Note: This is a beta release of Red Hat Bugzilla 5.0. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Also email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback here.
Bug 1354282 - kexec load fail in case secure boot being enabled
Summary: kexec load fail in case secure boot being enabled
Alias: None
Product: Fedora
Classification: Fedora
Component: kernel
Version: rawhide
Hardware: Unspecified
OS: Unspecified
Target Milestone: ---
Assignee: kdump team
QA Contact: Fedora Extras Quality Assurance
Depends On:
TreeView+ depends on / blocked
Reported: 2016-07-11 05:49 UTC by Dave Young
Modified: 2016-07-28 00:55 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Last Closed: 2016-07-28 00:55:38 UTC

Attachments (Terms of Use)

Description Dave Young 2016-07-11 05:49:26 UTC
Description of problem:

localhost kdumpctl[850]: Secure Boot is enabled. Using kexec file based syscall.
localhost kdumpctl[850]: Try gzip decompression.
localhost kdumpctl[850]: Try LZMA decompression.
localhost kdumpctl[850]: lzma_decompress_file: read on /boot/vmlinuz-4.7.0-0.rc6.git2.2.fc25.x86_64 of
localhost kdumpctl[850]: kexec_file_load failed: Bad message
localhost kdumpctl[850]: kexec: failed to load kdump kernel
localhost kdumpctl[850]: Starting kdump: [FAILED]

The key problem here is "kexec_file_load failed: Bad message"

Bisect results:

Bisecting: 0 revisions left to test after this (roughly 0 steps)
[e68503bd6836ba765dc8e0ee77ea675fedc07e41] KEYS: Generalise
system_verify_data() to provide access to internal content

Commit e68503bd6836ba765dc8e0ee77ea675fedc07e41 caused pesigned kernel key verification failed.

How reproducible:
Fedora kernel 4.7.0-0.rc6.git2.2.fc25.x86_64 or upstream kernel with proper kconfig with kexec_file and related config options.

kexec -s -l /boot/vmlinuz-4.7.0-0.rc6.git2.2.fc25.x86_64

Steps to Reproduce:

Actual results:

Expected results:

Additional info:

Comment 2 Dave Young 2016-07-28 00:55:38 UTC
4.7.0-2.fc25 works.

Note You need to log in before you can comment on or make changes to this bug.