Public bug reported:

== Comment: #0 - Grgo Mariani <[email protected]> - 2025-06-23 03:21:06 ==
---Problem Description---
Recently pkey module has been split into pkey, pkey-cca, pkey-ep11, pkey-pckmo 
and pkey-uv.
This might cause problems for customers who use encrypted root directory with 
any of these as it requires these modules to be loaded with initrd.
However listing the modules with lsinitramfs only shows the pkey module being 
loaded.

e.g.
$ lsinitramfs /boot/initrd.img-$(uname -r) | grep pkey
usr/lib/modules/6.14.0-22-generic/kernel/drivers/s390/crypto/pkey.ko.zst
$ ls -la /lib/modules/$(uname -r)/kernel/drivers/s390/crypto | grep pkey
-rw-r--r-- 1 root root  8003 May 21 09:38 pkey-cca.ko.zst
-rw-r--r-- 1 root root  7304 May 21 09:38 pkey-ep11.ko.zst
-rw-r--r-- 1 root root 15922 May 21 09:38 pkey.ko.zst
-rw-r--r-- 1 root root  6207 May 21 09:38 pkey-pckmo.ko.zst
-rw-r--r-- 1 root root  4643 May 21 09:38 pkey-uv.ko.zst
 
---uname output---
Linux SYSTEM 6.14.0-22-generic #22-Ubuntu SMP Wed May 21 13:32:46 UTC 2025 
s390x s390x s390x GNU/Linux
 
---Additional Hardware Info---
CEX cards attached 

 
Contact Information = [email protected] [email protected] 
 
Machine Type = Manufacturer:         IBM              Type:                 
8561 Model:                701              T01 
 
---Debugger---
A debugger is not configured
 
---Steps to Reproduce---
Check the modules in the initrd
$ lsinitramfs /boot/initrd.img-$(uname -r) | grep pkey
and compare them with available modules
$ ls -la /lib/modules/$(uname -r)/kernel/drivers/s390/crypto/ | grep pkey
 
System Dump Info:
  The system is not configured to capture a system dump.
 
Stack trace output:
 no
 
Oops output:
 no

== Comment: #1 - Ingo Franzki <[email protected]> - 2025-06-23 03:24:23 ==
FYI: You can use the Dracut config file from 
https://github.com/ibm-s390-linux/s390-tools/blob/master/zkey/dracut/99-pkey.conf
 to get all required modules, tools and files into initramfs.

== Comment: #4 - Ingo Franzki <[email protected]> - 2025-06-23 08:01:41 ==
In case initramfs-tools is still being used then 
https://github.com/ibm-s390-linux/s390-tools/blob/master/zkey/initramfs/hooks/s390-tools-zkey
 can be used.

** Affects: linux (Ubuntu)
     Importance: Undecided
     Assignee: Skipper Bug Screeners (skipper-screen-team)
         Status: Confirmed


** Tags: architecture-s3903164 bugnameltc-213961 severity-high 
targetmilestone-inin2504

** Tags added: architecture-s3903164 bugnameltc-213961 severity-high
targetmilestone-inin2504

** Changed in: ubuntu
     Assignee: (unassigned) => Skipper Bug Screeners (skipper-screen-team)

** Package changed: ubuntu => linux (Ubuntu)

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2115718

Title:
  [UBUNTU 25.04] not all pkey modules available in initrd

Status in linux package in Ubuntu:
  Confirmed

Bug description:
  == Comment: #0 - Grgo Mariani <[email protected]> - 2025-06-23 03:21:06 ==
  ---Problem Description---
  Recently pkey module has been split into pkey, pkey-cca, pkey-ep11, 
pkey-pckmo and pkey-uv.
  This might cause problems for customers who use encrypted root directory with 
any of these as it requires these modules to be loaded with initrd.
  However listing the modules with lsinitramfs only shows the pkey module being 
loaded.

  e.g.
  $ lsinitramfs /boot/initrd.img-$(uname -r) | grep pkey
  usr/lib/modules/6.14.0-22-generic/kernel/drivers/s390/crypto/pkey.ko.zst
  $ ls -la /lib/modules/$(uname -r)/kernel/drivers/s390/crypto | grep pkey
  -rw-r--r-- 1 root root  8003 May 21 09:38 pkey-cca.ko.zst
  -rw-r--r-- 1 root root  7304 May 21 09:38 pkey-ep11.ko.zst
  -rw-r--r-- 1 root root 15922 May 21 09:38 pkey.ko.zst
  -rw-r--r-- 1 root root  6207 May 21 09:38 pkey-pckmo.ko.zst
  -rw-r--r-- 1 root root  4643 May 21 09:38 pkey-uv.ko.zst
   
  ---uname output---
  Linux SYSTEM 6.14.0-22-generic #22-Ubuntu SMP Wed May 21 13:32:46 UTC 2025 
s390x s390x s390x GNU/Linux
   
  ---Additional Hardware Info---
  CEX cards attached 

   
  Contact Information = [email protected] [email protected] 
   
  Machine Type = Manufacturer:         IBM              Type:                 
8561 Model:                701              T01 
   
  ---Debugger---
  A debugger is not configured
   
  ---Steps to Reproduce---
  Check the modules in the initrd
  $ lsinitramfs /boot/initrd.img-$(uname -r) | grep pkey
  and compare them with available modules
  $ ls -la /lib/modules/$(uname -r)/kernel/drivers/s390/crypto/ | grep pkey
   
  System Dump Info:
    The system is not configured to capture a system dump.
   
  Stack trace output:
   no
   
  Oops output:
   no

  == Comment: #1 - Ingo Franzki <[email protected]> - 2025-06-23 03:24:23 ==
  FYI: You can use the Dracut config file from 
https://github.com/ibm-s390-linux/s390-tools/blob/master/zkey/dracut/99-pkey.conf
 to get all required modules, tools and files into initramfs.

  == Comment: #4 - Ingo Franzki <[email protected]> - 2025-06-23 08:01:41 ==
  In case initramfs-tools is still being used then 
https://github.com/ibm-s390-linux/s390-tools/blob/master/zkey/initramfs/hooks/s390-tools-zkey
 can be used.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2115718/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to