Open bryopsida opened 5 days ago
Hello @bryopsida
Unfortunately, fips is not supported on raspberry pis. The fips kernel is based on the generic kernel and missing various raspi patches.
I'll leave this issue open, but re-title it to represent that pro
should not allow you to try to enable fips on a raspberry pi, since it will not work.
FWIW it was able to boot and have network access with the fips kernel. It wasn't until I tried to set fips=1 in cmdline.txt that it failed to boot.
Description of the bug
When attempting to enable the
fips-preview
service on a raspberry pi 4, viasudo pro enable fips-preview
, it fails.Expected behavior
The fips installation to succeed and correctly configure the fips kernel to be used on next boot with fips mode enabled.
Current behavior
sudo pro enable fips-preview
fails with apt errorTo Reproduce
1) Install ubuntu server 22.04.5 64 bit using rpi-imager onto a sd card for a raspberry pi 2) attach a pro subscription 3) run
sudo pro enable fips-preview
This will fail with error message
System information:
Additional context
The apt install fails because
/boot/grub
does not exist.If I run
mkdir /boot/grub
and thenpro enable fips-preview
it completes but it does not correctly setup the kernel to be booted. The reason being is it has placed the kernel at/boot/
instead of/boot/firmware
.If I do the following from the boot directory it setups booting the kernel
After doing the following and rebooting it correctly uses the kernel.
The next issue is fips mode is not enabled.
To try and remedy this I add fips=1 to
/boot/firmware/cmdline.txt
After doing this last step the system does not boot which I suspect fips=0 isn't recognized as something valid when getting passed through the boot sequence https://www.raspberrypi.com/documentation/computers/raspberry-pi.html#boot-sequence.