Ubuntu Pro 20.04 FIPS Mode Unable to Log In

0

I have an Ubuntu Pro 20.04 FIPS Mode instance that I have been hardening, when I add a grub password the system won't boot. It seems as if the grub password is being prompted for prior to the EC2 serial console being available. If I use an instance that isn't FIPS enabled, everything works as designed, any help would be greatly appreciated.

Mike
asked a month ago132 views
2 Answers
1

I have learned more, it appears that the Ubuntu Pro images are created without UEFI and may be the cause of this issue. I created a Pro and a non-Pro image and compared grub.cfg and the only stand out difference was UEFI. #Non-Pro

### BEGIN /etc/grub.d/25_bli ###
if [ "$grub_platform" = "efi" ]; then
  insmod bli
fi
### END /etc/grub.d/25_bli ###

### BEGIN /etc/grub.d/30_os-prober ###
### END /etc/grub.d/30_os-prober ###

### BEGIN /etc/grub.d/30_uefi-firmware ###
if [ "$grub_platform" = "efi" ]; then
	fwsetup --is-supported
	if [ "$?" = 0 ]; then
		menuentry 'UEFI Firmware Settings' $menuentry_id_option 'uefi-firmware' {
			fwsetup
		}
	fi
fi

#Pro

### BEGIN /etc/grub.d/30_uefi-firmware ###
									 
					   
					  
																		   
		  
   
   
  
### END /etc/grub.d/30_uefi-firmware ###
Mike
answered a month ago
0

Take a look at this blog post about accessing Grub from the EC2 Serial Console.

https://aws.amazon.com/blogs/compute/using-ec2-serial-console-to-access-the-grub-menu-and-recover-from-boot-failures/

Hope this helps!

profile pictureAWS
EXPERT
iBehr
answered a month ago
profile picture
EXPERT
reviewed a month ago
  • iBehr, I was really hopeful that this would work. I made all of the changes and rebuilt grub, but the serial console still hangs. I face the same issue when trying to connect from Cloudshell. The SSH keys copy successfully, but when I try to ssh to the instance it just hangs.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions