[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic

2021-02-28 Thread Mathew Hodson
** Changed in: grub2.04-signed (Ubuntu)
   Importance: Undecided => Wishlist

** Changed in: grub2.04-signed (Ubuntu Bionic)
   Importance: Undecided => Wishlist

** Changed in: grub2.04-signed (Ubuntu Focal)
   Importance: Undecided => Wishlist

** Tags added: upgrade-software-version

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912264

Title:
  Provide grub 2.04 EFI backport on bionic

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2.04-signed/+bug/1912264/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic

2021-02-17 Thread Dimitri John Ledkov
I somewhat want to call this a failed attempt.

Does not future-proof against any number of rebuilds.

Does not provide support for -dbg modules.

** Tags removed: verification-needed verification-needed-focal
** Tags added: verification-failed verification-failed-focal

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912264

Title:
  Provide grub 2.04 EFI backport on bionic

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2.04-signed/+bug/1912264/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic

2021-02-03 Thread Dimitri John Ledkov
grub2.04-signed in bionic must be compatible with grub-common as shipped
in bionic.

grub2-signed 1.142.10 in focal calls /usr/share/grub/grub-check-
signatures & /usr/lib/grub/grub-multi-install scripts, which are shipped
by grub-common in focal, and not available in bionic.

thus grub2.04-signed in bionic cannot use the same postinst as
grub2-signed in focal.

the origin of the grub2.04-signed is closer to shim-signed bionic
postinst, specifically the sanity checks and calling grub-install, for
both arm64 & amd64. But not doing any calls to update-secureboot-policy.

ps Looking closer at grub2-signed 1.142.10 in focal, it only provides a
postinst for amd64 and doesn't provide one for arm64 which is an
oversight.

** Changed in: grub2.04-signed (Ubuntu Bionic)
   Status: Incomplete => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912264

Title:
  Provide grub 2.04 EFI backport on bionic

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2.04-signed/+bug/1912264/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic

2021-02-03 Thread Steve Langasek
why does the grub2.04 source ship a separate postinst that differs in
content from the one in grub-efi-amd64-signed in focal?  I am concerned
about the implications for this being out of sync and possibly missing
future bugfixes from focal SRUs.


** Changed in: grub2.04-signed (Ubuntu Bionic)
   Status: In Progress => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912264

Title:
  Provide grub 2.04 EFI backport on bionic

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2.04-signed/+bug/1912264/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic

2021-02-03 Thread Steve Langasek
Hello Dimitri, or anyone else affected,

Accepted grub2.04-signed into focal-proposed. The package will build now
and be available at
https://launchpad.net/ubuntu/+source/grub2.04-signed/1.143 in a few
hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.  Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, what testing has been
performed on the package and change the tag from verification-needed-
focal to verification-done-focal. If it does not fix the bug for you,
please add a comment stating that, and change the tag to verification-
failed-focal. In either case, without details of your testing we will
not be able to proceed.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance for helping!

N.B. The updated package will be released to -updates after the bug(s)
fixed by this package have been verified and the package has been in
-proposed for a minimum of 7 days.

** Tags added: verification-needed verification-needed-focal

** Package changed: grub2 (Ubuntu) => grub2.04-signed (Ubuntu)

** Changed in: grub2.04-signed (Ubuntu Focal)
   Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912264

Title:
  Provide grub 2.04 EFI backport on bionic

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2.04-signed/+bug/1912264/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic

2021-02-01 Thread Dimitri John Ledkov
** Description changed:

  [Impact]
  
   * Provide grub 2.04 backport to bionic for improved TPM support.
  
  [Test Case]
  
   * Boot to bionic EFI amd64 or arm64
  
   * If /boot/efi/EFI/ubuntu does not exist, execute
  
   on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot
   on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot
  
  and reboot
  
   * Install grub2.04-signed on bionic amd64 or arm64
  
   * Reboot, check that echo ${package_version} shows 2.04
  
   * Upgrade to focal
  
   * Observer that upgrade is correct and grub2.04-signed is now a dummy
  transitional package
  
  [Where problems could occur]
  
   * One must be able to remove grub2.04-signed & downgrade back to grub
  2.02 based -bin and -signed packages. And binaries in /boot must be
  updated.
  
   * One must be able to mix userspace grub packages tooling from
  release/security/updates/proposed, whilst keeping grub2.04-signed
  installed.
  
   * One must be upgraded to stock grub2.04 -bin / -signed packages upon
  dist-upgrade to focal.
  
  [Other Info]
  
   * Targetted to be installed by default on some cloud images.
  
