[PATCH] containers: update ACVP IPsec MB to v2.0

Kai Ji kai.ji at intel.com
Thu Oct 22 17:34:25 CEST 2026


Update Intel IPsec Multi-buffer v2.0
Update from make to cmake and refresh the shared library
cache after installation.

Signed-off-by: Kai Ji <kai.ji at intel.com>
---
 containers/template_engine/inventory.yaml            |  1 +
 .../containers/ubuntu_acvp_fips.dockerfile.j2        |  8 +++++---
 tools/acvp/README                                    | 12 +++++++-----
 3 files changed, 13 insertions(+), 8 deletions(-)

diff --git a/containers/template_engine/inventory.yaml b/containers/template_engine/inventory.yaml
index be7354e..59ba427 100644
--- a/containers/template_engine/inventory.yaml
+++ b/containers/template_engine/inventory.yaml
@@ -283,6 +283,7 @@ dockerfiles:
     ubuntu_acvp_fips:
       parent: "ubuntu20.04"
       packages:
+        - cmake
         - nasm
     ubuntu_sve:
       parent: "ubuntu20.04"
diff --git a/containers/template_engine/templates/containers/ubuntu_acvp_fips.dockerfile.j2 b/containers/template_engine/templates/containers/ubuntu_acvp_fips.dockerfile.j2
index e4d2078..df1eeea 100644
--- a/containers/template_engine/templates/containers/ubuntu_acvp_fips.dockerfile.j2
+++ b/containers/template_engine/templates/containers/ubuntu_acvp_fips.dockerfile.j2
@@ -9,9 +9,11 @@
 # Build and install the Intel ipsec multibuffer library
 RUN git clone "https://github.com/intel/intel-ipsec-mb.git" && \
     cd intel-ipsec-mb && \
-    git checkout v1.3 && \
-    make -j 4 && \
-    make install && \
+    git checkout v2.0 && \
+    cmake . && \
+    cmake --build . --parallel 4 && \
+    cmake --install . && \
+    ldconfig && \
     cd .. && \
     rm -rf intel-ipsec-mb
 
diff --git a/tools/acvp/README b/tools/acvp/README
index e89828a..7bd2275 100644
--- a/tools/acvp/README
+++ b/tools/acvp/README
@@ -19,7 +19,7 @@ There are also python packages you need to download from the requirements.txt fi
 * pyotp
 * requests
 
-Along with these, you will also need to install the `nasm` package using your local package manager.
+Along with these, you will also need to install the `cmake` and `nasm` packages using your local package manager.
 
 The tool expects that you have all the credential files from NIST:
 * Client certificate (usually a .cer file from NIST)
@@ -55,13 +55,15 @@ Now you can use the acvp_tool.py script to register a test session,
 upload the results, and download the verdict.
 
 In order to run the DPDK sample application, there are a few libraries which must be installed:
-* Intel IPSec Multi-buffer (v1.3)
+* Intel IPSec Multi-buffer (v2.0)
 ```
 git clone https://github.com/intel/intel-ipsec-mb.git
 cd intel-ipsec-mb
-git checkout v1.3
-make -j 4
-make install
+git checkout v2.0
+cmake .
+cmake --build . --parallel 4
+cmake --install .
+ldconfig
 ```
 * FIPS Object Module
 ```
-- 
2.34.1



More information about the ci mailing list