------- Comment From nasas...@in.ibm.com 2025-04-11 07:33 EDT------- (In reply to comment #14) > a new kernel 6.14.0-16.16 for 25.04 is currently being built in kernel > team's unstable ppa: > > There is now a signed 6.14.0-16.16 kernel available in the kernel team's > 'unstable' (test/devel) PPA: > https://launchpad.net/~canonical-kernel-team/+archive/ubuntu/unstable/ > > The unsigned one can be found here: > https://launchpad.net/~canonical-kernel-team/+archive/ubuntu/unstable/ > +sourcepub/17144159/+listing-archive-extra > the signed one here: > https://launchpad.net/~canonical-kernel-team/+archive/ubuntu/unstable/ > +sourcepub/17144161/+listing-archive-extra > > The PPA key used for signing can be found in the tarball available here: > https://ppa.launchpad.net/canonical-kernel-team/unstable/ubuntu/dists/devel/ > main/signed/linux-generate-unstable-s390x/current/ > (This key is different from the one used to sign grub2 - see above, comment > #5)
Trying to install the above signed kernel after downloading to the local. Seems required dependency package is required and the same not found at dir - https://launchpad.net/~canonical-kernel- team/+archive/ubuntu/unstable/+sourcepub/17144161/+listing-archive-extra Downloaded the file from https://launchpad.net/~canonical-kernel- team/+archive/ubuntu/unstable/+files/linux- image-6.14.0-16-generic_6.14.0-16.16_ppc64el.deb root@ltcden13-lp2:/home/test# dpkg -i ./linux-image-6.14.0-16-generic_6.14.0-16.16_ppc64el.deb Selecting previously unselected package linux-image-6.14.0-16-generic. (Reading database ... 126419 files and directories currently installed.) Preparing to unpack .../linux-image-6.14.0-16-generic_6.14.0-16.16_ppc64el.deb ... Unpacking linux-image-6.14.0-16-generic (6.14.0-16.16) ... dpkg: dependency problems prevent configuration of linux-image-6.14.0-16-generic: linux-image-6.14.0-16-generic depends on linux-modules-6.14.0-16-generic; however: Package linux-modules-6.14.0-16-generic is not installed. dpkg: error processing package linux-image-6.14.0-16-generic (--install): dependency problems - leaving unconfigured Errors were encountered while processing: linux-image-6.14.0-16-generic Thank You. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2064321 Title: Power guest secure boot with key management: kernel portion Status in The Ubuntu-power-systems project: New Status in linux package in Ubuntu: New Bug description: Covering the kernel portion Feature: This feature comprises PowerVM LPAR guest OS kernel verification using static keys to extend the chain of trust from partition firmware to the OS kernel. GRUB and the host OS kernel are signed with 2 separate public key pairs. Partition firmware includes the the public verification key for GRUB in its build and uses it to verify GRUB. GRUB includes the public verification key for the OS kernel in its build and uses it to verify the OS kernel image Test case: If secure boot is switched off, any GRUB and kernel boots. If secure boot is switched on: - Properly signed GRUB boots. - Improperly signed GRUB does not boot. - Tampered signed GRUB does not boot. - Properly signed kernels boot. - Improperly signed kernels do not boot. - Tampered signed kernels do not boot. TPM PCRs are extended roughly following the TCG PC Client and UEFI specs as they apply to POWER. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-power-systems/+bug/2064321/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
