[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
The fix here breaks installing custom kernels, at least on xenial (dkms (2.2.0.3-2ubuntu11.7) xenial): the redirection of stdout was to there to fix a problem with dkms output contaminating debconf's input - see #292606 for details. To be specific, during package install (either via dpkg or apt-get) I'm now getting the following error from /usr/sbin /update-grub-legacy-ec2 which is run from /etc/kernel/postinst.d/x-grub- legacy-ec2 (after running /etc/kernel/postinst.d/dkms): 20 Unsupported command "*" (full line was " * dkms: running auto installation service for kernel ...") received from confmodule. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Released Status in dkms source package in Bionic: Fix Released Status in dkms source package in Cosmic: Fix Released Status in dkms source package in Disco: Fix Released Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. [Test Case] 1. Install any out-of-tree dkms packages (like bbswitch-dkms) 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" 3. Ensure SecureBoot is enabled 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state [Regression potential] Since this change will cause the output of dkms_autoinstaller to appear in the output of the kernel installs, this may surprise consumers of the dpkg log with its verbosity. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
This bug was fixed in the package dkms - 2.6.1-4ubuntu2.1 --- dkms (2.6.1-4ubuntu2.1) disco; urgency=medium * Do not invoke dkms_autoinstaller from /etc/kernel/header_postinst.d/dkms with redirection to /dev/null (LP: #1827697), this caused debconf dialog to not be shown. -- Julian Andres Klode Fri, 17 May 2019 12:56:47 +0200 ** Changed in: dkms (Ubuntu Xenial) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Released Status in dkms source package in Bionic: Fix Released Status in dkms source package in Cosmic: Fix Released Status in dkms source package in Disco: Fix Released Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. [Test Case] 1. Install any out-of-tree dkms packages (like bbswitch-dkms) 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" 3. Ensure SecureBoot is enabled 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state [Regression potential] Since this change will cause the output of dkms_autoinstaller to appear in the output of the kernel installs, this may surprise consumers of the dpkg log with its verbosity. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
This bug was fixed in the package dkms - 2.3-3ubuntu11.1 --- dkms (2.3-3ubuntu11.1) cosmic; urgency=medium * Do not invoke dkms_autoinstaller from /etc/kernel/header_postinst.d/dkms with redirection to /dev/null (LP: #1827697), this caused debconf dialog to not be shown. -- Julian Andres Klode Fri, 17 May 2019 12:56:47 +0200 ** Changed in: dkms (Ubuntu Disco) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Released Status in dkms source package in Bionic: Fix Released Status in dkms source package in Cosmic: Fix Released Status in dkms source package in Disco: Fix Released Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. [Test Case] 1. Install any out-of-tree dkms packages (like bbswitch-dkms) 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" 3. Ensure SecureBoot is enabled 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state [Regression potential] Since this change will cause the output of dkms_autoinstaller to appear in the output of the kernel installs, this may surprise consumers of the dpkg log with its verbosity. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
This bug was fixed in the package dkms - 2.3-3ubuntu9.3 --- dkms (2.3-3ubuntu9.3) bionic; urgency=medium * Do not invoke dkms_autoinstaller from /etc/kernel/header_postinst.d/dkms with redirection to /dev/null (LP: #1827697), this caused debconf dialog to not be shown. -- Julian Andres Klode Fri, 17 May 2019 12:56:47 +0200 ** Changed in: dkms (Ubuntu Bionic) Status: Fix Committed => Fix Released ** Changed in: dkms (Ubuntu Cosmic) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Released Status in dkms source package in Bionic: Fix Released Status in dkms source package in Cosmic: Fix Released Status in dkms source package in Disco: Fix Released Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. [Test Case] 1. Install any out-of-tree dkms packages (like bbswitch-dkms) 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" 3. Ensure SecureBoot is enabled 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state [Regression potential] Since this change will cause the output of dkms_autoinstaller to appear in the output of the kernel installs, this may surprise consumers of the dpkg log with its verbosity. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
This bug was fixed in the package dkms - 2.2.0.3-2ubuntu11.7 --- dkms (2.2.0.3-2ubuntu11.7) xenial; urgency=medium * Do not invoke dkms_autoinstaller from /etc/kernel/header_postinst.d/dkms with redirection to /dev/null (LP: #1827697), this caused debconf dialog to not be shown. -- Julian Andres Klode Fri, 17 May 2019 13:21:05 +0200 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Released Status in dkms source package in Bionic: Fix Released Status in dkms source package in Cosmic: Fix Released Status in dkms source package in Disco: Fix Released Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. [Test Case] 1. Install any out-of-tree dkms packages (like bbswitch-dkms) 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" 3. Ensure SecureBoot is enabled 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state [Regression potential] Since this change will cause the output of dkms_autoinstaller to appear in the output of the kernel installs, this may surprise consumers of the dpkg log with its verbosity. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
