kata-containers/s390-tools
1
0
Fork 0
mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

zkey: Add phmac_s390 to initramfs and load it via modules-load.d

Browse Source 
Add kernel module phmac_s390 to the initramfs hook and dracut config file
to ensure that the PHMAC cipher is available during early boot, in case
the root disk is integrity protected via PHMAC.

Also load phmac_s390 via modules-load.d to ensure that the PHMAC ciphers
are available.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
This commit is contained in:
Ingo Franzki
2025-09-03 10:11:38 +02:00
committed by Jan Höppner
parent 97136585da
commit cd93949d17
3 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
etc/modules-load.d/s390-pkey.conf
View File

@@ -4,3 +4,4 @@ pkey_pckmo
pkey_ep11
pkey_cca
paes_s390
phmac_s390

2
zkey/dracut/99-pkey.conf
View File

@@ -4,6 +4,6 @@
# it under the terms of the MIT license. See LICENSE for details.
#
add_drivers+=" uvdevice pkey pkey_cca pkey_ep11 pkey_pckmo pkey_uv paes_s390 zcrypt zcrypt_cex4 "
add_drivers+=" uvdevice pkey pkey_cca pkey_ep11 pkey_pckmo pkey_uv paes_s390 phmac_s390 zcrypt zcrypt_cex4 "
install_items+=" chzcrypt lszcrypt zkey zkey-cryptsetup "
install_optional_items+=" /usr/lib64/zkey/*.so /etc/zkey/* /etc/zkey/repository/* /etc/zkey/kmip/profiles/* "

2
zkey/initramfs/hooks/s390-tools-zkey
View File

@@ -29,7 +29,7 @@ esac
. /usr/share/initramfs-tools/hook-functions
# Add zcrypt modules
zdev_modules="uvdevice pkey pkey_cca pkey_ep11 pkey_pckmo pkey_uv paes_s390 zcrypt zcrypt_cex4"
zdev_modules="uvdevice pkey pkey_cca pkey_ep11 pkey_pckmo pkey_uv paes_s390 phmac_s390 zcrypt zcrypt_cex4"
for x in $zdev_modules ; do
manual_add_modules ${x}