  Test packages available from this bileto PPA https://launchpad.net/~ci-
  train-ppa-service/+archive/ubuntu/4413/+packages
+ 
+ NEW queue:
+ 
https://launchpad.net/ubuntu/focal/+queue?queue_state=0_text=grub2.04-signed
+ 
+ 
+ 
https://launchpad.net/ubuntu/bionic/+queue?queue_state=0_text=grub2.04-signed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912264

Title:
  Provide grub 2.04 EFI backport on bionic

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic

2021-02-01 Thread Dimitri John Ledkov
** Changed in: grub2 (Ubuntu Bionic)
   Status: New => In Progress

** Changed in: grub2 (Ubuntu Focal)
   Status: New => In Progress

** Description changed:

  [Impact]
  
   * Provide grub 2.04 backport to bionic for improved TPM support.
  
  [Test Case]
  
   * Boot to bionic EFI amd64 or arm64
  
   * If /boot/efi/EFI/ubuntu does not exist, execute
  
   on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot
   on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot
  
  and reboot
  
   * Install grub2.04-signed on bionic amd64 or arm64
  
   * Reboot, check that echo ${package_version} shows 2.04
  
   * Upgrade to focal
  
   * Observer that upgrade is correct and grub2.04-signed is now a dummy
  transitional package
  
  [Where problems could occur]
  
   * One must be able to remove grub2.04-signed & downgrade back to grub
  2.02 based -bin and -signed packages. And binaries in /boot must be
  updated.
  
   * One must be able to mix userspace grub packages tooling from
  release/security/updates/proposed, whilst keeping grub2.04-signed
  installed.
  
   * One must be upgraded to stock grub2.04 -bin / -signed packages upon
  dist-upgrade to focal.
  
  [Other Info]
  
   * Targetted to be installed by default on some cloud images.
+ 
+ Test packages available from this bileto PPA https://launchpad.net/~ci-
+ train-ppa-service/+archive/ubuntu/4413/+packages

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912264

Title:
  Provide grub 2.04 EFI backport on bionic

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic

2021-01-28 Thread Dimitri John Ledkov
** Description changed:

  [Impact]
  
   * Provide grub 2.04 backport to bionic for improved TPM support.
  
  [Test Case]
  
-  * Boot to bionic EFI amd64 or arm64
+  * Boot to bionic EFI amd64 or arm64
  
   * If /boot/efi/EFI/ubuntu does not exist, execute
  
   on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot
   on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot
  
+  * Check which grub*.efi files are in /boot/efi
+ 
   * Install grub2.04-signed on bionic amd64 or arm64
  
-  * Reboot, check that echo ${package_version} shows 2.04
+  * Check that grub*.efi files in /boot/efi changed, and match those
+ shipped by the grub2.04-signed package.
+ 
+  * Reboot, check that echo ${package_version} shows 2.04 in grub
+ console, or that boot is successful if there is no console access at
+ grub time.
  
   * Upgrade to focal
  
   * Observer that upgrade is correct and grub2.04-signed is now a dummy
  transitional package
+ 
+  * Check that grub*.efi files in /boot/efi now match those shipped by
+ the grub-efi-*-signed package
  
  [Where problems could occur]
  
   * One must be able to remove grub2.04-signed & downgrade back to grub
  2.02 based -bin and -signed packages. And binaries in /boot must be
  updated.
  
   * One must be able to mix userspace grub packages tooling from
  release/security/updates/proposed, whilst keeping grub2.04-signed
  installed.
  
   * One must be upgraded to stock grub2.04 -bin / -signed packages upon
  dist-upgrade to focal.
  
  [Other Info]
  
   * Targetted to be installed by default on some cloud images.

** Description changed:

  [Impact]
  
   * Provide grub 2.04 backport to bionic for improved TPM support.
  
  [Test Case]
  
   * Boot to bionic EFI amd64 or arm64
  
   * If /boot/efi/EFI/ubuntu does not exist, execute
  
   on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot
   on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot
  
-  * Check which grub*.efi files are in /boot/efi
+ and reboot
  
   * Install grub2.04-signed on bionic amd64 or arm64
  
-  * Check that grub*.efi files in /boot/efi changed, and match those
- shipped by the grub2.04-signed package.
- 
-  * Reboot, check that echo ${package_version} shows 2.04 in grub
- console, or that boot is successful if there is no console access at
- grub time.
+  * Reboot, check that echo ${package_version} shows 2.04
  
   * Upgrade to focal
  
   * Observer that upgrade is correct and grub2.04-signed is now a dummy
  transitional package
- 
-  * Check that grub*.efi files in /boot/efi now match those shipped by
- the grub-efi-*-signed package
  
  [Where problems could occur]
  
   * One must be able to remove grub2.04-signed & downgrade back to grub
  2.02 based -bin and -signed packages. And binaries in /boot must be
  updated.
  
