[Bug 1960783] Re: don't install unsigned fwupd efi app by default

This bug was fixed in the package fwupd - 1.7.5-3~20.04.1 --- fwupd (1.7.5-3~20.04.1) focal; urgency=medium * Backport 1.7.5-3 from jammy to focal. * Support several new devices (LP: #1949412, LP: #1954965, LP: #1953573) * fwupd / fwupd-efi source package split (LP: #1955386)

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

This bug was fixed in the package fwupd-signed - 1.27.1ubuntu7 --- fwupd-signed (1.27.1ubuntu7) focal; urgency=medium * remove fwupd-unsigned from the Recommends of fwupd-signed. This is backported from v1.43 (LP: #1960783) -- Yuan-Chen Cheng Wed, 16 Feb 2022 19:14:12 +0800

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

This bug was fixed in the package fwupd - 1.7.5-3~21.10.1 --- fwupd (1.7.5-3~21.10.1) impish; urgency=medium * Backport 1.7.5-3 from jammy to impish. * Support several new devices (LP: #1949412, LP: #1954965, LP: #1953573) * fwupd / fwupd-efi source package split (LP: #1955386)

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

This bug was fixed in the package fwupd-signed - 1.42~ubuntu21.10.2 --- fwupd-signed (1.42~ubuntu21.10.2) impish; urgency=medium * remove fwupd-unsigned from the Recommends of fwupd-signed. This is backported from v1.43 (LP: #1960783) -- Yuan-Chen Cheng Wed, 16 Feb 2022

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

test on focal: 1. remove fwupd and related deb. 2. Turn on the proposed channel. 3. Then apt-get installs fwupd (1.7.5-3~20.04.1). fwupd-unsigned is not installed, fwupd-signed (1.27.1ubuntu7) is installed properly. 4. "fwupdmgr reinstall" and choose machine bios, as secure boot is off, this

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

test on impish: 1. remove fwupd and related deb. 2. Turn on the proposed channel. 3. Then apt-get installs fwupd. fwupd-unsigned is not installed, fwupd-signed is installed properly. 4. "fwupdmgr reinstall" and choose machine bios, as secure boot is off, this works perfectly. (for secure boot

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

Hello Yuan-Chen, or anyone else affected, Accepted fwupd-signed into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/fwupd- signed/1.27.1ubuntu7 in a few hours, and then in the -proposed repository. Please help us by testing this new package.

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

Hello Yuan-Chen, or anyone else affected, Accepted fwupd into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/fwupd/1.7.5-3~20.04.1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

Hello Yuan-Chen, or anyone else affected, Accepted fwupd-signed into impish-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/fwupd- signed/1.42~ubuntu21.10.2 in a few hours, and then in the -proposed repository. Please help us by testing this new

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

Hello Yuan-Chen, or anyone else affected, Accepted fwupd into impish-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/fwupd/1.7.5-3~21.10.1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

** Description changed: Per current ubuntu, we install signed efi / kernel by default. It seems reasonable to do the same on the fwupd efi app. - - This one is a follow up bug for comment 27 ~ 35 of lp:1949412 + This one is a follow up bug for comment 27 ~ 35 of lp:1949412 and the +

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

need SRU sponsor on fwupd-sign from #12 and #14, and fwupd from https://launchpad.net/~ycheng-twn/+archive/ubuntu/fwupd175-3-2 Note: please don't use fwupd-efi from the ppa above. The current one in focal-proposed and impish-proposed is good enough. -- You received this bug notification because

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

fwupd 1.7.5-3 arrive jammy channel (as autopkg test passed) AI: fwupd 1.7.5-3 SRU back to focal and impish. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1960783 Title: don't install unsigned fwupd

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

upstream bug for autopkgtest failure: https://github.com/fwupd/fwupd/issues/4299 Note the failed case is just introduced in 1.7.5. ** Bug watch added: github.com/fwupd/fwupd/issues #4299 https://github.com/fwupd/fwupd/issues/4299 -- You received this bug notification because you are a

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

check https://autopkgtest.ubuntu.com/results/autopkgtest- jammy/jammy/arm64/f/fwupd/20220216_061543_8c886@/log.gz Seems failed here: FuMain got hint locale=C.UTF-8 WARNING: The daemon has loaded 3rd party code and is no longer supported by the upstream developers!

