ubuntu-core-initramfs: move microcode to .ucode section of the UKI

Open valentindavid opened this issue 11 months ago • 3 comments

Depends on #15216 Original PR: https://github.com/canonical/core-initrd/pull/274

Mar 18 '25 13:03 valentindavid

Mon Oct 27 16:21:42 UTC 2025 The following results are from: https://github.com/canonical/snapd/actions/runs/18713212511

Failures:

Preparing:

openstack-ext-ps7:ubuntu-20.04-64:tests/nested/manual/uc-update-assets-secure-add-sbat:seed
openstack-ext-ps7:ubuntu-20.04-64:tests/nested/manual/uc-update-assets-secure-add-sbat:both
openstack-ext-ps7:ubuntu-20.04-64:tests/nested/manual/uc-update-assets-secure-add-sbat:boot
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/uc-update-assets-secure-add-sbat:both
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/uc-update-assets-secure-add-sbat:seed
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/uc-update-assets-secure-add-sbat:boot
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/snapd-removes-vulnerable-snap-confine-revs:core
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/snapd-removes-vulnerable-snap-confine-revs:snapd
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/remodel-with-components-offline
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/core/
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/install-volume-assignment
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc20-fde-hooks:files
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-gadget-cloud-conf:signed
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/core/
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/core/
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-install-device-file-install-via-hook-hack
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core-broken-fde-state
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/broken-model:hook
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/core/
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-fault-inject-on-remodel:kernel_reboot_remodel_boot_assets
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-create-recovery
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-factory-reset-install-device-hook
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/component-recovery-system
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core-recover-from-recovery:clear_tpm
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/passphrase-support-on-hybrid:2504
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/build-with-kernel-modules-components:plain
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-fault-inject-on-remodel:gadget_reboot_remodel_boot_assets
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/build-with-kernel-modules-components:encrypted
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/remodel-to-installed-kernel
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/recovery-system-offline:untested
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-cloud-init-maas-signed-seed-data:gadgetsaysmaas
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/recovery-system:default
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/core/
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-custom-kernel-commandline
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-da-lockout:encrypted
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc-update-assets-secure:seed
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/recovery-system:tested_and_default
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/passphrase-support-on-hybrid:pbkdf2
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core-recover-from-recovery:break_dbx
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core-factory-reset-new-secboot:hook
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-remodel
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-fault-inject-on-remodel:gadget_panic_remodel_boot_assets
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core-shim-update-revokes-old-keys
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc20-fde-hooks-ice
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-fde-dbx
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/broken-model:tpm
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/recovery-system:no_test_or_default
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/kernel-modules-components:plain
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/remodel-with-components
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-install-mode-shutdown-via-hook
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/recovery-system-reboot:recover
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/remodel-validation-sets-invalid
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/recovery-system-offline:pre_installed_snaps
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-boot-config-update:gadgetfull
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/passphrase-support-on-hybrid:2404
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/hybrid-fde-dbx
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core22-basic:tokens
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/hybrid-fde-recovery-keys:2404
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/hybrid-remodel
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/recovery-system-offline:tested
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-fault-inject-on-remodel:kernel_panic_remodel_boot_assets
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/cmdline-option:signed
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-auto-remove-user
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/passphrase-support-on-hybrid:argon2i
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core-factory-reset-new-secboot:tpm
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-set-efi-boot-vars:BOOTDIR
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-cloud-init-maas-signed-seed-data:gadgetsaysnone
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc-update-command-line-secure
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/install-min-size
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/passphrase-support-on-hybrid:2510
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc20-install-in-initrd:hook
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/minimal-smoke:secboot_disabled
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-fault-inject-on-update-config:gadget_panic_command_line
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/recovery-system-reboot:install
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/recovery-system:tested
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-install-device-file-install-ubuntu-save-via-hook
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-4k-sector-size:physical_only
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/cmdline-option:dangerous
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-boot-config-update:gadgetextra
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core-dbx-revokes-old-keys
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-grade-signed-above-testkeys-boot:secured
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-fault-inject-on-install-component:kernel_panic_prepare_kernel_components
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-set-efi-boot-vars:UBUNTUDIR
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc20-fde-hooks-v1
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc20-fde-hooks:tokens
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-gadget-cloud-conf:secured
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/remodel-validation-sets-downgrade
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-nofde-dbx
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/recovery-system-offline:pre_installed_snaps_json
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-initramfs-time-moves-forward
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-grade-signed-cloud-init-testkeys
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-4k-sector-size:logical
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc-update-assets-secure:boot
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-cloud-init-maas-signed-seed-data:gadgetwithoutopinion
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/component-recovery-system-offline
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc20-install-in-initrd:secureboot
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/hybrid-tpm-fde-preinstall-check
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc-update-assets-secure:both
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/cmdline-remove-append
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-boot-config-update:nogadget
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/minimal-smoke:secboot_enabled
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/seeding-failure
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-set-efi-boot-vars:BOOTDIR_NOSEC
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/hybrid-fde-recovery-keys:2504
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc-grub-boot-chains
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/hybrid-fde-recovery-keys:2510
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc20-install-in-initrd:both
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc20-storage-safety:preferunencrypted
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-early-config
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/update-snapd-seed-and-factory-reset:tpm
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/devmode-snap-seeded-dangerous
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/passphrase-support-on-hybrid:argon2id
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/recovery-system-reboot:factory_reset
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/kernel-modules-components:encrypted
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/uc20-install-in-initrd:none
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-set-efi-boot-vars:UBUNTUDIR_NOSEC
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core22-basic:files
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-grade-signed-above-testkeys-boot:signed
openstack-ps7:ubuntu-core-24-64:tests/main/
openstack-ps7:ubuntu-core-24-64:tests/core/
openstack-ps7:ubuntu-core-24-64:tests/core/
openstack-ps7:ubuntu-core-24-64:tests/main/
openstack-ps7:ubuntu-core-24-64:tests/main/
openstack-ps7:ubuntu-core-24-64:tests/main/
openstack-ps7:ubuntu-core-24-64:tests/core/
openstack-ps7:ubuntu-core-24-64:tests/core/
openstack-ps7:ubuntu-core-24-64:tests/smoke/
openstack-ps7:ubuntu-core-24-64:tests/smoke/
openstack-ps7:ubuntu-core-24-64:tests/regression/
openstack-ps7:ubuntu-core-24-64:tests/core/
openstack-ps7:ubuntu-core-24-64:tests/regression/
openstack-ps7:ubuntu-core-24-64:tests/regression/
openstack-ps7:ubuntu-core-24-64:tests/smoke/
openstack-ps7:ubuntu-core-24-64:tests/regression/
openstack-ps7:ubuntu-core-24-64:tests/regression/
openstack-ps7:ubuntu-core-24-64:tests/regression/

