/srv/irclogs.ubuntu.com/2023/01/07/#ubuntu-kernel.txt

sarnoldbut if our certified kernel just plain doesn't drive that nic, it's probably a non-starter00:18
JanCwell, you can always certify the kernel yourself01:21
JanCit will cost more obviously01:21
JanCor build your own & certify i01:22
JanC*it01:22
sarnoldI can't begin to fathom the cost :)01:22
JanCin part because the existing certifications are mostly bogus anyway  ;-)01:24
JanCin fact, I would say guaranteeing it if you build everything yourself could actually be cheaper01:28
JanCat least in some cases01:29
JanCbut then again FIPS is probably just a "minimal best effort" thing anyway01:32
sarnoldwell, step one with FIPS is selecting which specific hardware platforms you're going to be using, and make one of them available to the certification lab01:34
sarnoldeg "Ubuntu 20.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 CPU with PAA"  https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/392801:34
JanCwhich is probably quite ridiculous from a security PoV01:35
sarnold95% agreed, yeah01:36
JanCI doubt xevious is using that  :)01:36
JanCor if he they could even but that, today01:36
JanC*buy that*01:36
sarnoldthere might be one on ebay!01:37
sarnoldlots of neat stuff on ebay01:37
JanCbut that one might be modified  :)01:37

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!