Ideally I would want us to split fwupd into fwupd-unsigned & fwupd- unsigned, like we did with grub.
That way * fwupd will drop shipping .efi binaries * fwupd-unsigned will only build and submit .efi binary for signing * fwupd-signed will ship signed .efi binary with fwupd-unsigned & fwupd-signed binary copied to all distributions, with relaxed dependencies to not depend on a strict version of fwupd userspace things. Such that all releases share the very same build of fwupd.efi, just like all releases share the shim.efi and grub.efi nowadays. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1921539 Title: Add support for SBAT To manage notifications about this bug go to: https://bugs.launchpad.net/oem-priority/+bug/1921539/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
