[Bug 2131805] Re: [26.04] Please test secureboot and lock-down with 6.18 kernel (s390x) on Resolute Raccoon

** Tags added: kernel-daily-bug

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2131805

Title:
[26.04] Please test secureboot and lock-down with 6.18 kernel (s390x)
on Resolute Raccoon

Status in Ubuntu on IBM z Systems:
Triaged
Status in linux package in Ubuntu:
Fix Committed

Bug description:
The Canonical kernel team is working on a new 6.18 kernel for Ubuntu
Resolute Raccoon (26.04) and has an early build ready for secure-boot
and lockdown testing (version 6.18.0-4.4, soon -5.5).

https://launchpad.net/~canonical-kernel-
team/+archive/ubuntu/unstable/+packages?field.name_filter=&field.status_filter=published&field.series_filter=resolute

To avoid potentially negative implications that a broken secure-boot
lockdown functionality would cause (esp. using the production key), we
kindly ask to get secure-boot tested, using Canonical kernel team's
PPA key for signature.

The linux-generic (6.18.0-4.4, or 6.18.0-5.5 - please use latest) is available in
ppa:canonical-kernel-team/unstable.
(https://launchpad.net/~canonical-kernel-team/+archive/ubuntu/unstable)

$ sudo add-apt-repository ppa:canonical-kernel-team/unstable # add the unstable kernel PPA
$ sudo apt update # if not done automatically after the previous command
$ apt-cache policy linux-generic # will show potential install candidates
$ sudo apt install linux-generic=6.18.0-4.4 # install explicit version; or 6.18.0-5.5 or latest

Please note that this kernel is coming from the 'canonical-kernel-team'
PPA, hence it is NOT signed with the regular archive/release/production
key, BUT instead with the above PPA test signing key.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/2131805/+subscriptions