Enable secure boot on linux-azure
Bug #1754042 reported by
David Coronel
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux-azure (Ubuntu) |
Fix Released
|
Undecided
|
Marcelo Cerri | ||
Xenial |
Fix Released
|
Undecided
|
Marcelo Cerri | ||
Bionic |
Fix Released
|
Undecided
|
Marcelo Cerri |
Bug Description
Impact: linux-azure needs to add support for secure boot to support Hyper-V Generation 2 Virtual Machines.
Fix: UEFI support needs to be enabled for linux-azure and new signed package needs to be created it for that.
Testcase: After installing the new linux-azure kernel with UEFI support and the linux-signed-azure package on a gen2 azure instance or on a hyperv virtual machine with secure boot enabled, the user should be able to still boot normally and /proc/sys/
CVE References
description: | updated |
Changed in linux-azure (Ubuntu Xenial): | |
status: | New → In Progress |
assignee: | nobody → Marcelo Cerri (mhcerri) |
Changed in linux-azure (Ubuntu Bionic): | |
assignee: | nobody → Marcelo Cerri (mhcerri) |
Changed in linux-azure (Ubuntu Xenial): | |
status: | In Progress → Fix Committed |
To post a comment you must log in.
This bug was fixed in the package linux-azure - 4.13.0-1012.15
---------------
linux-azure (4.13.0-1012.15) xenial; urgency=medium
* linux-azure: 4.13.0-1012.15 -proposed tracker (LP: #1751799)
* Enable secure boot on linux-azure (LP: #1754042)
- Revert "UBUNTU: [debian] azure: do not build uefi signed binary"
* [Hyper-v] Set CONFIG_I2C_PIIX4 to "n" (LP: #1752999)
- [Config] azure: CONFIG_I2C_PIIX4=n
* [Hyper-V] Drivers: hv: vmbus: Fix ring buffer signaling (LP: #1748662)
- Revert "UBUNTU: SAUCE: vmbus: fix performance regression"
- Revert "UBUNTU: SAUCE: vmbus: simplify packet iterator"
- Revert "UBUNTU: SAUCE: vmbus: don't need to check interrupt mask on read
side"
- SAUCE: hv: vmbus: Fix ring buffer signaling
* [Hyper-V] set config: CONFIG_ EDAC_DECODE_ MCE=y (LP: #1751123) EDAC_DECODE_ MCE=y
- [Config] azure: CONFIG_
-- Marcelo Henrique Cerri <email address hidden> Wed, 07 Mar 2018 13:37:00 -0300