Re: [ima-evm-utils][PATCH 2/3] CI/CD: Disable pkcs11 providers for Debian and AltLinux

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Jun 21, 2024 at 04:34:33PM -0400, Mimi Zohar wrote:
> On Fri, 2024-06-21 at 12:44 +0100, Jonathan McDowell wrote:
> > On Fri, Jun 21, 2024 at 06:24:38AM -0400, Mimi Zohar wrote:
> > > On Fri, 2024-06-21 at 11:03 +0100, Jonathan McDowell wrote:
> > > > On Thu, Jun 20, 2024 at 08:59:11PM -0400, Stefan Berger wrote:
> > > > > From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
> > > > > 
> > > > > Disable testing provider support on Debian:latest and AltLinux:sisyphus
> > > > > since both now get stuck while running OpenSSL provider-related tests.
> > > > > This is most likely due to an update in a dependency (OpenSSL, libp11,
> > > > > softhsm,  or others).
> > > > 
> > > > This seems to disable it for both Debian stable + testing.  Is it
> > > > actually broken for both?
> > > 
> > > There is no pkcs11-provider package on stable, so the test is skipped.
> > 
> > Ah, right. I can't actually figure out what tree Stefan's patch is
> > against to try myself. https://git.code.sf.net/p/linux-ima/ima-evm-utils
> > does not have the commented out softhsm2 / pkcs11-provider apt line.
> > Where should I be looking?
> 
> Upstream should be based on the next-testing branch of 
> https://github.com/linux-integrity/ima-evm-utils.git.

Thanks, I was able to reproduce with that. There's some sort of deadlock
happening down in the softhsm2 / p11-kit-proxy layers that wasn't
immediately obvious to me. Backtrace at

https://the.earth.li/~noodles/evm-test-failure

in case it means something to someone else.

J.

-- 
Can't you see I want tenderness, you idiot?




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Linux Kernel]     [Linux Kernel Hardening]     [Linux NFS]     [Linux NILFS]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux SCSI]

  Powered by Linux