APPLIED[P/N/J/F]: [SRU BFJNOPQ:linux] Support the Canonical Livepatch 2025 key

Stefan Bader stefan.bader at canonical.com
Mon May 19 10:26:55 UTC 2025


On 19.05.25 10:30, Andy Whitcroft wrote:
> The existing Canonical Livepatch key is due to expire in a little over a
> year.  As we allow livepatch users to continue to run systems for up to
> a year we need to rotate this key at least a year before expirey.
> Start to rotate this key.
> 
> Add the Canonical Livepatch 2025 key.
> 
> Proposing for all primary kernels for which we produce a livepatch.  I
> believe that applying this to all *:linux kernels from bionic to
> questing should be sufficient; as we do not livepatch any of the OEM
> kernels.
> 
> -apw
> 
> Branch: lp/2111244
> 
> Andy Whitcroft (1):
>    UBUNTU: [config] prepare for Canonical Livepatch key rotation
> 
>   debian/certs/canonical-livepatch-2025-all.pem | 125 ++++++++++++++++++
>   1 file changed, 125 insertions(+)
>   create mode 100644 debian/certs/canonical-livepatch-2025-all.pem
> 

Applied to plucky,noble,jammy,focal:linux preparing the cycle. I skipped 
oracular since that is EOL soon. Thanks.

-Stefan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 47863 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20250519/557045b3/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20250519/557045b3/attachment-0001.sig>


More information about the kernel-team mailing list