Hi,
to maintain compatible set of shim/grub in the pc gadget with those that are compatible with a hypothetical future fips-kernel, public tracks need to exist on the pc gadget snap that are kept at a compatible level with the fips-kernel (w.r.t. secure-boot policy, revocation, cmdline args, etc).
Please open the following tracks on the “pc” gadget:
- 22-fips
- 22-fips-updates
These tracks match the naming of (UC22 series X Pro entitlements for fips) as “fips” is certified, and “fips-updates” are non-certified stable updates (aka next recertification).
Regards,
Dimitri.