I was able to boot the kernel and I was able to validate that the Mok
entry does appear. We can close this bug now since its not an issue.
Thanks a lot for your help:)
-Vinay
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bu
Hi Steve,
What about the scenario where the signers are different for kernel and
grub? For example, if the kernel is signed using a self signed cert and
loaded using MOK.
I am trying to do that right now but the kernel fails to load when
signed with a MOK key.
-Vinay
--
You received this bug n
Public bug reported:
On Ubuntu 20.04, the binary_bios_measurements do NOT contain the
measurements for the kernel binary and the kernel signer cert that is
typically measured by the shim.
This is behavior is NOT consistent with Ubuntu 18.04 where the
measurements are present.
Attaching the measu
Public bug reported:
In the binary bios measurements, the hash of the event measured by shim
does not match the event digest in the measurements. This is due to an
extra zero byte in the event that is not accounted for in the data that
is measured to the PCR.
https://github.com/rhboot/shim/commit
Public bug reported:
Ubuntu18.04 running Linux Kernel 5.0.0.23 logs bios measurements in SHA1
instead of SHA256. OS attestation mechanisms that we are working on
expect the bios measurements to have SHA256 digests. Is it possible to
make sure that the measurements are SHA256 instead of SHA1.
** A
Hi Marcelo,
I tested the Linux-azure-edge kernel at my end and I was able to verify
that the PCR value 0 through 7 match.
Thanks a lot for your help and support.
Thanks
Vinay
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://b
*** This bug is a duplicate of bug 1864533 ***
https://bugs.launchpad.net/bugs/1864533
** Description changed:
- Currently TCG log is not exposed when secure boot is disabled. Because
- of this attestation service doesn't know if TCG log was missing or
- secureboot was disabled. Ask here is t
Public bug reported:
Currently TCG log is not exposed when secure boot is disabled. Because
of this attestation service doesn't know if TCG log was missing or
secureboot was disabled. Ask here is to expose TCG log even if secure
boot is disabled. As part of this we also discussed GRUB changes to
e
That sounds good. I will try and test it at end too.
Thanks a lot for your help :)
-Vinay
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1838796
Title:
TPM event log does not contain events measure
Hi Marcelo,
I am facing the same issue as I was with the .deb packages. When I run
"sudo apt install Linux-azure-edge" and reboot, the kernel does not
boot.
I am able to boot into the Linux 5.3.040-generic kernel but not the
azure edge kernel.
That said, I tried it on both the physical machine a
Hi Marcelo,
Thanks for the information. I will try and validate the Linux-azure-edge
kernel.
Regarding your test environment, there are no issues. This is the
expected environment for the guest OS.
-Vinay
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is s
Hi Marcelo,
I am trying to load the kernel on an x86_64 physical machine. Here is
how I installed the .deb pkg on the machine.
"sudo dpkg -i linux-
modules-4.15.0-1066-azure_4.15.0-1066.71+lp1838796.2_amd64.deb"
"sudo dpkg -i linux-image-
unsigned-4.15.0-1066-azure_4.15.0-1066.71+lp1838796.2_amd
Hi Marcelo,
I tried to validate the test kernel provided by you in comment 23. I am not
able to load the kernel. When I select the kernel from the grub menu, the
loading gets stuck at "Loading initial ramdisk".
I tried it with secure boot disabled too, just to be sure we are not
making any mis
Hi Marcelo,
Can you please let us know when you are with the tests on your side? We
can then go ahead and validate the test kernel at our end.
-Vinay
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/183
Hi Chris,
There are few observations we made while testing.
1. On baseline Ubuntu, we see a PCR7 mismatch. Could you please confirm
if this is a known issue and what is the reason for this mismatch?
2. We were able to validate that there were duplicate entries in the TCG
logs with the test kerne
Hi Chris,
Can you please point me to the parser tool that you used to parse the
binary_bios_measurements? We can try that tool at our end to see if the
our tool has a bug.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.l
I have verified the kernel image provided above. The PCR5 values in the
TCG logs and in the TPM match. I have also verified that the
ExitBootServices event is present in the binary_bios_measurements.
However, I see there is a mismatch for PCR4 and PCR7 between the TCG
logs and the TPM values. I am
17 matches
Mail list logo
