It's not shipped in any package right now, that wasn't the point for the time being (and this is why I'm setting things back to Triaged).
The gsbx64.efi.signed file here: http://archive.ubuntu.com/ubuntu/dists/zesty/main/uefi/grub2-amd64/current/ ... is the file you want; but for now there is no process that consumes that file to install it, even if it was provided in grub2-signed. This is *not* a final product and *does* need additional changes to be used as such: any grub configuration will need to replace any 'linux' and 'initrd' calls with 'linuxefi' and 'initrdefi'. This is just a temporary workaround to provide a way to enforce Secure Boot in the cases where this is needed. ** Changed in: grub2 (Ubuntu Zesty) Status: Fix Released => Triaged ** Changed in: grub2-signed (Ubuntu Zesty) Status: Fix Released => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1401532 Title: GRUB's Secure Boot implementation loads unsigned kernel without warning To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1401532/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
