action #108548
open
[sle][security][backlog]automation: Integrate 'secure-boot' on Power into openQA
Added by Xiaojing_liu over 2 years ago.
Updated over 2 years ago.
Description
Story¶
We got a feature https://jira.suse.com/browse/SLE-18851
Task¶
- Start a OS on Power with secure-boot=on
- Check if the secure boot is enabled after OS started.
- load signed kernel and modules successfully
- load signed with wrong key kernel and modules fail
- Related to action #108170: [sle][security][ppc64le] Move secure-boot test cases into OSD added
- Status changed from In Progress to Blocked
qemu-6.2.x could support this feature, so we should wait for OSD workers upgrade to this version
- Subject changed from [sle][security][sle15sp4]automation: Integrate 'secure-boot' on Power into openQA to [sle][security][backlog]automation: Integrate 'secure-boot' on Power into openQA
- Target version set to future
- Assignee changed from Xiaojing_liu to pstivanin
- Priority changed from Normal to Low
- Assignee deleted (
pstivanin)
- Related to action #111866: Upgrade osd workers and openqa-monitor to openSUSE Leap 15.4 added
The OSD workers have been upgraded to leap 15.4, but I asked the developer Michal Suchanek, he answered:
no official qemu build supports secure boot on ppc, only the patched build in Kernel:tools does
The feature to enable the support has net been even evaluated https://jira.suse.com/browse/PM-3239
We could consider to install the patched qemu from Kernel:tools on our ppc workers if that helps and if the Kernel:tools qemu provides other additional benefits and is well maintained. That would need to be checked.
Also available in: Atom
PDF