[SRU][X][PATCH 0/1] Shared CEX7C cards defined in z/VM guest not established by zcrypt device driver

[frank.heimes at canonical.com]

Buglink: https://bugs.launchpad.net/bugs/1848173

SRU Justification:

[Impact]

* Ubuntu 16.04.6 systems on z15 with crypto CEX7C adapters under z/VM cannot see and make use of their hw crypto resources.

* The patch/backport adds CEX7 toleration support (by mapping it to CEX5) to kernel 4.4.

[Fix]

* Backport: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1848173/+attachment/5297314/+files/s390-zcrypt-CEX7-toleration-support.patch

[Test Case]

* Define a z/VM guest with 'apvirt' (hardware crypto adapter virtualization) having CryptoExpress 7S adapters attached to z/VM LPAR.

* Use lszcrypt command (ideally lszcrypt -VVV) from the s390-tools package to list the detected and available hardware crypto resources.

* Canonical can only do a toleration test: IBM needs to do the functional test (due to hardware availability).

[Regression Potential] 

* The regression potential can be considered as moderate since this is purely s390x specific

* and limited to CryptoExpress 7S (CEX7) adapter cards

* and again if they running under z/VM (on z15) with 'apvirt' configured for the guest.

* and again only with 16.04.6's kernel 4.4.

[Other Info]

* The patch was already applied, kernel compiled and things tested on z15 und z/VM.

Harald Freudenberger (1):
  s390/zcrypt: CEX7 toleration support

 drivers/s390/crypto/ap_bus.c | 5 +++--
 drivers/s390/crypto/ap_bus.h | 1 +
 2 files changed, 4 insertions(+), 2 deletions(-)

-- 
2.7.4