debcrafters-packages team mailing list archive

[Frank Heimes <2115718@xxxxxxxxxxxxxxxxxx>]

** Package changed: linux (Ubuntu) => s390-tools (Ubuntu)

** Also affects: ubuntu-z-systems
   Importance: Undecided
       Status: New

** Changed in: ubuntu-z-systems
       Status: New => Confirmed

** Changed in: ubuntu-z-systems
     Assignee: (unassigned) => Skipper Bug Screeners (skipper-screen-team)

** Changed in: ubuntu-z-systems
   Importance: Undecided => High

** Changed in: s390-tools (Ubuntu)
   Importance: Undecided => High

** Changed in: s390-tools (Ubuntu)
     Assignee: Skipper Bug Screeners (skipper-screen-team) => (unassigned)

** Also affects: s390-tools-signed (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: s390-tools-signed (Ubuntu)
       Status: New => Confirmed

** Changed in: s390-tools-signed (Ubuntu)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of
Debcrafters packages, which is subscribed to s390-tools in Ubuntu.
https://bugs.launchpad.net/bugs/2115718

Title:
  [UBUNTU 25.04] not all pkey modules available in initrd

Status in Ubuntu on IBM z Systems:
  Confirmed
Status in s390-tools package in Ubuntu:
  Confirmed
Status in s390-tools-signed package in Ubuntu:
  Confirmed

Bug description:
  == Comment: #0 - Grgo Mariani <Grgo.Mariani@xxxxxxx> - 2025-06-23 03:21:06 ==
  ---Problem Description---
  Recently pkey module has been split into pkey, pkey-cca, pkey-ep11, pkey-pckmo and pkey-uv.
  This might cause problems for customers who use encrypted root directory with any of these as it requires these modules to be loaded with initrd.
  However listing the modules with lsinitramfs only shows the pkey module being loaded.

  e.g.
  $ lsinitramfs /boot/initrd.img-$(uname -r) | grep pkey
  usr/lib/modules/6.14.0-22-generic/kernel/drivers/s390/crypto/pkey.ko.zst
  $ ls -la /lib/modules/$(uname -r)/kernel/drivers/s390/crypto | grep pkey
  -rw-r--r-- 1 root root  8003 May 21 09:38 pkey-cca.ko.zst
  -rw-r--r-- 1 root root  7304 May 21 09:38 pkey-ep11.ko.zst
  -rw-r--r-- 1 root root 15922 May 21 09:38 pkey.ko.zst
  -rw-r--r-- 1 root root  6207 May 21 09:38 pkey-pckmo.ko.zst
  -rw-r--r-- 1 root root  4643 May 21 09:38 pkey-uv.ko.zst
   
  ---uname output---
  Linux SYSTEM 6.14.0-22-generic #22-Ubuntu SMP Wed May 21 13:32:46 UTC 2025 s390x s390x s390x GNU/Linux
   
  ---Additional Hardware Info---
  CEX cards attached 

   
  Contact Information = grgo.mariani@xxxxxxx christian.rund@xxxxxxxxxx 
   
  Machine Type = Manufacturer:         IBM              Type:                 8561 Model:                701              T01 
   
  ---Debugger---
  A debugger is not configured
   
  ---Steps to Reproduce---
  Check the modules in the initrd
  $ lsinitramfs /boot/initrd.img-$(uname -r) | grep pkey
  and compare them with available modules
  $ ls -la /lib/modules/$(uname -r)/kernel/drivers/s390/crypto/ | grep pkey
   
  System Dump Info:
    The system is not configured to capture a system dump.
   
  Stack trace output:
   no
   
  Oops output:
   no

  == Comment: #1 - Ingo Franzki <ifranzki@xxxxxxxxxx> - 2025-06-23 03:24:23 ==
  FYI: You can use the Dracut config file from https://github.com/ibm-s390-linux/s390-tools/blob/master/zkey/dracut/99-pkey.conf to get all required modules, tools and files into initramfs.

  == Comment: #4 - Ingo Franzki <ifranzki@xxxxxxxxxx> - 2025-06-23 08:01:41 ==
  In case initramfs-tools is still being used then https://github.com/ibm-s390-linux/s390-tools/blob/master/zkey/initramfs/hooks/s390-tools-zkey can be used.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/2115718/+subscriptions