[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic
** Changed in: grub2.04-signed (Ubuntu) Importance: Undecided => Wishlist ** Changed in: grub2.04-signed (Ubuntu Bionic) Importance: Undecided => Wishlist ** Changed in: grub2.04-signed (Ubuntu Focal) Importance: Undecided => Wishlist ** Tags added: upgrade-software-version -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1912264 Title: Provide grub 2.04 EFI backport on bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2.04-signed/+bug/1912264/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic
I somewhat want to call this a failed attempt. Does not future-proof against any number of rebuilds. Does not provide support for -dbg modules. ** Tags removed: verification-needed verification-needed-focal ** Tags added: verification-failed verification-failed-focal -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1912264 Title: Provide grub 2.04 EFI backport on bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2.04-signed/+bug/1912264/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic
grub2.04-signed in bionic must be compatible with grub-common as shipped in bionic. grub2-signed 1.142.10 in focal calls /usr/share/grub/grub-check- signatures & /usr/lib/grub/grub-multi-install scripts, which are shipped by grub-common in focal, and not available in bionic. thus grub2.04-signed in bionic cannot use the same postinst as grub2-signed in focal. the origin of the grub2.04-signed is closer to shim-signed bionic postinst, specifically the sanity checks and calling grub-install, for both arm64 & amd64. But not doing any calls to update-secureboot-policy. ps Looking closer at grub2-signed 1.142.10 in focal, it only provides a postinst for amd64 and doesn't provide one for arm64 which is an oversight. ** Changed in: grub2.04-signed (Ubuntu Bionic) Status: Incomplete => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1912264 Title: Provide grub 2.04 EFI backport on bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2.04-signed/+bug/1912264/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic
why does the grub2.04 source ship a separate postinst that differs in content from the one in grub-efi-amd64-signed in focal? I am concerned about the implications for this being out of sync and possibly missing future bugfixes from focal SRUs. ** Changed in: grub2.04-signed (Ubuntu Bionic) Status: In Progress => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1912264 Title: Provide grub 2.04 EFI backport on bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2.04-signed/+bug/1912264/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic
Hello Dimitri, or anyone else affected, Accepted grub2.04-signed into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/grub2.04-signed/1.143 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed- focal to verification-done-focal. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed-focal. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Tags added: verification-needed verification-needed-focal ** Package changed: grub2 (Ubuntu) => grub2.04-signed (Ubuntu) ** Changed in: grub2.04-signed (Ubuntu Focal) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1912264 Title: Provide grub 2.04 EFI backport on bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2.04-signed/+bug/1912264/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic
** Description changed: [Impact] * Provide grub 2.04 backport to bionic for improved TPM support. [Test Case] * Boot to bionic EFI amd64 or arm64 * If /boot/efi/EFI/ubuntu does not exist, execute on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot and reboot * Install grub2.04-signed on bionic amd64 or arm64 * Reboot, check that echo ${package_version} shows 2.04 * Upgrade to focal * Observer that upgrade is correct and grub2.04-signed is now a dummy transitional package [Where problems could occur] * One must be able to remove grub2.04-signed & downgrade back to grub 2.02 based -bin and -signed packages. And binaries in /boot must be updated. * One must be able to mix userspace grub packages tooling from release/security/updates/proposed, whilst keeping grub2.04-signed installed. * One must be upgraded to stock grub2.04 -bin / -signed packages upon dist-upgrade to focal. [Other Info] * Targetted to be installed by default on some cloud images. Test packages available from this bileto PPA https://launchpad.net/~ci- train-ppa-service/+archive/ubuntu/4413/+packages + + NEW queue: + https://launchpad.net/ubuntu/focal/+queue?queue_state=0_text=grub2.04-signed + + + https://launchpad.net/ubuntu/bionic/+queue?queue_state=0_text=grub2.04-signed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1912264 Title: Provide grub 2.04 EFI backport on bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic
** Changed in: grub2 (Ubuntu Bionic) Status: New => In Progress ** Changed in: grub2 (Ubuntu Focal) Status: New => In Progress ** Description changed: [Impact] * Provide grub 2.04 backport to bionic for improved TPM support. [Test Case] * Boot to bionic EFI amd64 or arm64 * If /boot/efi/EFI/ubuntu does not exist, execute on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot and reboot * Install grub2.04-signed on bionic amd64 or arm64 * Reboot, check that echo ${package_version} shows 2.04 * Upgrade to focal * Observer that upgrade is correct and grub2.04-signed is now a dummy transitional package [Where problems could occur] * One must be able to remove grub2.04-signed & downgrade back to grub 2.02 based -bin and -signed packages. And binaries in /boot must be updated. * One must be able to mix userspace grub packages tooling from release/security/updates/proposed, whilst keeping grub2.04-signed installed. * One must be upgraded to stock grub2.04 -bin / -signed packages upon dist-upgrade to focal. [Other Info] * Targetted to be installed by default on some cloud images. + + Test packages available from this bileto PPA https://launchpad.net/~ci- + train-ppa-service/+archive/ubuntu/4413/+packages -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1912264 Title: Provide grub 2.04 EFI backport on bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic
** Description changed: [Impact] * Provide grub 2.04 backport to bionic for improved TPM support. [Test Case] - * Boot to bionic EFI amd64 or