Project

General

Profile

Actions

action #108548

open

[sle][security][backlog]automation: Integrate 'secure-boot' on Power into openQA

Added by Xiaojing_liu about 2 years ago. Updated over 1 year ago.

Status:
Blocked
Priority:
Low
Assignee:
-
Category:
New test
Target version:
Start date:
2022-03-17
Due date:
% Done:

90%

Estimated time:
16.00 h
Difficulty:
Tags:

Description

Story

We got a feature https://jira.suse.com/browse/SLE-18851

Task

  1. Start a OS on Power with secure-boot=on
  2. Check if the secure boot is enabled after OS started.
  3. load signed kernel and modules successfully
  4. load signed with wrong key kernel and modules fail

Related issues 2 (1 open1 closed)

Related to openQA Tests - action #108170: [sle][security][ppc64le] Move secure-boot test cases into OSDBlocked2022-03-11

Actions
Related to openQA Infrastructure - action #111866: Upgrade osd workers and openqa-monitor to openSUSE Leap 15.4Resolvedokurz

Actions
Actions #1

Updated by Xiaojing_liu about 2 years ago

  • Related to action #108170: [sle][security][ppc64le] Move secure-boot test cases into OSD added
Actions #3

Updated by Xiaojing_liu almost 2 years ago

  • Status changed from In Progress to Blocked

qemu-6.2.x could support this feature, so we should wait for OSD workers upgrade to this version

Actions #4

Updated by Xiaojing_liu almost 2 years ago

  • Subject changed from [sle][security][sle15sp4]automation: Integrate 'secure-boot' on Power into openQA to [sle][security][backlog]automation: Integrate 'secure-boot' on Power into openQA
  • Target version set to future
Actions #5

Updated by rfan1 over 1 year ago

  • Assignee changed from Xiaojing_liu to pstivanin
Actions #6

Updated by rfan1 over 1 year ago

  • Priority changed from Normal to Low
Actions #7

Updated by pstivanin over 1 year ago

  • Assignee deleted (pstivanin)
Actions #8

Updated by punkioudi over 1 year ago

  • Related to action #111866: Upgrade osd workers and openqa-monitor to openSUSE Leap 15.4 added
Actions #9

Updated by Xiaojing_liu over 1 year ago

The OSD workers have been upgraded to leap 15.4, but I asked the developer Michal Suchanek, he answered:

no official qemu build supports secure boot on ppc, only the patched build in Kernel:tools does

The feature to enable the support has net been even evaluated https://jira.suse.com/browse/PM-3239
Actions #10

Updated by okurz over 1 year ago

We could consider to install the patched qemu from Kernel:tools on our ppc workers if that helps and if the Kernel:tools qemu provides other additional benefits and is well maintained. That would need to be checked.

Actions

Also available in: Atom PDF