[Bug 2055083] Re: Drop fips-checks script from trees

This bug is awaiting verification that the linux-
nvidia-6.8/6.8.0-1008.8~22.04.1 kernel in -proposed solves the problem.
Please test the kernel and update this bug with the results. If the
problem is solved, change the tag 'verification-needed-jammy-linux-
nvidia-6.8' to 'verification-done-jammy-linux-nvidia-6.8'. If the
problem still exists, change the tag 'verification-needed-jammy-linux-
nvidia-6.8' to 'verification-failed-jammy-linux-nvidia-6.8'.


If verification is not done by 5 working days from today, this fix will
be dropped from the source code, and this bug will be closed.


See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how
to enable and use -proposed. Thank you!


** Tags added: kernel-spammed-jammy-linux-nvidia-6.8-v2 verification-needed-jammy-linux-nvidia-6.8

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2055083

Title:
Drop fips-checks script from trees

Status in linux package in Ubuntu:
Fix Committed
Status in linux source package in Focal:
Fix Released
Status in linux source package in Jammy:
Fix Released
Status in linux source package in Mantic:
Fix Released
Status in linux source package in Noble:
Fix Released

Bug description:
[Impact]

When producing a new version of some kernels, we need to check for
changes that might affect FIPS certs and justify why a commit was
kept. For that, we have a fips-checks script that lives under debian/
in Focal, Jammy, Mantic and Noble.

This script has been moved to `cranky`[1], so now there is no need to
have this script in the kernel Git trees as well.

[1] https://git.launchpad.net/~canonical-kernel/+git/kteam-
tools/commit/?id=2ab9364d4b4c18bee7d835787d7dd11990103bca

[Fix]

Remove the fips-checks script and its calls.

[Test Plan]

Prepare a kernel and ensure that the `cranky close` step runs without
any errors.

[Where problems could occur]

This only affects the preparation of FIPS kernels and not the kernel final binary. Moreover, I've prepared some FIPS kernels from the 2024.03.04 cycle relying on `cranky check-fips` to ensure that
we have it working well on the cranky side too.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2055083/+subscriptions