@juliank The reproduced dkms version on bionic is 2.3-3ubuntu9.2, while the verified version is 2.3-3ubuntu9.3. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Committed Status in dkms source package in Bionic: Fix Committed Status in dkms source package in Cosmic: Fix Committed Status in dkms source package in Disco: Fix Committed Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. [Test Case] 1. Install any out-of-tree dkms packages (like bbswitch-dkms) 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" 3. Ensure SecureBoot is enabled 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state [Regression potential] Since this change will cause the output of dkms_autoinstaller to appear in the output of the kernel installs, this may surprise consumers of the dpkg log with its verbosity. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
xenial: > Regression in autopkgtest for dahdi-linux (s390x): test log > Regression in autopkgtest for iscsitarget (armhf): test log I looked at those and they seem to be failing a lot for other uploads too, so do not seem to be regressions. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Committed Status in dkms source package in Bionic: Fix Committed Status in dkms source package in Cosmic: Fix Committed Status in dkms source package in Disco: Fix Committed Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. [Test Case] 1. Install any out-of-tree dkms packages (like bbswitch-dkms) 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" 3. Ensure SecureBoot is enabled 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state [Regression potential] Since this change will cause the output of dkms_autoinstaller to appear in the output of the kernel installs, this may surprise consumers of the dpkg log with its verbosity. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
@buo-ren-lin thanks! xenial: I verified that ubuntu11.6 was broken, and ubuntu11.7 is fine in the same way as the others. ** Tags removed: verification-needed verification-needed-xenial ** Tags added: verification-done verification-done-xenial -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Committed Status in dkms source package in Bionic: Fix Committed Status in dkms source package in Cosmic: Fix Committed Status in dkms source package in Disco: Fix Committed Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. [Test Case] 1. Install any out-of-tree dkms packages (like bbswitch-dkms) 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" 3. Ensure SecureBoot is enabled 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state [Regression potential] Since this change will cause the output of dkms_autoinstaller to appear in the output of the kernel installs, this may surprise consumers of the dpkg log with its verbosity. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
cosmic: Installed kernel header, got the hang; Updated dkms to -ubuntu11.1 from -ubuntu11; installed different kernel header, got prompt. Verifed. ** Tags removed: verification-needed-cosmic ** Tags added: verification-done-cosmic -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Committed Status in dkms source package in Bionic: Fix Committed Status in dkms source package in Cosmic: Fix Committed Status in dkms source package in Disco: Fix Committed Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. [Test Case] 1. Install any out-of-tree dkms packages (like bbswitch-dkms) 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" 3. Ensure SecureBoot is enabled 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state [Regression potential] Since this change will cause the output of dkms_autoinstaller to appear in the output of the kernel installs, this may surprise consumers of the dpkg log with its verbosity. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
disco: I reproduced the bug by installing linux headers -17-generic which hang and then upgrading dkms to 2.6.1-4ubuntu2.1 and installing linux-headers -16-generic (purging and reinstalling the 17 headers did nothing it seems, so, don't care ..) which had a working prompt. To "revoke" the key, run mokutil --revoke-import after a fresh setup and install of the module, before installing the header package. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Committed Status in dkms source package in Bionic: Fix Committed Status in dkms source package in Cosmic: Fix Committed Status in dkms source package in Disco: Fix Committed Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. [Test Case] 1. Install any out-of-tree dkms packages (like bbswitch-dkms) 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" 3. Ensure SecureBoot is enabled 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state [Regression potential] Since this change will cause the output of dkms_autoinstaller to appear in the output of the kernel installs, this may surprise consumers of the dpkg log with its verbosity. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
