← Back to team overview

canonical-ubuntu-qa team mailing list archive

[Bug 2061365] Re: ubuntu_kvm_smoke_test failed with "fips: mandatory checksum data missing - aborting" on X-fips

 

** Merge proposal linked:
   https://code.launchpad.net/~canonical-kernel-team/+git/autotest-client-tests/+merge/464307

-- 
You received this bug notification because you are a member of Canonical
Platform QA Team, which is subscribed to ubuntu-kernel-tests.
https://bugs.launchpad.net/bugs/2061365

Title:
  ubuntu_kvm_smoke_test failed with "fips: mandatory checksum data
  missing - aborting" on X-fips

Status in ubuntu-kernel-tests:
  In Progress

Bug description:
  Issue found with X-fips 4.4.0-1100.107

  Test failed with:
    fips: mandatory checksum data missing - aborting

  Test log:
    Running 'sudo -u ubuntu /home/ubuntu/autotest/client/tests/ubuntu_kvm_smoke_test/the-test amd64'
    + SUT=bjf-test
    + SSH_KEY=/home/ubuntu/.ssh/id_rsa
    + SSH_OPTIONS='-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=quiet -i /home/ubuntu/.ssh/id_rsa'
    ++ awk '{print$2}'
    ++ lsb_release -c
    + DISTRO=xenial
    + ARCHITECTURE=amd64
    + trap cleanup EXIT
    + '[' -z amd64 ']'
    + kvm-ok
    INFO: /dev/kvm exists
    KVM acceleration can be used
    + '[' 0 '!=' 0 ']'
    + set -e
    + '[' '!' -f /home/ubuntu/.ssh/id_rsa ']'
    + ssh-keygen -f /home/ubuntu/.ssh/id_rsa -t rsa -N ''
    Generating public/private rsa key pair.
    Your identification has been saved in /home/ubuntu/.ssh/id_rsa.
    Your public key has been saved in /home/ubuntu/.ssh/id_rsa.pub.
    The key fingerprint is:
    SHA256:gQ81DpOj3eU6BHHn8f8g9en8yXAoFRXU/bJU7H0c6Q0 ubuntu@kt-x-lfps-fps-s2-bc2r4d20-u-kvm-smk-test-amd64
    The key's randomart image is:
    +---[RSA 2048]----+
    |      +o+ o   .==|
    |      +B +.o  Eo=|
    |     oo+oo. ..o==|
    |    . .oo..  o+oO|
    |       .S.  .oo+o|
    |        o   ..=o |
    |         . . o +.|
    |            . + o|
    |               o.|
    +----[SHA256]-----+
    + '[' amd64 = ppc64el ']'
    ++ uvt-simplestreams-libvirt query
    ++ grep -P 'xenial.*amd64'
    ++ true
    + image=
    + '[' -z '' ']'
    + uvt-simplestreams-libvirt sync --source http://cloud-images.ubuntu.com/daily release=xenial arch=amd64
    + uvt-kvm create bjf-test release=xenial arch=amd64
    + uvt-kvm wait bjf-test --insecure --ssh-private-key-file /home/ubuntu/.ssh/id_rsa
    fips: mandatory checksum data missing - aborting
    Traceback (most recent call last):
      File "/usr/bin/uvt-kvm", line 35, in
        uvtool.libvirt.kvm.main_cli_wrapper(sys.argv[1:])
      File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 717, in main_cli_wrapper
        main(*args, **kwargs)
      File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 712, in main
        args.func(parser, args)
      File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 645, in main_wait
        main_wait_remote(parser, args)
      File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 613, in main_wait_remote
        private_key_file=args.ssh_private_key_file,
      File "/usr/lib/python2.7/dist-packages/uvtool/libvirt/kvm.py", line 497, in ssh
        ssh_call, preexec_fn=subprocess_setup, close_fds=True, stdin=stdin
      File "/usr/lib/python2.7/subprocess.py", line 541, in check_call
        raise CalledProcessError(retcode, cmd)
    subprocess.CalledProcessError: Command '[u'ssh', u'-o', u'UserKnownHostsFile=/dev/null', u'-o', u'StrictHostKeyChecking=no', u'-o', u'CheckHostIP=no', u'-l', u'ubuntu', u'-i', '/home/ubuntu/.ssh/id_rsa', u'192.168.122.40', u'env', u'UVTOOL_WAIT_INTERVAL=8.0', u'UVTOOL_WAIT_TIMEOUT=120.0', u'sh', u'-']' returned non-zero exit status 255
    + cleanup
    + uvt-kvm destroy bjf-test
    + '[' amd64 = ppc64el ']'

  This issue does not exist in X-fips 4.4.0-1099.106 from the previous
  cycle (s2024.02.05). But it's earlier than the recent fipsdevppa
  change was implemented.

  This affects just X-fips, other releases appears to have the dependency configure properly.
  We just need to install openssh-client-hmac for this test.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-kernel-tests/+bug/2061365/+subscriptions



References