APPLIED[B]: [SRU BFJNOPQ:linux] Support the Canonical Livepatch 2025 key

Manuel Diewald manuel.diewald at canonical.com
Fri Jun 6 10:11:15 UTC 2025


On Mon, May 19, 2025 at 09:30:16AM +0100, Andy Whitcroft wrote:
> The existing Canonical Livepatch key is due to expire in a little over a
> year.  As we allow livepatch users to continue to run systems for up to
> a year we need to rotate this key at least a year before expirey.
> Start to rotate this key.
> 
> Add the Canonical Livepatch 2025 key.
> 
> Proposing for all primary kernels for which we produce a livepatch.  I
> believe that applying this to all *:linux kernels from bionic to
> questing should be sufficient; as we do not livepatch any of the OEM
> kernels.
> 
> -apw
> 
> Branch: lp/2111244
> 
> Andy Whitcroft (1):
>   UBUNTU: [config] prepare for Canonical Livepatch key rotation
> 
>  debian/certs/canonical-livepatch-2025-all.pem | 125 ++++++++++++++++++
>  1 file changed, 125 insertions(+)
>  create mode 100644 debian/certs/canonical-livepatch-2025-all.pem
> 
> -- 
> 2.45.2
> 
> -- 
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team

Applied to bionic:linux/master-next. Thanks!

-- 
 Manuel
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20250606/ba3dff47/attachment.sig>


More information about the kernel-team mailing list