I'm no expert on the FIPS enablement on Ubuntu, but are you sure that
/proc/sys/crypto/fips_enabled doesn't exist? This article [1], specific
to jammy, suggests it should and I've just fired up a test VM, which
seems to indicate it exists:
$ lxc launch ubuntu:j --vm -c limits.cpu=4 -c limits.memory=4GiB fipstest
$ lxc shell fipstest
# apt update && apt full-upgrade -y
...
# pro attach TOKENTOKENTOKEN
Enabling Ubuntu Pro: ESM Apps
Ubuntu Pro: ESM Apps enabled
Enabling Ubuntu Pro: ESM Infra
Ubuntu Pro: ESM Infra enabled
Enabling Livepatch
Livepatch enabled
This machine is now attached to 'Ubuntu Pro - free personal subscription'
...
# pro enable fips-updates
One moment, checking your subscription first
This will install the FIPS packages including security updates.
Warning: This action can take some time and cannot be undone.
Are you sure? (y/N) y
The "generic" variant of fips-updates is based on the "generic" Ubuntu
kernel but this machine is running the "kvm" kernel.
The "kvm" kernel may have significant hardware support
differences from "generic" fips-updates.
Warning: Installing generic fips-updates may result in lost hardware support
and may prevent the system from booting.
Do you accept the risk and wish to continue? (y/N) y
Configuring APT access to FIPS Updates
Updating FIPS Updates package lists
Updating standard Ubuntu package lists
Installing FIPS Updates packages
Installing openssh-client openssh-server openssh-sftp-server
FIPS Updates enabled
A reboot is required to complete install.
# reboot
...
$ lxc shell fipstest
# cat /proc/sys/crypto/fips_enabled
1
[1]: https://ubuntu.com/blog/ubuntu-22-04-fips-140-3-modules-available-
for-preview
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2073429
Title:
Jammy clevis forces argon2id for keyslots
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/clevis/+bug/2073429/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
