Skip to content

Capture and display evmctl error messages and pass --v3 to evmctl when necessary#45

Open
stefanberger wants to merge 3 commits into
linux-integrity:next-testingfrom
stefanberger:kernel_tests
Open

Capture and display evmctl error messages and pass --v3 to evmctl when necessary#45
stefanberger wants to merge 3 commits into
linux-integrity:next-testingfrom
stefanberger:kernel_tests

Conversation

@stefanberger

@stefanberger stefanberger commented Jun 15, 2026

Copy link
Copy Markdown
Contributor

Capture and display evmctl error messages and pass --v3 to evmctl when ML-DSA keys are being used for signing.

@stefanberger stefanberger force-pushed the kernel_tests branch 4 times, most recently from dc620d0 to 743b53f Compare June 15, 2026 21:30
Capture evmctl error message in err variable and display it if needed.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Pass --v3 to evmctl when ML-DSA keys are used for signing.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Increase the ext4 block size to 8kb to not run out of space when trying to
write ML-DSA signatures.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

@mimizohar mimizohar left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

mkfs.ext4 fails with "8192-byte blocks too big for system (max 4096)" on most systems. An alternative would be to specify "-O ea_inode" on either the mkfs.ext4 or tune2fs commands.

mkfs.ext4 will pause and wait for user input - "Proceed anyway? (y,N)". In a non-interactive script, this causes the script to hang indefinitely. Possible solution is to pipe the letter "N" to the mkfs.ext4 command.

Please fix the mkfs.ext4 failure and how mkfs.ext4 handles failures.

@mimizohar mimizohar left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In functions_kernel.sh, "err" is not defined as a local variable, nor displayed in this patch. Either define and use "err" or remove it from this patch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants