[Bug 1825128] Re: grub-efi-amd64-signed should depends on mokutil
** Tags added: foundation -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1825128 Title: grub-efi-amd64-signed should depends on mokutil To manage notifications about this bug go to: https://bugs.launchpad.net/oem-priority/+bug/1825128/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1825128] Re: grub-efi-amd64-signed should depends on mokutil
per code in ubiquity:/usr/share/grub-installer/grub-installer it install grub-efi-amd64-signed first, and then install shim-signed. (grub_package=grub-efi-amd64-signed as the code run to here.) === apt-install $grub_package || exit_code=$? case $grub_package in *-signed) apt-install shim-signed || true apt-install grub-pc || true ;; esac === -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1825128 Title: grub-efi-amd64-signed should depends on mokutil To manage notifications about this bug go to: https://bugs.launchpad.net/oem-priority/+bug/1825128/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1825128] Re: grub-efi-amd64-signed should depends on mokutil
shim-signed package has already depended on mokutil. When secureboot enabled, shim is needed and mokutil should be installed. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1825128 Title: grub-efi-amd64-signed should depends on mokutil To manage notifications about this bug go to: https://bugs.launchpad.net/oem-priority/+bug/1825128/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1825128] Re: grub-efi-amd64-signed should depends on mokutil
** Changed in: grub2-signed (Ubuntu) Status: Incomplete => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1825128 Title: grub-efi-amd64-signed should depends on mokutil To manage notifications about this bug go to: https://bugs.launchpad.net/oem-priority/+bug/1825128/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1825128] Re: grub-efi-amd64-signed should depends on mokutil
@Ivan, I update how grub-check-signatures use mokutils in bug description. Can you please check again? ** Description changed: - as turn on secure boot, we need mokutil. + as turn on secure boot, the postinst script to do configure will call + mokutils. if mokutils is not installed, it will fail. - the signed package is for secure boot. It should recommend mokutil so - that when dkms is installed, we can have it. + Base on that, maybe grub-efi-amd64-signed should depend on mokutils. + + The postinst script call /usr/share/grub/grub-check-signatures from + grub-common package. grub-check-signatures call mokutils to extract key + and use the key to check if then kernel is properly signed. ** Changed in: oem-priority Status: Won't Fix => Confirmed ** Changed in: oem-priority Assignee: (unassigned) => Yuan-Chen Cheng (ycheng-twn) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1825128 Title: grub-efi-amd64-signed should depends on mokutil To manage notifications about this bug go to: https://bugs.launchpad.net/oem-priority/+bug/1825128/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1825128] Re: grub-efi-amd64-signed should depends on mokutil
** Changed in: oem-priority Status: New => Won't Fix ** Changed in: grub2-signed (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1825128 Title: grub-efi-amd64-signed should depends on mokutil To manage notifications about this bug go to: https://bugs.launchpad.net/oem-priority/+bug/1825128/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1825128] Re: grub-efi-amd64-signed should depends on mokutil
** Changed in: oem-priority Importance: Critical => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1825128 Title: grub-efi-amd64-signed should depends on mokutil To manage notifications about this bug go to: https://bugs.launchpad.net/oem-priority/+bug/1825128/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1825128] Re: grub-efi-amd64-signed should depends on mokutil
This issue happens when installing grub-efi-amd64-signed while the image still using old mokutil so it is better to fix the issue directly in grub-efi-amd64-signed. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1825128 Title: grub-efi-amd64-signed should depends on mokutil To manage notifications about this bug go to: https://bugs.launchpad.net/oem-priority/+bug/1825128/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1825128] Re: grub-efi-amd64-signed should depends on mokutil
What does grub-check-signatures use mokutil for? It makes more sense mokutil depends on shim not grub. Can mokutil depend on shim package solve your issue? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1825128 Title: grub-efi-amd64-signed should depends on mokutil To manage notifications about this bug go to: https://bugs.launchpad.net/oem-priority/+bug/1825128/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1825128] Re: grub-efi-amd64-signed should depends on mokutil
per $4: grub-efi-amd64-signed's postinst will execute /usr/share/grub/grub- check-signatures when Secure Boot is on, and then it will execute mokutil no matter there is any DKMS or not. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1825128 Title: grub-efi-amd64-signed should depends on mokutil To manage notifications about this bug go to: https://bugs.launchpad.net/oem-priority/+bug/1825128/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1825128] Re: grub-efi-amd64-signed should depends on mokutil
** Changed in: oem-priority Importance: Undecided => Critical ** Tags added: hwe oem-priority -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1825128 Title: grub-efi-amd64-signed should depends on mokutil To manage notifications about this bug go to: https://bugs.launchpad.net/oem-priority/+bug/1825128/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
