rsa -N ''
  Generating public/private rsa key pair.
  Your identification has been saved in /home/ubuntu/.ssh/id_rsa.
  Your public key has been saved in /home/ubuntu/.ssh/id_rsa.pub.
  The key fingerprint is:
  SHA256:gQ81DpOj3eU6BHHn8f8g9en8yXAoFRXU/bJU7H0c6Q0 ubuntu@kt-x-lfps-fps-s2-bc2r4d20-u-kvm-smk-test-amd64
  The key's randomart image is:
  +---[RSA 2048]----+
  |      +o+ o   .==|
  |      +B +.o  Eo=|
  |     oo+oo. ..o==|
  |    . .oo..  o+oO|
  |       .S.  .oo+o|
  |        o   ..=o |
  |         . . o +.|
  |            . + o|
  |               o.|
  +----[SHA256]-----+
  + '[' amd64 = ppc64el ']'
  ++ uvt-simplestreams-libvirt query
  ++ grep -P 'xenial.*amd64'
  ++ true
  + image=
  + '[' -z '' ']'
  + uvt-simplestreams-libvirt sync --source http://cloud-images.ubuntu.com/daily release=xenial arch=amd64
  + uvt-kvm create bjf-test release=xenial arch=amd64
  + uvt-kvm wait bjf-test --insecure --ssh-private-key-file /home/ubuntu/.ssh/id_rsa
  fips: mandatory checksum data missing - aborting
  Traceback (most recent call last):
    File "/usr/bin/uvt-kvm", line 35, in
      uvtool.libvirt.kvm.main_cli_wrapper(sys.argv[1:])
    File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 717, in main_cli_wrapper
      main(*args, **kwargs)
    File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 712, in main
      args.func(parser, args)
    File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 645, in main_wait
      main_wait_remote(parser, args)
    File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 613, in main_wait_remote
      private_key_file=args.ssh_private_key_file,
    File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 497, in ssh
      ssh_call, preexec_fn=subprocess_setup, close_fds=True, stdin=stdin
    File "/usr/lib/python2.7/subprocess.py", line 541, in check_call
      raise CalledProcessError(retcode, cmd)
  subprocess.CalledProcessError: Command '[u'ssh', u'-o', u'UserKnownHostsFile=/dev/null', u'-o', u'StrictHostKeyChecking=no', u'-o', u'CheckHostIP=no', u'-l', u'ubuntu', u'-i', '/home/ubuntu/.ssh/id_rsa', u'192.168.122.40', u'env', u'UVTOOL_WAIT_INTERVAL=8.0', u'UVTOOL_WAIT_TIMEOUT=120.0', u'sh', u'-']' returned non-zero exit status 255
  + cleanup
  + uvt-kvm destroy bjf-test
  + '[' amd64 = ppc64el ']'

This issue does not exist in X-fips 4.4.0-1099.106 from the previous
cycle (s2024.02.05). But it's earlier than the recent fipsdevppa change
was implemented.

This affects just X-fips, other releases appears to have the dependency configure properly.
We just need to install openssh-client-hmac for this test.

** Affects: ubuntu-kernel-tests
     Importance: Undecided
     Assignee: Po-Hsu Lin (cypressyew)
         Status: In Progress


** Tags: 4.4 amd64 sru-s20240205 ubuntu-kvm-smoke-test xenial

** Changed in: ubuntu-kernel-tests
     Assignee: (unassigned) => Po-Hsu Lin (cypressyew)

** Changed in: ubuntu-kernel-tests
       Status: New => Fix Committed

** Changed in: ubuntu-kernel-tests
       Status: Fix Committed => In Progress

** Description changed:

  Issue found with X-fips 4.4.0-1100.107
  
  Test failed with:
-   fips: mandatory checksum data missing - aborting
+   fips: mandatory checksum data missing - aborting
  
  Test log:
-   Running 'sudo -u ubuntu /home/ubuntu/autotest/client/tests/ubuntu_kvm_smoke_test/the-test amd64'
-   + SUT=bjf-test
-   + SSH_KEY=/home/ubuntu/.ssh/id_rsa
-   + SSH_OPTIONS='-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=quiet -i /home/ubuntu/.ssh/id_rsa'
-   ++ awk '{print$2}'
-   ++ lsb_release -c
-   + DISTRO=xenial
-   + ARCHITECTURE=amd64
-   + trap cleanup EXIT
-   + '[' -z amd64 ']'
-   + kvm-ok
-   INFO: /dev/kvm exists
-   KVM acceleration can be used
-   + '[' 0 '!=' 0 ']'
-   + set -e
-   + '[' '!' -f /home/ubuntu/.ssh/id_rsa ']'
-   + ssh-keygen -f /home/ubuntu/.ssh/id_rsa -t rsa -N ''
-   Generating public/private rsa key pair.
-   Your identification has been saved in /home/ubuntu/.ssh/id_rsa.
-   Your public key has been saved in /home/ubuntu/.ssh/id_rsa.pub.
-   The key fingerprint is:
-   SHA256:gQ81DpOj3eU6BHHn8f8g9en8yXAoFRXU/bJU7H0c6Q0 ubuntu@kt-x-lfps-fps-s2-bc2r4d20-u-kvm-smk-test-amd64
-   The key's randomart image is:
-   +---[RSA 2048]----+
-   |      +o+ o   .==|
-   |      +B +.o  Eo=|
-   |     oo+oo. ..o==|
-   |    . .oo..  o+oO|
-   |       .S.  .oo+o|
-   |        o   ..=o |
-   |         . . o +.|
-   |            . + o|
-   |               o.|
-   +----[SHA256]-----+
-   + '[' amd64 = ppc64el ']'
-   ++ uvt-simplestreams-libvirt query
-   ++ grep -P 'xenial.*amd64'
-   ++ true
-   + image=
-   + '[' -z '' ']'
-   + uvt-simplestreams-libvirt sync --source http://cloud-images.ubuntu.com/daily release=xenial arch=amd64
-   + uvt-kvm create bjf-test release=xenial arch=amd64
-   + uvt-kvm wait bjf-test --insecure --ssh-private-key-file /home/ubuntu/.ssh/id_rsa
-   fips: mandatory checksum data missing - aborting
-   Traceback (most recent call last):
-     File "/usr/bin/uvt-kvm", line 35, in 
-       uvtool.libvirt.kvm.main_cli_wrapper(sys.argv[1:])
-     File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 717, in main_cli_wrapper
-       main(*args, **kwargs)
-     File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 712, in main
-       args.func(parser, args)
-     File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 645, in main_wait
-       main_wait_remote(parser, args)
-     File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 613, in main_wait_remote
-       private_key_file=args.ssh_private_key_file,
-     File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 497, in ssh
-       ssh_call, preexec_fn=subprocess_setup, close_fds=True, stdin=stdin
-     File "/usr/lib/python2.7/subprocess.py", line 541, in check_call
-       raise CalledProcessError(retcode, cmd)
-   subprocess.CalledProcessError: Command '[u'ssh', u'-o', u'UserKnownHostsFile=/dev/null', u'-o', u'StrictHostKeyChecking=no', u'-o', u'CheckHostIP=no', u'-l', u'ubuntu', u'-i', '/home/ubuntu/.ssh/id_rsa', u'192.168.122.40', u'env', u'UVTOOL_WAIT_INTERVAL=8.0', u'UVTOOL_WAIT_TIMEOUT=120.0', u'sh', u'-']' returned non-zero exit status 255
-   + cleanup
-   + uvt-kvm destroy bjf-test
-   + '[' amd64 = ppc64el ']'
