[MIR] edk2
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
edk2 (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
[Availability]
Pending upload of 0~20160408 upstream snapshot release (in progress: http://
[Rationale]
edk2 provides EFI ROM images to be used by KVM VMs. On x86 this can be used as an alternative to seabios. On arm64, however, there is no "seabios" option - edk2 is the *only* way to boot an arm64 guest using the kernel/ramdisk configured in the image. Without edk2, users have to manually extract the kernel/
[Security]
edk2 had a couple of CVEs assigned in 2014: CVE-2014-4859, CVE-2014-4860, but it looks like those were the only 2.
[Quality assurance]
The binary packages don't require any configuration - they're basically just providing data files that can optionally be used by QEMU.
[Dependencies]
All build deps are in main, and all produced binary packages have no runtime dependencies.
[Standards compliance]
EDK2 is the sample implementation for UEFI from Intel - de facto standards-
[Maintenance]
Canonical supports OpenStack on arm64, for which this is a key component. Linaro is actively maintaining the virt bits upstream, and Canonical's HWE and Foundations team are maintaining the package for that purpose.
[Background information]
Changed in edk2 (Ubuntu): | |
assignee: | nobody → Jamie Strandboge (jdstrand) |
Changed in edk2 (Ubuntu): | |
assignee: | Jamie Strandboge (jdstrand) → Ubuntu Security Team (ubuntu-security) |
description: | updated |
Changed in edk2 (Ubuntu): | |
assignee: | Christian Ehrhardt (paelzer) → nobody |
Team subscriber: formally, this should be ubuntu-server, alongside qemu and seabios. In practice, this package sees somewhat active maintenance from other quarters (Foundations, Server Enablement, Launchpad) due to its rather central position in our cloud-on-arm64 story.