arm64 + * Boot to bionic EFI amd64 or arm64 * If /boot/efi/EFI/ubuntu does not exist, execute on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot + * Check which grub*.efi files are in /boot/efi + * Install grub2.04-signed on bionic amd64 or arm64 - * Reboot, check that echo ${package_version} shows 2.04 + * Check that grub*.efi files in /boot/efi changed, and match those + shipped by the grub2.04-signed package. + + * Reboot, check that echo ${package_version} shows 2.04 in grub + console, or that boot is successful if there is no console access at + grub time. * Upgrade to focal * Observer that upgrade is correct and grub2.04-signed is now a dummy transitional package + + * Check that grub*.efi files in /boot/efi now match those shipped by + the grub-efi-*-signed package [Where problems could occur] * One must be able to remove grub2.04-signed & downgrade back to grub 2.02 based -bin and -signed packages. And binaries in /boot must be updated. * One must be able to mix userspace grub packages tooling from release/security/updates/proposed, whilst keeping grub2.04-signed installed. * One must be upgraded to stock grub2.04 -bin / -signed packages upon dist-upgrade to focal. [Other Info] * Targetted to be installed by default on some cloud images. ** Description changed: [Impact] * Provide grub 2.04 backport to bionic for improved TPM support. [Test Case] * Boot to bionic EFI amd64 or arm64 * If /boot/efi/EFI/ubuntu does not exist, execute on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot - * Check which grub*.efi files are in /boot/efi + and reboot * Install grub2.04-signed on bionic amd64 or arm64 - * Check that grub*.efi files in /boot/efi changed, and match those - shipped by the grub2.04-signed package. - - * Reboot, check that echo ${package_version} shows 2.04 in grub - console, or that boot is successful if there is no console access at - grub time. + * Reboot, check that echo ${package_version} shows 2.04 * Upgrade to focal * Observer that upgrade is correct and grub2.04-signed is now a dummy transitional package - - * Check that grub*.efi files in /boot/efi now match those shipped by - the grub-efi-*-signed package [Where problems could occur] * One must be able to remove grub2.04-signed & downgrade back to grub 2.02 based -bin and -signed packages. And binaries in /boot must be updated. * One must be able to mix userspace grub packages tooling from release/security/updates/proposed, whilst keeping grub2.04-signed installed. * One must be upgraded to stock grub2.04 -bin / -signed packages upon dist-upgrade to focal. [Other Info] * Targetted to be installed by default on some cloud images. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1912264 Title: Provide grub 2.04 EFI backport on bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic
** Also affects: grub2 (Ubuntu Focal) Importance: Undecided Status: New ** Description changed: [Impact] * Provide grub 2.04 backport to bionic for improved TPM support. [Test Case] - * If /boot/efi/EFI/ubuntu does not exist, execute + * Boot to bionic EFI amd64 or arm64 - on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot - on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot + * If /boot/efi/EFI/ubuntu does not exist, execute + + on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot + on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot * Install grub2.04-signed on bionic amd64 or arm64 * Reboot, check that echo ${package_version} shows 2.04 * Upgrade to focal * Observer that upgrade is correct and grub2.04-signed is now a dummy transitional package [Where problems could occur] * One must be able to remove grub2.04-signed & downgrade back to grub 2.02 based -bin and -signed packages. And binaries in /boot must be updated. * One must be able to mix userspace grub packages tooling from release/security/updates/proposed, whilst keeping grub2.04-signed installed. * One must be upgraded to stock grub2.04 -bin / -signed packages upon dist-upgrade to focal. [Other Info] * Targetted to be installed by default on some cloud images. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1912264 Title: Provide grub 2.04 EFI backport on bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic
** Also affects: grub2 (Ubuntu Bionic) Importance: Undecided Status: New ** Changed in: grub2 (Ubuntu) Status: New => Fix Released ** Description changed: [Impact] - * Provide grub 2.04 backport to bionic for improved TPM support. + * Provide grub 2.04 backport to bionic for improved TPM support. [Test Case] - * Install grub2.04-signed on bionic amd64 or arm64 + * If /boot/efi/EFI/ubuntu does not exist, execute - * Reboot, check that echo ${package_version} shows 2.04 + on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot + on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot - * Upgrade to focal + * Install grub2.04-signed on bionic amd64 or arm64 - * Observer that upgrade is correct and grub2.04-signed is now a dummy + * Reboot, check that echo ${package_version} shows 2.04 + + * Upgrade to focal + + * Observer that upgrade is correct and grub2.04-signed is now a dummy transitional package [Where problems could occur] - * One must be able to remove grub2.04-signed & downgrade back to grub + * One must be able to remove grub2.04-signed & downgrade back to grub 2.02 based -bin and -signed packages. And binaries in /boot must be updated. - * One must be able to mix userspace grub packages tooling from + * One must be able to mix userspace grub packages tooling from release/security/updates/proposed, whilst keeping grub2.04-signed installed. - * One must be upgraded to stock grub2.04 -bin / -signed packages upon + * One must be upgraded to stock grub2.04 -bin / -signed packages upon dist-upgrade to focal. [Other Info] - - * Targetted to be installed by default on some cloud images. + + * Targetted to be installed by default on some cloud images. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1912264 Title: Provide grub 2.04 EFI backport on bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic
Testing the demo package 1) downgrades fail 2) grub-install is not run upon a downgrade 3) upgrades to be tested. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1912264 Title: Provide grub 2.04 EFI backport on bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs