Backport Intel Mutual Authentications - FCC Lock

Bug #2014954 reported by Atlas Yu
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OEM Priority Project
Confirmed
High
Atlas Yu
libmbim (Ubuntu)
In Progress
High
Unassigned
Jammy
New
Undecided
Unassigned
Lunar
New
Undecided
Unassigned

Bug Description

[ Impact ]

There exist no formal API to do the FCC unlock procedure[1] in the latest version of the modemmanger.

But there is a merged commit[2] that provide this functionality for intel WWAN cards in the upstream project.

Lenovo have several laptops using the Fibocom WWAN cards (Intel XMM 7560), and Lenovo are struggling to give a decent way to run the FCC unlock service without this.

Until the device is unlocked, the end users are not able to use the SIM cards, and some of the affected devices have already been shipped. The end users now have to go to the Lenovo support website and download a few scripts and binaries to unlock the device to make their SIM cards work.

The Lenovo wants this patch to be included in jammy, then they can provide the FCC unlock service and manage it in OEM-archive, so the end users can use SIM cards as soon as they receive the laptop.

[ Test Plan ]

OEM enablement engineers and Lenovo engineers will help to test if the FCC unlock would work on certain laptops with the help of a custom package[1] provided by Lenovo which contains the FCC unlock script.

[ Where problems could occur ]

This is a completely new feature to support Intel WWAN cards mutal authentication, which does not affect other existing features.

But the feature itself might have bugs and glitches since it is a brand new one and is not widely tested by the laptop vendors, still it is better than nothing.

[ Other Info ]

[1] FCC unlock procedure: https://modemmanager.org/docs/modemmanager/fcc-unlock/
[2] intel-mutual-authentication: new service, fcc-lock: https://gitlab.freedesktop.org/mobile-broadband/libmbim/-/merge_requests/157
  - when the device is first shipped or comes out of the factory,
    it should be protected with a lock till the device reaches
    the end user. This FCC lock feature will ensure the device
    is secured till its unlocked.

Atlas Yu (pseudoc)
description: updated
description: updated
Atlas Yu (pseudoc)
tags: added: oem-priority originate-from-1956804 sutton
tags: added: originate-from-2007061
Changed in oem-priority:
assignee: nobody → Atlas Yu (pseudoc)
status: New → Confirmed
importance: Undecided → High
Revision history for this message
Atlas Yu (pseudoc) wrote :

Here is the debdiff with the upstream patch.

Revision history for this message
Ubuntu Foundations Team Bug Bot (crichton) wrote :

The attachment "libmbim_1.28.0-1~ubuntu20.04.2.debdiff" seems to be a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. If the attachment isn't a patch, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are member of the ~ubuntu-sponsors, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issue please contact him.]

tags: added: patch
Revision history for this message
Atlas Yu (pseudoc) wrote :

I uploaded the modified version to my PPA:
https://launchpad.net/~pseudoc/+archive/ubuntu/ppa/+packages

You may install the libmbim from it:
sudo add-apt-repository ppa:pseudoc/ppa
sudo apt update
sudo apt install libmbim

Revision history for this message
Atlas Yu (pseudoc) wrote (last edit ):

refined debdiff (delete obsolete attachment)

Revision history for this message
Sebastien Bacher (seb128) wrote :

The fix is available in newer Ubuntu serie, SRU uploaded to J serie now

Changed in libmbim (Ubuntu):
importance: Undecided → High
status: New → Fix Released
assignee: nobody → Atlas Yu (pseudoc)
Revision history for this message
Atlas Yu (pseudoc) wrote (last edit ):

Hi @seb128, this is not the same as Bug #1950282, this is for Fibocom L860-GL-16.

Changed in libmbim (Ubuntu):
status: Fix Released → New
assignee: Atlas Yu (pseudoc) → nobody
Revision history for this message
Sebastien Bacher (seb128) wrote :

Talking to Atlas he misunderstood that the 'fix released' status was applying to the current Ubuntu serie and not jammy which is targetted there. Changing back to fixed for the current version

Changed in libmbim (Ubuntu):
status: New → Fix Released
Revision history for this message
Sebastien Bacher (seb128) wrote :

Sorry but apparently I was wrong there and misunderstood where the fix landed, it's not in the current version so we will need to also upload to mantic and lunar

Changed in libmbim (Ubuntu):
status: Fix Released → In Progress
Revision history for this message
Lucas Kanashiro (lucaskanashiro) wrote :

I added tasks for Jammy, Lunar and Mantic (devel). I also took a look at the debdiff and you could also close this bug in the changelog via "LP: #2014954". Moreover, you could improve the patch DEP-3 headers and add the Bug-Ubuntu field with a link to this bug.

Revision history for this message
Atlas Yu (pseudoc) wrote (last edit ):

for lunar (delete obsolete attachment)

Revision history for this message
Atlas Yu (pseudoc) wrote (last edit ):

for mantic (delete obsolete attachment)

Revision history for this message
Atlas Yu (pseudoc) wrote (last edit ):

for jammy (delete obsolete attachment)

Revision history for this message
Atlas Yu (pseudoc) wrote :

Thanks Lucas and Seb, I re-uploaded the debdiff patch file for theses 3 series.

Revision history for this message
Łukasz Zemczak (sil2100) wrote : Proposed package upload rejected

An upload of libmbim to jammy-proposed has been rejected from the upload queue for the following reason: "Bug provides a newer SRU debdiff for this upload.".

Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

This in your changelog is a Debian keyword
  Closes: #2014954
To work on launchpad that needs to be
  LP: #2014954

I hope that helps and gives you a few minor things to fix.

I feel too much out of my comfort zone to fully sponsor this anyway :-/
But I wondered about one more thing to ask you, given that you say this is "the feature itself might have bugs and glitches since it is a brand new one and is not widely tested by the laptop vendors" wouldn't you think it might be better to wait until upstream https://gitlab.freedesktop.org/mobile-broadband/libmbim/-/tags tags 1.30 - then at least we'd have the testing of the developers there and all the code they tested it with.

Revision history for this message
Sebastien Bacher (seb128) wrote :

@Lukasz, could you reconsider the rejection? The version which was in the 22.04 queue was correct, it's basically me who fixed the wrong bug reference to use a lp: syntax

Revision history for this message
Atlas Yu (pseudoc) wrote :

Hi @Christian, thanks for the comment, I thought "Closes" and "LP" are the same thing.
The Lenovo wants to ship their new laptop products with "Fibocom L860-GL" (uses MBIM protocol) and needs this patch to do the FCC unlock. Their aim is that the SIM card can work properly once end user receives the device.

Revision history for this message
Atlas Yu (pseudoc) wrote :

mantic: replace "Closes => LP"

Revision history for this message
Atlas Yu (pseudoc) wrote :

lunar: replace "Closes => LP"

Revision history for this message
Atlas Yu (pseudoc) wrote :

jammy: replace "Closes => LP"

Revision history for this message
Paride Legovini (paride) wrote :

Hi, I have some comments/questions.

## debdiffs

- The d/changelog entries target unstable and not Ubuntu releases
- The lunar version string is wrong, the suffix should be ubuntu0.1.
- The d/changelog entry is not clear.
  For example: it begins with "This service". Which service?
- Nit: when adding new patches it is nice to mention it in d/changelog:

 * d/p/intel-mutual-authentication.patch:
   upstream cherry-pick to enable the XYZ feature

## dep-3 headers

"Origin": please specify if "upstream" or "backport", see [1]. It may be "upstream" for some Ubuntu releases and "backport" for others, if the patch had to be modified to apply cleanly.

Also: normally the link is to the individual cherry-picked commit, not to the PR/MR.

"Applied-Upstream": not needed in this case I believe. AIUI that's for when the patch originates from Ubuntu/Debian and then has been applied upstream. In this case it's the other way around.

"Reviewed-by": that's specific to the Ubuntu patch, do not put upstream contributions there: they are not involved with the Ubuntu packaging.

## general questions

It is not clear to me (and may not be clear to the SRU team) what the actual impact of this issue. Is the hardware unusable without this feature? In other words: please improve the [Impact] section. Which issue will users encounter because of this bug? (What does it mean that the device is "secured" until unlocked?)

Like Christian mentioned, it would be better to wait for 1.30 to be tagged by upstream before going ahead with the backporting. Would the libmbim release schedule align with the hardware release dates?

[1] https://dep-team.pages.debian.net/deps/dep3/

Revision history for this message
Atlas Yu (pseudoc) wrote (last edit ):

Thanks you Paride for the comment with the detailed explanation. I will check the urgency of this bug later on.

By the time I proposed this bug, the WWAN card is totally unusable, but by far Lenovo have provide a workaround: https://pcsupport.lenovo.com/jp/en/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x1-yoga-7th-gen-type-21cd-21ce/21cd/downloads/driver-list/component?name=Networking%3A%20Wireless%20WAN&id=49B19606-BEF8-41DD-BE7F-95B570C212C8

So, to me, I think it is actually okay to wait for 1.30.

description: updated
Revision history for this message
Dave Jones (waveform) wrote :

Unsubscribing ~ubuntu-sponsors; please re-subscribe once Paride's comments (from 21) are addressed. I'm not setting to incomplete as it appears a decision is pending regarding waiting for the 1.30 release and I'm not sure what the schedule on that is.

Revision history for this message
Nitin Joshi (nitin-joshi) wrote :

Hello All ,

May I know , if there is update of backporting this changes in Ubuntu 22.04 ?
As per above comment , it will be helpful if you can update in which Ubuntu version 1.30 will be released ?

Thank you !

Thanks & Regards,
Nitin Joshi

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.