Re: [Bug 1711203] Re: Deployments fail when Secure Boot enabled

2018-02-22 Thread Steve Langasek
On Fri, Feb 23, 2018 at 01:13:42AM -, Andres Rodriguez wrote: > > bladernr@critical-maas:/var/lib/maas/boot-resources/ > > current/bootloader/uefi/amd64$ > > ll > > total 2328 > > drwxr-xr-x 2 maas maas4096 Feb 22 17:34 ./ > > drwxr-xr-x 4 maas maas4096 Feb 22 17:34 ../ > > -rw-r--r-- 2

Re: [Bug 1711203] Re: Deployments fail when Secure Boot enabled

2018-02-22 Thread Andres Rodriguez
On Thu, Feb 22, 2018 at 7:55 PM, Jeff Lane wrote: > On Thu, Feb 22, 2018 at 6:28 PM, Steve Langasek > wrote: > > On Thu, Feb 22, 2018 at 11:06:51PM -, Jeff Lane wrote: > >> > Is /efi/ubuntu/grubx64.efi on your EFI System Partition definitely the > >> > Canonical-signed image from grub-efi-am

Re: [Bug 1711203] Re: Deployments fail when Secure Boot enabled

2018-02-22 Thread Jeff Lane
On Thu, Feb 22, 2018 at 6:28 PM, Steve Langasek wrote: > On Thu, Feb 22, 2018 at 11:06:51PM -, Jeff Lane wrote: >> > Is /efi/ubuntu/grubx64.efi on your EFI System Partition definitely the >> > Canonical-signed image from grub-efi-amd64-signed? > >> I presume so? dpkg says it is:They look the s

Re: [Bug 1711203] Re: Deployments fail when Secure Boot enabled

2018-02-22 Thread Andres Rodriguez
This brings a good point. What I didn’t test, which will do tomorrow, is what happens if I kill Maas and let the same system boot from disk. I wonder if it will boot. On Thu, Feb 22, 2018 at 6:20 PM Jeff Lane wrote: > > Is /efi/ubuntu/grubx64.efi on your EFI System Partition definitely the > > C

Re: [Bug 1711203] Re: Deployments fail when Secure Boot enabled

2018-02-22 Thread Steve Langasek
On Thu, Feb 22, 2018 at 11:06:51PM -, Jeff Lane wrote: > > Is /efi/ubuntu/grubx64.efi on your EFI System Partition definitely the > > Canonical-signed image from grub-efi-amd64-signed? > I presume so? dpkg says it is: > ubuntu@xwing:/boot/efi/EFI/ubuntu$ dpkg -S grubx64.efi > grub-efi-amd64-s

Re: [Bug 1711203] Re: Deployments fail when Secure Boot enabled

2018-02-22 Thread Steve Langasek
On Thu, Feb 22, 2018 at 08:45:17PM -, Jeff Lane wrote: > Can we please verify that with one of the original failing systems > (Cisco UCS C-240 M4) as well? > Because that supermicro system works, my Lenovo fails even with the > workaround (comments #48 and #49). Is /efi/ubuntu/grubx64.efi on

Re: [Bug 1711203] Re: Deployments fail when Secure Boot enabled

2017-12-05 Thread Ryan Harper
Reviewing @slangasek's notes > It's worth checking whether this problem > mysteriously resolves once linux-signed is being pulled in; if it does, > then it's possible we have a bug in grub (enforcing signature when it's > not supposed to) or simply a bug in firmware. It would appear that despite

Re: [Bug 1711203] Re: Deployments fail when Secure Boot enabled

2017-11-16 Thread Steve Langasek
On Thu, Nov 16, 2017 at 09:53:18PM -, Ryan Harper wrote: > No one in this thread has answered how MAAS or curtin > knows that it should install the -signed version of linux-image. It should *unconditionally* prefer the -signed version of linux-image. -- You received this bug notification bec

Re: [Bug 1711203] Re: Deployments fail when Secure Boot enabled

2017-11-16 Thread Ryan Harper
No one in this thread has answered how MAAS or curtin knows that it should install the -signed version of linux-image. Once that knowledge is passed on, we can work out if curtin can detect that or if maas can and specify which kernel package to use. On Thu, Nov 16, 2017 at 3:25 PM, Steve Langas