Actions
action #108548
open[sle][security][backlog]automation: Integrate 'secure-boot' on Power into openQA
Start date:
2022-03-17
Due date:
% Done:
90%
Estimated time:
16.00 h
Difficulty:
Tags:
Description
Story¶
We got a feature https://jira.suse.com/browse/SLE-18851
Task¶
- Start a OS on Power with secure-boot=on
- Check if the secure boot is enabled after OS started.
- load signed kernel and modules successfully
- load signed with wrong key kernel and modules fail
Updated by Xiaojing_liu almost 3 years ago
Updated by Xiaojing_liu over 2 years ago
- Status changed from In Progress to Blocked
qemu-6.2.x could support this feature, so we should wait for OSD workers upgrade to this version
Updated by Xiaojing_liu over 2 years ago
- Subject changed from [sle][security][sle15sp4]automation: Integrate 'secure-boot' on Power into openQA to [sle][security][backlog]automation: Integrate 'secure-boot' on Power into openQA
- Target version set to future
Updated by rfan1 over 2 years ago
- Assignee changed from Xiaojing_liu to pstivanin
Updated by punkioudi over 2 years ago
- Related to action #111866: Upgrade osd workers and openqa-monitor to openSUSE Leap 15.4 added
Updated by Xiaojing_liu over 2 years ago
The OSD workers have been upgraded to leap 15.4, but I asked the developer Michal Suchanek, he answered:
no official qemu build supports secure boot on ppc, only the patched build in Kernel:tools does
The feature to enable the support has net been even evaluated https://jira.suse.com/browse/PM-3239
Updated by okurz over 2 years ago
We could consider to install the patched qemu from Kernel:tools on our ppc workers if that helps and if the Kernel:tools qemu provides other additional benefits and is well maintained. That would need to be checked.
Actions