Kstate changes data in kexec segments after the calculation of the checksum, so we don't pass purgatroy verification stage. Disable it for now. Proper solution will be later, in next versions of the patchset. Signed-off-by: Andrey Ryabinin <arbn@xxxxxxxxxxxxxxx> --- arch/x86/purgatory/purgatory.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/arch/x86/purgatory/purgatory.c b/arch/x86/purgatory/purgatory.c index aea47e7939637..cdec5f21282a7 100644 --- a/arch/x86/purgatory/purgatory.c +++ b/arch/x86/purgatory/purgatory.c @@ -45,6 +45,8 @@ void purgatory(void) { int ret; + if (IS_ENABLED(CONFIG_KSTATE)) + return; ret = verify_sha256_digest(); if (ret) { /* loop forever */ -- 2.45.2