   * One must be able to mix userspace grub packages tooling from
  release/security/updates/proposed, whilst keeping grub2.04-signed
  installed.
  
   * One must be upgraded to stock grub2.04 -bin / -signed packages upon
  dist-upgrade to focal.
  
  [Other Info]
  
   * Targetted to be installed by default on some cloud images.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912264

Title:
  Provide grub 2.04 EFI backport on bionic

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic

2021-01-28 Thread Dimitri John Ledkov
** Also affects: grub2 (Ubuntu Focal)
   Importance: Undecided
   Status: New

** Description changed:

  [Impact]
  
   * Provide grub 2.04 backport to bionic for improved TPM support.
  
  [Test Case]
  
-  * If /boot/efi/EFI/ubuntu does not exist, execute
+  * Boot to bionic EFI amd64 or arm64
  
-  on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot
-  on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot
+  * If /boot/efi/EFI/ubuntu does not exist, execute
+ 
+  on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot
+  on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot
  
   * Install grub2.04-signed on bionic amd64 or arm64
  
   * Reboot, check that echo ${package_version} shows 2.04
  
   * Upgrade to focal
  
   * Observer that upgrade is correct and grub2.04-signed is now a dummy
  transitional package
  
  [Where problems could occur]
  
   * One must be able to remove grub2.04-signed & downgrade back to grub
  2.02 based -bin and -signed packages. And binaries in /boot must be
  updated.
  
   * One must be able to mix userspace grub packages tooling from
  release/security/updates/proposed, whilst keeping grub2.04-signed
  installed.
  
   * One must be upgraded to stock grub2.04 -bin / -signed packages upon
  dist-upgrade to focal.
  
  [Other Info]
  
   * Targetted to be installed by default on some cloud images.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912264

Title:
  Provide grub 2.04 EFI backport on bionic

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic

2021-01-28 Thread Dimitri John Ledkov
** Also affects: grub2 (Ubuntu Bionic)
   Importance: Undecided
   Status: New

** Changed in: grub2 (Ubuntu)
   Status: New => Fix Released

** Description changed:

  [Impact]
  
-  * Provide grub 2.04 backport to bionic for improved TPM support.
+  * Provide grub 2.04 backport to bionic for improved TPM support.
  
  [Test Case]
  
-  * Install grub2.04-signed on bionic amd64 or arm64
+  * If /boot/efi/EFI/ubuntu does not exist, execute
  
-  * Reboot, check that echo ${package_version} shows 2.04
+  on amd64 $ sudo grub-install --target x86_64-efi --uefi-secure-boot
+  on arm64 $ sudo grub-install --target arm64-efi --uefi-secure-boot
  
-  * Upgrade to focal
+  * Install grub2.04-signed on bionic amd64 or arm64
  
-  * Observer that upgrade is correct and grub2.04-signed is now a dummy
+  * Reboot, check that echo ${package_version} shows 2.04
+ 
+  * Upgrade to focal
+ 
+  * Observer that upgrade is correct and grub2.04-signed is now a dummy
  transitional package
  
  [Where problems could occur]
  
-  * One must be able to remove grub2.04-signed & downgrade back to grub
+  * One must be able to remove grub2.04-signed & downgrade back to grub
  2.02 based -bin and -signed packages. And binaries in /boot must be
  updated.
  
-  * One must be able to mix userspace grub packages tooling from
+  * One must be able to mix userspace grub packages tooling from
  release/security/updates/proposed, whilst keeping grub2.04-signed
  installed.
  
-  * One must be upgraded to stock grub2.04 -bin / -signed packages upon
+  * One must be upgraded to stock grub2.04 -bin / -signed packages upon
  dist-upgrade to focal.
  
  [Other Info]
-  
-  * Targetted to be installed by default on some cloud images.
+ 
+  * Targetted to be installed by default on some cloud images.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912264

Title:
  Provide grub 2.04 EFI backport on bionic

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1912264] Re: Provide grub 2.04 EFI backport on bionic

2021-01-22 Thread Dimitri John Ledkov
Testing the demo package

1) downgrades fail

2) grub-install is not run upon a downgrade

3) upgrades to be tested.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912264

Title:
  Provide grub 2.04 EFI backport on bionic

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1912264/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs