[PATCH RFC 4/4] selftests/ipe: test the IPE policy keyring
Manuel Huber
manuelh at nvidia.com
Thu Oct 22 17:22:41 UTC 2026
On Mon, Oct 19, 2026 at 04:28:28PM -0700, Fan Wu wrote:
> IPE doesn't use kselftest. Our tests live in the IPE CI [1], which
> already has keyring tests for policy signatures [2] and an initrd unit
> that provisions and seals the .fs-verity keyring [3]. Please add the
> .ipe cases there instead.
Bad miss on my end; this is clearly documented. I have forked the IPE CI
project in the meantime and run it against the kernel branch. Along with
my next revision, I will share a branch for the IPE CI with tests added
there and corresponding test results. I will wait for ongoing review
discussions to converge before posting another revision.
More information about the Linux-security-module-archive
mailing list