Executing:

openstack-ext-ps7:ubuntu-22.04-64:tests/nested/core/core20-fault-inject-on-refresh:base_reboot_link_snap
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/core/core20-kernel-failover:bad_linux
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/core/core20-fault-inject-on-refresh:kernel_reboot_link_snap
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/muinstaller-real:plain
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/core20-custom-kernel-commandline
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/core20-remodel
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/muinstaller-core:install_optional_snap
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/muinstaller-real:plain
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/muinstaller-core:plain
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/muinstaller-real:seeded
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/muinstaller-core:install_optional_all
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/snapd-removes-vulnerable-snap-confine-revs:snapd
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/muinstaller-real:encrypted
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/snapd-removes-vulnerable-snap-confine-revs:core
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/muinstaller-oldbasenewkernel
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/muinstaller-core:install_optional_snap_and_comp
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/core20-preseed
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/split-refresh
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/muinstaller
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/muinstaller-core:passphrase_auth
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/muinstaller-real:partial
openstack-ps7:ubuntu-20.04-64:tests/unit/go:clang
openstack-ps7:ubuntu-24.04-64:tests/main/services-user

Restoring:

openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/snapd-removes-vulnerable-snap-confine-revs:core
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/
openstack-ext-ps7:ubuntu-22.04-64
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/snapd-removes-vulnerable-snap-confine-revs:snapd
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/
openstack-ext-ps7:ubuntu-22.04-64
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/core20-custom-kernel-commandline
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/
openstack-ext-ps7:ubuntu-22.04-64
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/core20-remodel
openstack-ext-ps7:ubuntu-22.04-64:tests/nested/manual/
openstack-ext-ps7:ubuntu-22.04-64
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/remodel-with-components-offline
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/component-recovery-system
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/remodel-to-installed-kernel
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/remodel-with-components
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/component-recovery-system-offline
openstack-ext-ps7:ubuntu-24.04-64:tests/nested/manual/seeding-failure

Mar 18 '25 14:03 github-actions[bot]

Codecov Report

:white_check_mark: All modified and coverable lines are covered by tests. :white_check_mark: Project coverage is 77.45%. Comparing base (41271fc) to head (838c236).

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #15217      +/-   ##
==========================================
+ Coverage   77.39%   77.45%   +0.06%     
==========================================
  Files        1330     1321       -9     
  Lines      180925   180781     -144     
  Branches     2385     2385              
==========================================
- Hits       140032   140030       -2     
+ Misses      32377    32242     -135     
+ Partials     8516     8509       -7

Flag	Coverage Δ
unittests	`77.45% <ø> (+0.06%)`	:arrow_up:

Flags with carried forward coverage won't be shown. Click here to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

:rocket: New features to boost your workflow:

:snowflake: Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Mar 18 '25 14:03 codecov[bot]

This is not supported in 24.04. Putting it as draft. I will make it do it only for 26.04.

Apr 09 '25 12:04 valentindavid