ubiquity removes linux-signed during installation cleanup preventing (some) secureboot machines from booting
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ubuntu CD Images |
Fix Released
|
Critical
|
Colin Watson | ||
livecd-rootfs (Ubuntu) |
Fix Released
|
Critical
|
Colin Watson | ||
Quantal |
Fix Released
|
Critical
|
Colin Watson | ||
ubiquity (Ubuntu) |
Fix Released
|
Critical
|
Colin Watson | ||
Quantal |
Fix Released
|
Critical
|
Colin Watson | ||
ubuntu-defaults-builder (Ubuntu) |
Fix Released
|
High
|
Colin Watson | ||
Quantal |
Fix Released
|
High
|
Colin Watson |
Bug Description
The desktop images properly contain both unsigned and signed kernels and boot from the signed one.
One would expect the installer to keep the signed image on secureboot systems and remove the unsigned one, however it's currently doing the opposite leading to non-bootable systems for those requiring the kernel to be signed.
Relevant logs (from IRC):
08:46 < stgraber> cjwatson: /var/lib/
08:47 < stgraber> cjwatson: /var/log/syslog: http://
08:47 < stgraber> cjwatson: check-kernel with -x: http://
08:53 < stgraber> cjwatson: debug log: http://
09:04 < stgraber> cjwatson: http://
Changed in ubiquity (Ubuntu Quantal): | |
status: | New → Triaged |
importance: | Undecided → Critical |
milestone: | none → ubuntu-12.10 |
Changed in ubiquity (Ubuntu Quantal): | |
assignee: | nobody → Colin Watson (cjwatson) |
status: | Triaged → In Progress |
description: | updated |
Changed in ubuntu-defaults-builder (Ubuntu Quantal): | |
status: | New → In Progress |
importance: | Undecided → High |
assignee: | nobody → Colin Watson (cjwatson) |
milestone: | none → ubuntu-12.10 |
Changed in livecd-rootfs (Ubuntu Quantal): | |
status: | New → In Progress |
importance: | Undecided → Critical |
assignee: | nobody → Colin Watson (cjwatson) |
milestone: | none → ubuntu-12.10 |
Changed in ubuntu-cdimage: | |
status: | New → In Progress |
importance: | Undecided → Critical |
assignee: | nobody → Colin Watson (cjwatson) |
This bug was fixed in the package livecd-rootfs - 2.93
---------------
livecd-rootfs (2.93) quantal; urgency=low
* Revert binary/ $INITFS/ kernel- $FLAVOUR to the unsigned kernel, and link $INITFS/ kernel- $FLAVOUR. efi.signed instead
signed kernels to binary/
(LP: #1067659).
-- Colin Watson <email address hidden> Wed, 17 Oct 2012 11:48:47 +0100