Merge pull request #2009 from madhu-pillai/pkey_cca

prestist · web-flow · commit c0680d60b768 · 2025-02-20T08:47:19.000-05:00
dracut: Correctly add pkey_cca kernel mod for cex card
diff --git a/docs/release-notes.md b/docs/release-notes.md
@@ -19,6 +19,7 @@ Starting with this release, ignition-validate binaries are signed with the
 
 ### Bug fixes
 
+- Add `pkey_cca` kernel module to detect CEX domain for LUKS encryption
 
 ## Ignition 2.20.0 (2024-10-22)
 
diff --git a/dracut/30ignition/module-setup.sh b/dracut/30ignition/module-setup.sh
@@ -121,6 +121,7 @@ installkernel() {
      # required for cex card early initialization
      if [[ ${DRACUT_ARCH:-$(uname -m)} == s390x ]]; then
         instmods -c zcrypt_cex4
+        instmods -c pkey_cca
      fi
 }
 

Original file line number	Diff line number	Diff line change
`@@ -19,6 +19,7 @@ Starting with this release, ignition-validate binaries are signed with the`
`19`	`19`
`20`	`20`	`### Bug fixes`
`21`	`21`
	`22`	+- Add `pkey_cca` kernel module to detect CEX domain for LUKS encryption
`22`	`23`
`23`	`24`	`## Ignition 2.20.0 (2024-10-22)`
`24`	`25`
Original file line number	Diff line number	Diff line change
`@@ -121,6 +121,7 @@ installkernel() {`
`121`	`121`	`# required for cex card early initialization`
`122`	`122`	`if [[ ${DRACUT_ARCH:-$(uname -m)} == s390x ]]; then`
`123`	`123`	`instmods -c zcrypt_cex4`
	`124`	`+ instmods -c pkey_cca`
`124`	`125`	`fi`
`125`	`126`	`}`
`126`	`127`