[Bug 1719671] Re: [SRU][xenial] include recent version containing fips

Joy Latten joy.latten at canonical.com
Thu Oct 12 20:38:20 UTC 2017


After chatting on IRC, realized new version of tool is being worked on
for #1721272 (artful). Will wait for this to complete and use this bug
to SRU the changes which include enabling fips. Will also redo the data
for this SRU.

** Description changed:

  [IMPACT]
+ Most recent version of ubuntu-advantage-tool on github includes fips enablement. The fips enablement will allow customers to easily install and configure Canonical's FIPS certified modules on xenial
+ 
+ Note: FIPS certified modules are only available for xenial. On other
+ releases the tool will not install and configure fips.
+ 
  when "ubuntu-advantage enable-fips <token>" is issued from commandline,
  
   - configure the private PPA where the FIPS modules are located
   - install the FIPS modules from this PPA to the local machine from where the script is run
   - configure the bootloader to enable fips
  
  Upon successful completion of these steps, the customer then gets a message stating to reboot
  the machine to complete the fips enablement process.
  
  Without the script, customers must perform the steps manually.
  
  [FIX]
  
  Add enable-fips to advantage script. See debdiff below.
  
  [TEST]
- A test package is available: and it was tested by me on S390, PPC64EL and AMD64 architectures. 
+ A test package is available: and it was tested by me on S390, PPC64EL and AMD64 architectures.
  
  [REGRESSION POTENTIAL]
  The patch adds a new features to ubuntu-advantage-tool in Xenial to enable fips. Current functionality was not altered.

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1719671

Title:
  [SRU][xenial] include recent version containing fips

Status in ubuntu-advantage-tools package in Ubuntu:
  Fix Released
Status in ubuntu-advantage-tools source package in Xenial:
  New
Status in ubuntu-advantage-tools source package in Zesty:
  New

Bug description:
  [IMPACT]
  Most recent version of ubuntu-advantage-tool on github includes fips enablement. The fips enablement will allow customers to easily install and configure Canonical's FIPS certified modules on xenial

  Note: FIPS certified modules are only available for xenial. On other
  releases the tool will not install and configure fips.

  when "ubuntu-advantage enable-fips <token>" is issued from
  commandline,

   - configure the private PPA where the FIPS modules are located
   - install the FIPS modules from this PPA to the local machine from where the script is run
   - configure the bootloader to enable fips

  Upon successful completion of these steps, the customer then gets a message stating to reboot
  the machine to complete the fips enablement process.

  Without the script, customers must perform the steps manually.

  [FIX]

  Add enable-fips to advantage script. See debdiff below.

  [TEST]
  A test package is available: and it was tested by me on S390, PPC64EL and AMD64 architectures.

  [REGRESSION POTENTIAL]
  The patch adds a new features to ubuntu-advantage-tool in Xenial to enable fips. Current functionality was not altered.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+subscriptions



More information about the Ubuntu-sponsors mailing list