+   Running 'sudo -u ubuntu /home/ubuntu/autotest/client/tests/ubuntu_kvm_smoke_test/the-test amd64'
+   + SUT=bjf-test
+   + SSH_KEY=/home/ubuntu/.ssh/id_rsa
+   + SSH_OPTIONS='-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=quiet -i /home/ubuntu/.ssh/id_rsa'
+   ++ awk '{print$2}'
+   ++ lsb_release -c
+   + DISTRO=xenial
+   + ARCHITECTURE=amd64
+   + trap cleanup EXIT
+   + '[' -z amd64 ']'
+   + kvm-ok
+   INFO: /dev/kvm exists
+   KVM acceleration can be used
+   + '[' 0 '!=' 0 ']'
+   + set -e
+   + '[' '!' -f /home/ubuntu/.ssh/id_rsa ']'
+   + ssh-keygen -f /home/ubuntu/.ssh/id_rsa -t rsa -N ''
+   Generating public/private rsa key pair.
+   Your identification has been saved in /home/ubuntu/.ssh/id_rsa.
+   Your public key has been saved in /home/ubuntu/.ssh/id_rsa.pub.
+   The key fingerprint is:
+   SHA256:gQ81DpOj3eU6BHHn8f8g9en8yXAoFRXU/bJU7H0c6Q0 ubuntu@kt-x-lfps-fps-s2-bc2r4d20-u-kvm-smk-test-amd64
+   The key's randomart image is:
+   +---[RSA 2048]----+
+   |      +o+ o   .==|
+   |      +B +.o  Eo=|
+   |     oo+oo. ..o==|
+   |    . .oo..  o+oO|
+   |       .S.  .oo+o|
+   |        o   ..=o |
+   |         . . o +.|
+   |            . + o|
+   |               o.|
+   +----[SHA256]-----+
+   + '[' amd64 = ppc64el ']'
+   ++ uvt-simplestreams-libvirt query
+   ++ grep -P 'xenial.*amd64'
+   ++ true
+   + image=
+   + '[' -z '' ']'
+   + uvt-simplestreams-libvirt sync --source http://cloud-images.ubuntu.com/daily release=xenial arch=amd64
+   + uvt-kvm create bjf-test release=xenial arch=amd64
+   + uvt-kvm wait bjf-test --insecure --ssh-private-key-file /home/ubuntu/.ssh/id_rsa
+   fips: mandatory checksum data missing - aborting
+   Traceback (most recent call last):
+     File "/usr/bin/uvt-kvm", line 35, in
+       uvtool.libvirt.kvm.main_cli_wrapper(sys.argv[1:])
+     File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 717, in main_cli_wrapper
+       main(*args, **kwargs)
+     File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 712, in main
+       args.func(parser, args)
+     File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 645, in main_wait
+       main_wait_remote(parser, args)
+     File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 613, in main_wait_remote
+       private_key_file=args.ssh_private_key_file,
+     File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 497, in ssh
+       ssh_call, preexec_fn=subprocess_setup, close_fds=True, stdin=stdin
+     File "/usr/lib/python2.7/subprocess.py", line 541, in check_call
+       raise CalledProcessError(retcode, cmd)
+   subprocess.CalledProcessError: Command '[u'ssh', u'-o', u'UserKnownHostsFile=/dev/null', u'-o', u'StrictHostKeyChecking=no', u'-o', u'CheckHostIP=no', u'-l', u'ubuntu', u'-i', '/home/ubuntu/.ssh/id_rsa', u'192.168.122.40', u'env', u'UVTOOL_WAIT_INTERVAL=8.0', u'UVTOOL_WAIT_TIMEOUT=120.0', u'sh', u'-']' returned non-zero exit status 255
+   + cleanup
+   + uvt-kvm destroy bjf-test
+   + '[' amd64 = ppc64el ']'
  
  This issue does not exist in X-fips 4.4.0-1099.106 from the previous
- cycle (s2024.02.05). But I think it's earlier than the recent fipsdevppa
- change.
+ cycle (s2024.02.05). But it's earlier than the recent fipsdevppa change
+ was implemented.
  
+ This affects just X-fips, other releases appears to have the dependency configure properly.
  We just need to install openssh-client-hmac for this test.

-- 
You received this bug notification because you are a member of Canonical
Platform QA Team, which is subscribed to ubuntu-kernel-tests.
https://bugs.launchpad.net/bugs/2061365

Title:
  ubuntu_kvm_smoke_test failed with "fips: mandatory checksum data
  missing - aborting" on X-fips

Status in ubuntu-kernel-tests:
  In Progress

Bug description:
  Issue found with X-fips 4.4.0-1100.107

  Test failed with:
    fips: mandatory checksum data missing - aborting

  Test log:
    Running 'sudo -u ubuntu /home/ubuntu/autotest/client/tests/ubuntu_kvm_smoke_test/the-test amd64'
    + SUT=bjf-test
    + SSH_KEY=/home/ubuntu/.ssh/id_rsa
    + SSH_OPTIONS='-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=quiet -i /home/ubuntu/.ssh/id_rsa'
    ++ awk '{print$2}'
    ++ lsb_release -c
    + DISTRO=xenial
    + ARCHITECTURE=amd64
    + trap cleanup EXIT
    + '[' -z amd64 ']'
    + kvm-ok
    INFO: /dev/kvm exists
    KVM acceleration can be used
    + '[' 0 '!=' 0 ']'
    + set -e
    + '[' '!' -f /home/ubuntu/.ssh/id_rsa ']'
    + ssh-keygen -f /home/ubuntu/.ssh/id_rsa -t rsa -N ''
    Generating public/private rsa key pair.
    Your identification has been saved in /home/ubuntu/.ssh/id_rsa.
    Your public key has been saved in /home/ubuntu/.ssh/id_rsa.pub.
    The key fingerprint is:
    SHA256:gQ81DpOj3eU6BHHn8f8g9en8yXAoFRXU/bJU7H0c6Q0 ubuntu@kt-x-lfps-fps-s2-bc2r4d20-u-kvm-smk-test-amd64
    The key's randomart image is:
    +---[RSA 2048]----+
    |      +o+ o   .==|
    |      +B +.o  Eo=|
    |     oo+oo. ..o==|
    |    . .oo..  o+oO|
    |       .S.  .oo+o|
    |        o   ..=o |
    |         . . o +.|
    |            . + o|
    |               o.|
    +----[SHA256]-----+
    + '[' amd64 = ppc64el ']'
    ++ uvt-simplestreams-libvirt query
    ++ grep -P 'xenial.*amd64'
    ++ true
    + image=
    + '[' -z '' ']'
    + uvt-simplestreams-libvirt sync --source http://cloud-images.ubuntu.com/daily release=xenial arch=amd64
    + uvt-kvm create bjf-test release=xenial arch=amd64
    + uvt-kvm wait bjf-test --insecure --ssh-private-key-file /home/ubuntu/.ssh/id_rsa
    fips: mandatory checksum data missing - aborting
    Traceback (most recent call last):
      File "/usr/bin/uvt-kvm", line 35, in
        uvtool.libvirt.kvm.main_cli_wrapper(sys.argv[1:])
      File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 717, in main_cli_wrapper
        main(*args, **kwargs)
      File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 712, in main
        args.func(parser, args)
      File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 645, in main_wait
        main_wait_remote(parser, args)
      File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 613, in main_wait_remote
        private_key_file=args.ssh_private_key_file,
      File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 497, in ssh
        ssh_call, preexec_fn=subprocess_setup, close_fds=True, stdin=stdin
      File "/usr/lib/python2.7/subprocess.py", line 541, in check_call
        raise CalledProcessError(retcode, cmd)
    subprocess.CalledProcessError: Command '[u'ssh', u'-o', u'UserKnownHostsFile=/dev/null', u'-o', u'StrictHostKeyChecking=no', u'-o', u'CheckHostIP=no', u'-l', u'ubuntu', u'-i', '/home/ubuntu/.ssh/id_rsa', u'192.168.122.40', u'env', u'UVTOOL_WAIT_INTERVAL=8.0', u'UVTOOL_WAIT_TIMEOUT=120.0', u'sh', u'-']' returned non-zero exit status 255
    + cleanup
    + uvt-kvm destroy bjf-test
    + '[' amd64 = ppc64el ']'

  This issue does not exist in X-fips 4.4.0-1099.106 from the previous
  cycle (s2024.02.05). But it's earlier than the recent fipsdevppa
  change was implemented.

  This affects just X-fips, other releases appears to have the dependency configure properly.
  We just need to install openssh-client-hmac for this test.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-kernel-tests/+bug/2061365/+subscriptions