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

> fwupd-sign arrive jammy, fwupd still in jammy-proposed. It seems that autopkgtest has a regression that needs to be dug into, happens both in Debian unstable and Ubuntu jammy. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

fwupd-sign arrive jammy, fwupd still in jammy-proposed. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1960783 Title: don't install unsigned fwupd efi app by default To manage notifications about

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

debdiff for focal ** Patch added: "fwupd-signed-focal.debdiff" https://bugs.launchpad.net/oem-priority/+bug/1960783/+attachment/5561413/+files/fwupd-signed-focal.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

confirm install fwupd on jammy does not install fwupd-unsigned via Recommends. ** Patch removed: "fwupd-signed.1.43.debdiff" https://bugs.launchpad.net/oem-priority/+bug/1960783/+attachment/5561379/+files/fwupd-signed.1.43.debdiff -- You received this bug notification because you are a

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

debdiff for impish ** Patch added: "fwupd-signed-impish.debdiff" https://bugs.launchpad.net/oem-priority/+bug/1960783/+attachment/5561380/+files/fwupd-signed-impish.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

debdiff for focal ** Patch added: "fwupd-signed.1.43.debdiff" https://bugs.launchpad.net/oem-priority/+bug/1960783/+attachment/5561379/+files/fwupd-signed.1.43.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

This bug was fixed in the package fwupd-signed - 1.43 --- fwupd-signed (1.43) jammy; urgency=medium * remove fwupd-unsigned from Recommends of fwupd-signed deb. (LP: #1960783) -- Yuan-Chen Cheng Mon, 14 Feb 2022 14:02:19 + ** Changed in: fwupd-signed (Ubuntu)

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

1.7.5-1 is now synced from Debian to Jammy. ** Changed in: fwupd (Ubuntu) Status: In Progress => Fix Released ** Changed in: fwupd-signed (Ubuntu) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

sponsored debdiff from #2 for fwupd-signed as well -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1960783 Title: don't install unsigned fwupd efi app by default To manage notifications about this

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

AI: prepare SRU of the new fwupd-signed and fwupd for focal and impish -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1960783 Title: don't install unsigned fwupd efi app by default To manage

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

Mario: thank you! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1960783 Title: don't install unsigned fwupd efi app by default To manage notifications about this bug go to:

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

YC: No need for debdiff work. I pulled it into debian packaging branch: https://salsa.debian.org/efi-team/fwupd/-/commit/aae5c04c7a02e40eee8fe5436c93d8915360e839 https://salsa.debian.org/efi-team/fwupd/-/commit/516f86aac6d6e63afd977838b7ce2badda134dfe And I uploaded to unstable. It can sync

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

https://github.com/fwupd/fwupd/pull/4280 is merged! AI: prepare a fwupd debdiff with that and another patch request by an OEM project. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1960783 Title:

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

The attachment "deb diff for fwupd-signed" seems to be a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. If the attachment isn't a patch, please remove the "patch" flag from the attachment, remove the "patch" tag,

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

** Changed in: fwupd (Ubuntu) Status: New => In Progress ** Changed in: fwupd (Ubuntu) Assignee: (unassigned) => Yuan-Chen Cheng (ycheng-twn) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

remove fwupd-unsigned from Recommends of fwupd-signed deb. ** Patch added: "deb diff for fwupd-signed" https://bugs.launchpad.net/oem-priority/+bug/1960783/+attachment/5560788/+files/fwupd-signed.1.43.debdiff ** Changed in: fwupd-signed (Ubuntu) Assignee: (unassigned) => Yuan-Chen Cheng

[Bug 1960783] Re: don't install unsigned fwupd efi app by default

upstream PR: https://github.com/fwupd/fwupd/pull/4280 ** Information type changed from Proprietary to Public ** Also affects: fwupd (Ubuntu) Importance: Undecided Status: New ** Also affects: fwupd-signed (Ubuntu) Importance: Undecided Status: New ** Description changed: