Launchpad itself

Copy EFI signing key from ~canonical-signing/ubuntu/esm to ~canonical-signing/ubuntu/ke-nv-dgx

Asked by Andy Whitcroft

As per the discussions with the Signing Cabal we are approved to use the ESM EFI signing key to sign the Nvidia DGX kernel.

Could we get the EFI key copied over from:

  https://launchpad.net/~canonical-signing/+archive/ubuntu/esm

to:

  https://launchpad.net/~canonical-signing/+archive/ubuntu/ke-nv-dgx

Thank you.

Question information

Language:
English Edit question
Status:
Answered
For:
Launchpad itself Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Andy Whitcroft (apw) said : 		#1

Oh and we are inevitably going to need the KMOD siging key as well. Could we copy that one from:

  https://launchpad.net/~canonical-signing/+archive/ubuntu/primary

to:

  https://launchpad.net/~canonical-signing/+archive/ubuntu/ke-nv-dgx

Revision history for this message
Colin Watson (cjwatson) said : 		#2

Only the first part of this has been explicitly approved by the signing cabal as yet; I'd prefer that the kmod part also be explicitly approved before doing this.

Revision history for this message
Andy Whitcroft (apw) said : 		#4

Ok. Clarification sought from the Siging Cabal. The main ask is valid on its own. I will circle back on the KMOD ask when I have clarity.

Revision history for this message
Colin Watson (cjwatson) said : 		#5

The first part of this is done now.

Revision history for this message
Colin Watson (cjwatson) said : 		#6

Steve Langasek acked the second half of this in private email, so I'll proceed.

Revision history for this message
Colin Watson (cjwatson) said : 		#7

The second half of this is done now too.

Can you help with this problem?

Provide an answer of your own, or ask Andy Whitcroft for more information if necessary.

To post a message you must log in.