You have not stated the versions tested in bionic, hence the verification is not valid. Can you check that and state which versions you tested? One test run needs about 30 mins to an hour (install ubuntu in a VM, then try to reproduce), so if I can avoid one, that'd be great :) ** Tags removed: verification-needed-disco ** Tags added: verification-done-disco -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Committed Status in dkms source package in Bionic: Fix Committed Status in dkms source package in Cosmic: Fix Committed Status in dkms source package in Disco: Fix Committed Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. [Test Case] 1. Install any out-of-tree dkms packages (like bbswitch-dkms) 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" 3. Ensure SecureBoot is enabled 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state [Regression potential] Since this change will cause the output of dkms_autoinstaller to appear in the output of the kernel installs, this may surprise consumers of the dpkg log with its verbosity. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
** Description changed: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. + + [Test Case] + 1. Install any out-of-tree dkms packages (like bbswitch-dkms) + 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" + 3. Ensure SecureBoot is enabled + 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state + + [Regression potential] + Since this change will cause the output of dkms_autoinstaller to appear in the output of the kernel installs, this may surprise consumers of the dpkg log with its verbosity. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Committed Status in dkms source package in Bionic: Fix Committed Status in dkms source package in Cosmic: Fix Committed Status in dkms source package in Disco: Fix Committed Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. [Test Case] 1. Install any out-of-tree dkms packages (like bbswitch-dkms) 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" 3. Ensure SecureBoot is enabled 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state [Regression potential] Since this change will cause the output of dkms_autoinstaller to appear in the output of the kernel installs, this may surprise consumers of the dpkg log with its verbosity. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
@juliank To trigger the bug: 1. Install any out-of-tree dkms packages (like bbswitch-dkms) 2. Un-enroll keys from MOK, ensure `mokutil --test-key /var/lib/shim-signed/mok/MOK.der` command returns "/var/lib/shim-signed/mok/MOK.der is not enrolled" 3. Ensure SecureBoot is enabled 4. Install any linux-headers-${version}-generic packages that is currently not installed, verify if it stucks at configurating state -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Committed Status in dkms source package in Bionic: Fix Committed Status in dkms source package in Cosmic: Fix Committed Status in dkms source package in Disco: Fix Committed Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
I have applied the updates on bionic and can no longer reproduce it. ** Tags removed: verification-needed-bionic ** Tags added: verification-done-bionic -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Committed Status in dkms source package in Bionic: Fix Committed Status in dkms source package in Cosmic: Fix Committed Status in dkms source package in Disco: Fix Committed Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
The regressions in rdep autopkgtests are not caused by this upload, but also present in other runs: xenial: Regression in autopkgtest for dahdi-linux (s390x) Regression in autopkgtest for iscsitarget (armhf) Still can't actually verify the bug, as I can't trigger it. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Committed Status in dkms source package in Bionic: Fix Committed Status in dkms source package in Cosmic: Fix Committed Status in dkms source package in Disco: Fix Committed Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
Hello ๆๅไป(Buo-ren, or anyone else affected, Accepted dkms into disco-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/dkms/2.6.1-4ubuntu2.1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-disco to verification-done-disco. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-disco. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Changed in: dkms (Ubuntu Disco) Status: In Progress => Fix Committed ** Tags added: verification-needed verification-needed-disco ** Changed in: dkms (Ubuntu Cosmic) Status: In Progress => Fix Committed ** Tags added: verification-needed-cosmic -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: Fix Committed Status in dkms source package in Bionic: Fix Committed Status in dkms source package in Cosmic: Fix Committed Status in dkms source package in Disco: Fix Committed Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
This bug was fixed in the package dkms - 2.6.1-4ubuntu4 --- dkms (2.6.1-4ubuntu4) eoan; urgency=medium * Do not invoke dkms_autoinstaller from /etc/kernel/header_postinst.d/dkms with redirection to /dev/null (LP: #1827697), this caused debconf dialog to not be shown. -- Julian Andres Klode Fri, 17 May 2019 12:56:47 +0200 ** Changed in: dkms (Ubuntu Eoan) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Released Status in dkms source package in Xenial: In Progress Status in dkms source package in Bionic: In Progress Status in dkms source package in Cosmic: In Progress Status in dkms source package in Disco: In Progress Status in dkms source package in Eoan: Fix Released Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
Now it's fine, maybe changelog entry was broken and dpkg's error handling was crazy. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Committed Status in dkms source package in Xenial: In Progress Status in dkms source package in Bionic: In Progress Status in dkms source package in Cosmic: In Progress Status in dkms source package in Disco: In Progress Status in dkms source package in Eoan: Fix Committed Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
xenial I don't know what to do: It's all fine importing the patch into the package, but as soon as I add the changelog entry to debian/changelog, building fails with dpkg-source: info: using patch list from debian/patches/series patching file dkms_common.postinst Hunk #1 FAILED at 146. 1 out of 1 hunk FAILED dpkg-source: info: the patch has fuzz which is not allowed, or is malformed dpkg-source: info: if patch '666023.patch' is correctly applied by quilt, use 'quilt refresh' to update it dpkg-source: error: LC_ALL=C patch -t -F 0 -N -p1 -u -V never -E -b -B .pc/666023.patch/ --reject-file=- < dkms.orig.axFxWt/debian/patches/666023.patch subprocess returned exit status 1 ** Changed in: dkms (Ubuntu Eoan) Status: Triaged => Fix Committed ** Changed in: dkms (Ubuntu Disco) Status: Triaged => In Progress ** Changed in: dkms (Ubuntu Cosmic) Status: Triaged => In Progress ** Changed in: dkms (Ubuntu Bionic) Status: Triaged => In Progress ** Changed in: dkms (Ubuntu Xenial) Status: Triaged => In Progress -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Fix Committed Status in dkms source package in Xenial: In Progress Status in dkms source package in Bionic: In Progress Status in dkms source package in Cosmic: In Progress Status in dkms source package in Disco: In Progress Status in dkms source package in Eoan: Fix Committed Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
** Tags added: id-5cce6e8af572b90e81d1e5cf -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Triaged Status in dkms source package in Xenial: Triaged Status in dkms source package in Bionic: Triaged Status in dkms source package in Cosmic: Triaged Status in dkms source package in Disco: Triaged Status in dkms source package in Eoan: Triaged Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1827697] Re: Enroll key whiptail prompt blocks kernel header package upgrades
ok based on the process tree I've identified the source of the trouble, /etc/kernel/header_postinst.d/dkms invokes dkms_autoinstaller with >/dev/null. So this is a similar symptom to other bugs that have been fixed, but is a separate unfixed bug. Note that a workaround for this problem is to run 'sudo update- secureboot-policy --enroll-key' outside of apt. ** Also affects: dkms (Ubuntu) Importance: Undecided Status: New ** Also affects: dkms (Ubuntu Eoan) Importance: Undecided Status: New ** Also affects: shim-signed (Ubuntu Eoan) Importance: Undecided Status: New ** Also affects: dkms (Ubuntu Bionic) Importance: Undecided Status: New ** Also affects: shim-signed (Ubuntu Bionic) Importance: Undecided Status: New ** Also affects: dkms (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: shim-signed (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: dkms (Ubuntu Cosmic) Importance: Undecided Status: New ** Also affects: shim-signed (Ubuntu Cosmic) Importance: Undecided Status: New ** Also affects: dkms (Ubuntu Disco) Importance: Undecided Status: New ** Also affects: shim-signed (Ubuntu Disco) Importance: Undecided Status: New ** No longer affects: shim-signed (Ubuntu) ** No longer affects: shim-signed (Ubuntu Xenial) ** No longer affects: shim-signed (Ubuntu Bionic) ** No longer affects: shim-signed (Ubuntu Cosmic) ** No longer affects: shim-signed (Ubuntu Disco) ** No longer affects: shim-signed (Ubuntu Eoan) ** Changed in: dkms (Ubuntu Xenial) Importance: Undecided => High ** Changed in: dkms (Ubuntu Bionic) Importance: Undecided => High ** Changed in: dkms (Ubuntu Cosmic) Importance: Undecided => High ** Changed in: dkms (Ubuntu Disco) Importance: Undecided => High ** Changed in: dkms (Ubuntu Eoan) Importance: Undecided => High ** Changed in: dkms (Ubuntu Xenial) Status: New => Triaged ** Changed in: dkms (Ubuntu Bionic) Status: New => Triaged ** Changed in: dkms (Ubuntu Cosmic) Status: New => Triaged ** Changed in: dkms (Ubuntu Disco) Status: New => Triaged ** Changed in: dkms (Ubuntu Eoan) Status: New => Triaged -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to dkms in Ubuntu. https://bugs.launchpad.net/bugs/1827697 Title: Enroll key whiptail prompt blocks kernel header package upgrades Status in dkms package in Ubuntu: Triaged Status in dkms source package in Xenial: Triaged Status in dkms source package in Bionic: Triaged Status in dkms source package in Cosmic: Triaged Status in dkms source package in Disco: Triaged Status in dkms source package in Eoan: Triaged Bug description: I noticed that sometimes the system upgrade is blocked in the kernel header package's configure phase, in the process manager I found that it is blocked by the "Configuring Secure Boot" whiptail prompt started by `update-secureboot-policy --enroll-key` which doesn't surface to the terminal and hence not interactable. Refer the attached screenshot for the process status at the time. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1827697/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp