Public bug reported:
What happens
------------
I tested today's daily Ubuntu GNOME yakkety installer on a computer with Secure
Boot enabled.
On the "Preparing to install Ubuntu" screen, these are the default options:
- Download updates (unchecked and active)
- Install third party software (unchecked and active)
- Turn off Secure Boot (checked and inactive unless the above box is checked)
- Secure Boot password (inactive unless both Install third party software is
checked)
Quit Back Continue (inactive unless either Turn off Secure Boot is
unchecked or a good password is entered)
Screenshot attached.
If "Install third party software" is checked, "Turn off Secure Boot" can
be unchecked and the Continue button is still present. This should not
be allowed according to the text "Installing third-party drivers
requires turning off Secure Boot."
What should happen
------------------
I think the workflow needs to be re-examined by the Design team.
1. Secure Boot should be enabled by default (so the box should be
unchecked). See bug 1612450.
2. I think the dependency is in the wrong order. "Install third party
software" should be a dependency of disabling Secure Boot. In other
words, "Install third party software" should be indented and below the
Secure Boot section.
Why should we allow disabling Secure Boot during the install without
checking the "Install third party software option? For example, I
believe disabling Secure Boot is required to use VirtualBox's kernel
drivers. I don't think Ubuntu currently off a graphical way to disable
Secure Boot except in the installer.
3. The "Install third party software" box should only be active only if
Turn off Secure Boot is enabled and an acceptable password is entered.
If either of those change, "Install third party software" should be both
inactive and unchecked.
I think fixing #3 which depends on #2 fixes the Continue bug logic error
from b. above.
Since #2 and #3 deviate from the design spec, this will need Design Team
input.
ProblemType: Bug
DistroRelease: Ubuntu 16.10
Package: ubiquity 16.10.7
ProcVersionSignature: Ubuntu 4.4.0-34.53-generic 4.4.15
Uname: Linux 4.4.0-34-generic x86_64
ApportVersion: 2.20.3-0ubuntu5
Architecture: amd64
CasperVersion: 1.376
CurrentDesktop: GNOME
Date: Thu Aug 11 22:03:53 2016
InstallCmdLine: BOOT_IMAGE=/casper/vmlinuz.efi
file=/cdrom/preseed/ubuntu-gnome.seed boot=casper quiet splash ---
LiveMediaBuild: Ubuntu-GNOME 16.10 "Yakkety Yak" - Alpha amd64 (20160811)
ProcEnviron:
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: ubiquity
UpgradeStatus: No upgrade log present (probably fresh install)
** Affects: ubiquity (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug ubiquity-16.10.7 ubuntu-gnome yakkety
** Attachment added: "installer-inactive-continue-button.png"
https://bugs.launchpad.net/bugs/1612449/+attachment/4719379/+files/installer-inactive-continue-button.png
** Summary changed:
- continue secure boot
+ Preparing to Install Ubuntu's continue button disabled by default
** Summary changed:
- Preparing to Install Ubuntu's continue button disabled by default
+ Install third party software should be dependent on Secure Boot being disabled
** Description changed:
What happens
------------
I tested today's daily Ubuntu GNOME yakkety installer on a computer with
Secure Boot enabled.
On the "Preparing to install Ubuntu" screen, these are the default options:
- Download updates (unchecked and active)
- Install third party software (unchecked and active)
- - Turn off Secure Boot (checked and inactive unless the above box is
checked)
- - Secure Boot password (inactive unless both Install third party software
is checked)
+ - Turn off Secure Boot (checked and inactive unless the above box is
checked)
+ - Secure Boot password (inactive unless both Install third party software
is checked)
Quit Back Continue (inactive unless either Turn off Secure Boot is
unchecked or a good password is entered)
Screenshot attached.
- Some bugs:
- a. The Continue button is inactive by default. Enabling the Continue button
requires enabling "Install third party software" and disabling "Turn off Secure
Boot". This can be fixed by disabling "Turn off Secure Boot" by default. This
matches the design spec found at https://wiki.ubuntu.com/Ubiquity
- b. If "Install third party software" is checked, "Turn off Secure Boot" can
be unchecked and the Continue button is still present. This should not be
allowed according to the text "Installing third-party drivers requires turning
off Secure Boot."
-
+ If "Install third party software" is checked, "Turn off Secure Boot" can
+ be unchecked and the Continue button is still present. This should not
+ be allowed according to the text "Installing third-party drivers
+ requires turning off Secure Boot."
What should happen
------------------
I think the workflow needs to be re-examined by the Design team.
1. Secure Boot should be enabled by default (so the box should be
- unchecked).
+ unchecked). See bug 1612450.
2. I think the dependency is in the wrong order. "Install third party
software" should be a dependency of disabling Secure Boot. In other
words, "Install third party software" should be indented and below the
Secure Boot section.
Why should we allow disabling Secure Boot during the install without
checking the "Install third party software option? For example, I
believe disabling Secure Boot is required to use VirtualBox's kernel
drivers. I don't think Ubuntu currently off a graphical way to disable
Secure Boot except in the installer.
3. The "Install third party software" box should only be active only if
Turn off Secure Boot is enabled and an acceptable password is entered.
If either of those change, "Install third party software" should be both
inactive and unchecked.
I think fixing #3 which depends on #2 fixes the Continue bug logic error
from b. above.
Since #2 and #3 deviate from the design spec, this will need Design Team
input.
ProblemType: Bug
DistroRelease: Ubuntu 16.10
Package: ubiquity 16.10.7
ProcVersionSignature: Ubuntu 4.4.0-34.53-generic 4.4.15
Uname: Linux 4.4.0-34-generic x86_64
ApportVersion: 2.20.3-0ubuntu5
Architecture: amd64
CasperVersion: 1.376
CurrentDesktop: GNOME
Date: Thu Aug 11 22:03:53 2016
InstallCmdLine: BOOT_IMAGE=/casper/vmlinuz.efi
file=/cdrom/preseed/ubuntu-gnome.seed boot=casper quiet splash ---
LiveMediaBuild: Ubuntu-GNOME 16.10 "Yakkety Yak" - Alpha amd64 (20160811)
ProcEnviron:
- PATH=(custom, no user)
- XDG_RUNTIME_DIR=<set>
- LANG=en_US.UTF-8
- SHELL=/bin/bash
+ PATH=(custom, no user)
+ XDG_RUNTIME_DIR=<set>
+ LANG=en_US.UTF-8
+ SHELL=/bin/bash
SourcePackage: ubiquity
UpgradeStatus: No upgrade log present (probably fresh install)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1612449
Title:
Install third party software should be dependent on Secure Boot being
disabled
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubiquity/+bug/1612449/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
