canonical-ubuntu-qa team mailing list archive

[Magali Lemes do Sacramento <2120501@xxxxxxxxxxxxxxxxxx>]

It seems `run_migration` and `run_panic` are using ncat to send QMP commands to the QEMU instance and, for some reason, ncat isn't working quite well in FIPS-enabled environments on Noble.
For instance, running `ncat example.com 443` results in the same `OpenSSL failed to create a new SSL_CTX: error:0A0000A1:SSL routines::library has no ciphers`.
As this seems to be a userspace issue, I've asked the Security Standards team about it.

-- 
You received this bug notification because you are a member of Canonical
Platform QA Team, which is subscribed to ubuntu-kernel-tests.
https://bugs.launchpad.net/bugs/2120501

Title:
  migration and panic tests from kvm-unit-tests fail on n:fips

Status in ubuntu-kernel-tests:
  New

Bug description:
  Several test cases from ubuntu_kvm_unit_tests are failing with n:fips.
  The issue was found with n:fips version 6.8.0-72.72+fips1 in the 2025.07.14 cycle.
  On arm-server:
  - debug-bp-migration
  - debug-sstep-migration
  - debug-wp-migration
  - its-migrate-unmapped-collection
  - its-migration
  - its-pending-migration
  On s2lp3.s390x.lpar:
  - migration
  - migration-cmm
  - migration-memory
  - migration-sck
  - migration-skey-parallel
  - migration-skey-sequential
  - panic-loop-extint
  - panic-loop-pgm
  - selftest-migration

  They are all failing similarly with the following line:
  OpenSSL failed to create a new SSL_CTX: error:0A0000A1:SSL routines::library has no ciphers

  Although this look arch-specific, it isn't. These tests either have
  `run_migration` or `run_panic`, which isn't part of the tests
  triggered for amd64.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-kernel-tests/+bug/2120501/+subscriptions