From: Vladis Dronov <vdronov(a)redhat.com>
[redhat] Embed crypto algos, modes and templates needed in the FIPS mode
Currently a number of FIPS-allowed algorithms are built as modules or are
not enabled in Fedora and ARK. This can result in a panic while booting
in the FIPS mode. Fix this by embedding the FIPS-allowed algorithms, modes
and templates into a kernel, the same way as CTC, CBC and other algorithms
already do.
Bugzilla:
https://bugzilla.redhat.com/show_bug.cgi?id=1947240
Signed-off-by: Vladis Dronov <vdronov(a)redhat.com>
diff a/redhat/configs/ark/generic/CONFIG_CRYPTO_LZ4
b/redhat/configs/ark/generic/CONFIG_CRYPTO_LZ4
--- a/redhat/configs/ark/generic/CONFIG_CRYPTO_LZ4
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_CRYPTO_LZ4 is not set
diff a/redhat/configs/ark/generic/CONFIG_CRYPTO_LZ4HC
b/redhat/configs/ark/generic/CONFIG_CRYPTO_LZ4HC
--- a/redhat/configs/ark/generic/CONFIG_CRYPTO_LZ4HC
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_CRYPTO_LZ4HC is not set
diff a/redhat/configs/ark/generic/CONFIG_CRYPTO_XTS
b/redhat/configs/ark/generic/CONFIG_CRYPTO_XTS
--- a/redhat/configs/ark/generic/CONFIG_CRYPTO_XTS
+++ /dev/null
@@ -1 +0,0 @@
-CONFIG_CRYPTO_XTS=m
diff a/redhat/configs/ark/generic/CONFIG_CRYPTO_ZSTD
b/redhat/configs/ark/generic/CONFIG_CRYPTO_ZSTD
--- a/redhat/configs/ark/generic/CONFIG_CRYPTO_ZSTD
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_CRYPTO_ZSTD is not set
diff a/redhat/configs/common/generic/CONFIG_CRYPTO_AUTHENC
b/redhat/configs/common/generic/CONFIG_CRYPTO_AUTHENC
--- a/redhat/configs/common/generic/CONFIG_CRYPTO_AUTHENC
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_AUTHENC
@@ -1 +1 @@
-CONFIG_CRYPTO_AUTHENC=m
+CONFIG_CRYPTO_AUTHENC=y
diff a/redhat/configs/common/generic/CONFIG_CRYPTO_CCM
b/redhat/configs/common/generic/CONFIG_CRYPTO_CCM
--- a/redhat/configs/common/generic/CONFIG_CRYPTO_CCM
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_CCM
@@ -1 +1 @@
-CONFIG_CRYPTO_CCM=m
+CONFIG_CRYPTO_CCM=y
diff a/redhat/configs/common/generic/CONFIG_CRYPTO_CMAC
b/redhat/configs/common/generic/CONFIG_CRYPTO_CMAC
--- a/redhat/configs/common/generic/CONFIG_CRYPTO_CMAC
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_CMAC
@@ -1 +1 @@
-CONFIG_CRYPTO_CMAC=m
+CONFIG_CRYPTO_CMAC=y
diff a/redhat/configs/common/generic/CONFIG_CRYPTO_LZ4
b/redhat/configs/common/generic/CONFIG_CRYPTO_LZ4
--- /dev/null
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_LZ4
@@ -0,0 +1 @@
+CONFIG_CRYPTO_LZ4=y
diff a/redhat/configs/common/generic/CONFIG_CRYPTO_LZ4HC
b/redhat/configs/common/generic/CONFIG_CRYPTO_LZ4HC
--- /dev/null
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_LZ4HC
@@ -0,0 +1 @@
+CONFIG_CRYPTO_LZ4HC=y
diff a/redhat/configs/fedora/generic/CONFIG_CRYPTO_NULL
b/redhat/configs/common/generic/CONFIG_CRYPTO_NULL
--- a/redhat/configs/fedora/generic/CONFIG_CRYPTO_NULL
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_NULL
diff a/redhat/configs/common/generic/CONFIG_CRYPTO_OFB
b/redhat/configs/common/generic/CONFIG_CRYPTO_OFB
--- a/redhat/configs/common/generic/CONFIG_CRYPTO_OFB
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_OFB
@@ -1 +1 @@
-CONFIG_CRYPTO_OFB=m
+CONFIG_CRYPTO_OFB=y
diff a/redhat/configs/fedora/generic/CONFIG_CRYPTO_RSA
b/redhat/configs/common/generic/CONFIG_CRYPTO_RSA
--- a/redhat/configs/fedora/generic/CONFIG_CRYPTO_RSA
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_RSA
diff a/redhat/configs/common/generic/CONFIG_CRYPTO_SHA3
b/redhat/configs/common/generic/CONFIG_CRYPTO_SHA3
--- a/redhat/configs/common/generic/CONFIG_CRYPTO_SHA3
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_SHA3
@@ -1 +1 @@
-CONFIG_CRYPTO_SHA3=m
+CONFIG_CRYPTO_SHA3=y
diff a/redhat/configs/fedora/generic/CONFIG_CRYPTO_XTS
b/redhat/configs/common/generic/CONFIG_CRYPTO_XTS
--- a/redhat/configs/fedora/generic/CONFIG_CRYPTO_XTS
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_XTS
diff a/redhat/configs/common/generic/CONFIG_CRYPTO_ZSTD
b/redhat/configs/common/generic/CONFIG_CRYPTO_ZSTD
--- /dev/null
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_ZSTD
@@ -0,0 +1 @@
+CONFIG_CRYPTO_ZSTD=y
diff a/redhat/configs/fedora/generic/CONFIG_CRYPTO_LZ4
b/redhat/configs/fedora/generic/CONFIG_CRYPTO_LZ4
--- a/redhat/configs/fedora/generic/CONFIG_CRYPTO_LZ4
+++ /dev/null
@@ -1 +0,0 @@
-CONFIG_CRYPTO_LZ4=m
diff a/redhat/configs/fedora/generic/CONFIG_CRYPTO_LZ4HC
b/redhat/configs/fedora/generic/CONFIG_CRYPTO_LZ4HC
--- a/redhat/configs/fedora/generic/CONFIG_CRYPTO_LZ4HC
+++ /dev/null
@@ -1 +0,0 @@
-CONFIG_CRYPTO_LZ4HC=m
diff a/redhat/configs/fedora/generic/CONFIG_CRYPTO_ZSTD
b/redhat/configs/fedora/generic/CONFIG_CRYPTO_ZSTD
--- a/redhat/configs/fedora/generic/CONFIG_CRYPTO_ZSTD
+++ /dev/null
@@ -1 +0,0 @@
-CONFIG_CRYPTO_ZSTD=m
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1125