Bug#931064: unblock: grub2/2.02+dfsg1-20

[Cyril Brulebois]

Ivo De Decker  (2019-06-25):
> Control: tags -1 confirmed d-i
> 
> Hi,
> 
> On Tue, Jun 25, 2019 at 01:33:50PM +0100, Steve McIntyre wrote:
> > Subject: unblock: grub2/2.02+dfsg1-20
> 
> Unblocked. Still needs the unblock u-deb (kibi Cc'ed).

Right, we've discussed this while we were releasing, no objections.


Cheers,
-- 
Cyril Brulebois (k...@debian.org)
D-I release manager -- Release team member -- Freelance Consultant


signature.asc
Description: PGP signature

Bug#931064: unblock: grub2/2.02+dfsg1-20

[Ivo De Decker]

Control: tags -1 confirmed d-i

Hi,

On Tue, Jun 25, 2019 at 01:33:50PM +0100, Steve McIntyre wrote:
> Subject: unblock: grub2/2.02+dfsg1-20

Unblocked. Still needs the unblock u-deb (kibi Cc'ed).

Thanks,

Ivo

Bug#931064: unblock: grub2/2.02+dfsg1-20

[Steve McIntyre]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package grub2

While testing the Buster d-i RC2 build yesterday, I realised that we
hadn't *quite* finished all the packaging changes for Secure Boot. At
the moment, only the signed grub packages on amd64 Recommend:
shim-signed, but we also want that for i386 and arm64 too, as this
Recommend: is what causes shim-signed etc. to be pulled in at
installation time.

At the point when we first did this signing-template work, we didn't
*have* a shim-signed package on the other arches, so it didn't make
sense at the time.

I've made a tiny 1-line patch to just the signing-template and
uploaded. Ansgar says he'll prod the signing queue tonight to make the
-signed packages appear then.

Here's the trivial debdiff, excluding some noise in .bzrignore and
.gitignore files:

diff -Nru --exclude '.*ignore' grub2-2.02+dfsg1/debian/changelog 
grub2-2.02+dfsg1/debian/changelog
--- grub2-2.02+dfsg1/debian/changelog   2019-06-14 19:04:01.0 +0100
+++ grub2-2.02+dfsg1/debian/changelog   2019-06-25 10:11:12.0 +0100
@@ -1,3 +1,13 @@
+grub2 (2.02+dfsg1-20) unstable; urgency=medium
+
+  [ Steve McIntyre ]
+  * Make all the signed EFI arches have a Recommends: from
+grub-efi-ARCH-signed to shim-signed, not just amd64.
+Closes: #931038
+  * Add myself to Uploaders
+
+ -- Steve McIntyre <93...@debian.org>  Tue, 25 Jun 2019 10:11:12 +0100
+
 grub2 (2.02+dfsg1-19) unstable; urgency=medium
 
   [ Colin Watson ]
diff -Nru --exclude '.*ignore' grub2-2.02+dfsg1/debian/control 
grub2-2.02+dfsg1/debian/control
--- grub2-2.02+dfsg1/debian/control 2019-06-14 19:04:01.0 +0100
+++ grub2-2.02+dfsg1/debian/control 2019-06-25 10:09:06.0 +0100
@@ -2,7 +2,7 @@
 Section: admin
 Priority: optional
 Maintainer: GRUB Maintainers 
-Uploaders: Felix Zielcke , Jordi Mallach , 
Colin Watson , Ian Campbell 
+Uploaders: Felix Zielcke , Jordi Mallach , 
Colin Watson , Ian Campbell , Steve 
McIntyre <93...@debian.org>
 Build-Depends: debhelper (>= 10~),
  patchutils,
  python,
diff -Nru --exclude '.*ignore' 
grub2-2.02+dfsg1/debian/signing-template/control.in 
grub2-2.02+dfsg1/debian/signing-template/control.in
--- grub2-2.02+dfsg1/debian/signing-template/control.in 2019-06-14 
19:04:01.0 +0100
+++ grub2-2.02+dfsg1/debian/signing-template/control.in 2019-06-25 
10:08:26.0 +0100
@@ -12,7 +12,7 @@
 Package: @pkg_signed@
 Architecture: @arch@
 Depends: grub-common (= @version_binary@)
-Recommends: shim-signed [amd64]
+Recommends: shim-signed
 Built-Using: grub2 (= @version_binary@)
 Description: GRand Unified Bootloader, version 2 (@arch@ UEFI signed by Debian)
  GRUB is a portable, powerful bootloader.  This version of GRUB is based on a


unblock grub2/2.02+dfsg1-20
unblock grub-efi-amd64-signed/1+2.02+dfsg1+20
unblock grub-efi-arm64-signed/1+2.02+dfsg1+20
unblock grub-efi-ia32-signed/1+2.02+dfsg1+20

-- System Information:
Debian Release: 10.0
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled