Project

General

Profile

Actions

action #180614

closed

[security] secure boot disabled after installation on 15-SP7? verify_efi_mok fails. Study if a product bug.

Added by tjyrinki_suse 15 days ago. Updated 9 days ago.

Status:
Resolved
Priority:
High
Assignee:
Category:
Bugs in existing tests
Target version:
-
Start date:
Due date:
% Done:

100%

Estimated time:
16.00 h
Difficulty:

Description

openQA test in scenario sle-15-SP7-Online-aarch64-aarch64_secureboot@aarch64 fails in
verify_efi_mok

Fails since (at least) Build 82.1 (current job)

Last good: 80.2 (or more recent)

Very notably also a rerun with last_good_build passes so it should not be about eg worker config! https://openqa.suse.de/tests/17232380

While simple retry https://openqa.suse.de/tests/17232377 or retry with current build but earlier test versions https://openqa.suse.de/tests/17232378 both fail.

This is on aarch64_secureboot which is executed on aarch64 only.

A related kernel_lockdown test also fails: https://openqa.suse.de/tests/17297013#step/kernel_lockdown/1

Acceptance Criteria

  1. Study the problem, is this is product bug in Build 82.1 and newer? File a product bug if needed.

Related issues 1 (0 open1 closed)

Related to openQA Tests (public) - action #179948: [security][15-SP7] test fails in verify_efi_mokResolvedpstivanin2025-04-03

Actions
Actions #1

Updated by tjyrinki_suse 15 days ago

  • Description updated (diff)
Actions #2

Updated by tjyrinki_suse 15 days ago

  • Description updated (diff)
Actions #3

Updated by pstivanin 14 days ago

  • Status changed from Workable to In Progress
  • Assignee set to pstivanin
Actions #4

Updated by tjyrinki_suse 14 days ago

  • Related to action #179948: [security][15-SP7] test fails in verify_efi_mok added
Actions #5

Updated by pstivanin 10 days ago

  • Status changed from In Progress to Resolved
  • % Done changed from 0 to 30
  • Estimated time changed from 8.00 h to 16.00 h

Seems like an issue with autoyast because the generated HDD doesn't have secureboot enabled even though it should.

Actions #6

Updated by pstivanin 10 days ago

  • Status changed from Resolved to In Progress
Actions #7

Updated by pstivanin 9 days ago

  • Status changed from In Progress to Resolved
  • % Done changed from 30 to 100
Actions #8

Updated by tjyrinki_suse 9 days ago

Great to hear, thank you for investigating!

Actions

Also available in: Atom PDF