grub2-signed depends on grub2-common

[Dimitri John Ledkov]

[Impact]

 * one-grub has loosed the dependencies between src:grub2-signed and src:grub2, specifically grub2-common. However the modules in grub modules built by src:grbu2-unsigned require a high enough version of grub2-common with support for R_X86_64_PLT32 relocations. Generate depends that are high enough, for older releases.

Otherwise users that have grub-efi-amd64-signed installed may get errors upon trying to configure the package from `grub-install` unable to handle unknown relocation.

[Test Plan]

 * Disable -proposed

 * Install grub-efi-amd64-signed

 * Enable -proposed

 * Install grub-efi-amd64-signed (again)

 * Observe that not only grub-efi-amd64-signed is upgraded, but also that new version of grub2-common are upgraded too, on bionic and earlier series.

[Where problems could occur]

 * As one-grub evolves, similar dep updates may be required in the future again. Thus every one-grub update should be tested across all releases prior to upload into -proposed.

[Other Info]

 * This bug also reported at https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1917509

[Launchpad Janitor (janitor)]

This bug was fixed in the package grub2-signed - 1.167

---------------
grub2-signed (1.167) hirsute; urgency=medium

  * grub-efi-amd64-signed: add depends on grub2-common with support for
    R_X86_64_PLT32 relocations. LP: #1920008

 -- Dimitri John Ledkov <email address hidden> Thu, 18 Mar 2021 11:17:14 +0000

[Steve Langasek (vorlon)]

Hello Dimitri, or anyone else affected,

Accepted grub2-signed into groovy-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/grub2-signed/1.167 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-groovy to verification-done-groovy. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-groovy. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Steve Langasek (vorlon)]

Hello Dimitri, or anyone else affected,

Accepted grub2-signed into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/grub2-signed/1.167 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-focal to verification-done-focal. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-focal. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Steve Langasek (vorlon)]

Hello Dimitri, or anyone else affected,

Accepted grub2-signed into bionic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/grub2-signed/1.167~18.04.0 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-bionic to verification-done-bionic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-bionic. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Steve Langasek (vorlon)]

Hello Dimitri, or anyone else affected,

Accepted grub2-signed into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/grub2-signed/1.167~16.04.0 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-xenial to verification-done-xenial. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-xenial. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Łukasz Zemczak (sil2100)]

Hello Dimitri, or anyone else affected,

Accepted grub2-signed into bionic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/grub2-signed/1.167~18.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-bionic to verification-done-bionic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-bionic. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Łukasz Zemczak (sil2100)]

Hello Dimitri, or anyone else affected,

Accepted grub2-signed into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/grub2-signed/1.167~16.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-xenial to verification-done-xenial. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-xenial. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Dimitri John Ledkov (xnox)]

In xenial chroot, without proposed, installed grub-efi-amd64-signed

# dpkg-query -W | grep grub
grub-common 2.02~beta2-36ubuntu3.29
grub-efi-amd64 2.02~beta2-36ubuntu3.29
grub-efi-amd64-bin 2.02~beta2-36ubuntu3.29
grub-efi-amd64-signed 1.66.29+2.02~beta2-36ubuntu3.29
grub2-common 2.02~beta2-36ubuntu3.29

Enable -proposed, and try to install grub-efi-amd64-signed, alone (no full-upgrade)

# apt install grub-efi-amd64-signed
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
  grub-common grub-efi-amd64 grub-efi-amd64-bin grub2-common
Suggested packages:
  multiboot-doc grub-emu xorriso desktop-base console-setup
Recommended packages:
  os-prober secureboot-db
The following packages will be upgraded:
  grub-common grub-efi-amd64 grub-efi-amd64-bin grub-efi-amd64-signed grub2-common
5 upgraded, 0 newly installed, 0 to remove and 82 not upgraded.
Need to get 3473 kB of archives.
After this operation, 6041 kB of additional disk space will be used.
Do you want to continue? [Y/n]

The new grub2-common is pulled in. Horay.

Test that grub utils work with one grub

$ grub-mkimage --verbose -O x86_64-efi -o foo
...
lots of text

The image is successfully created.

[Dimitri John Ledkov (xnox)]

In bionic chroot, without proposed, installed grub-efi-amd64-signed

# dpkg-query -W | grep grub
grub-common 2.02-2ubuntu8.21
grub-efi-amd64 2.02-2ubuntu8.21
grub-efi-amd64-bin 2.02-2ubuntu8.21
grub-efi-amd64-signed 1.93.24+2.02-2ubuntu8.21
grub2-common 2.02-2ubuntu8.21

Enable -proposed, and try to install grub-efi-amd64-signed, alone (no full-upgrade)

# apt install grub-efi-amd64-signed
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
  gnupg-agent libssl1.0.0 multiarch-support
Use 'apt autoremove' to remove them.
The following additional packages will be installed:
  grub-common grub-efi-amd64 grub-efi-amd64-bin grub2-common
Suggested packages:
  multiboot-doc grub-emu xorriso desktop-base console-setup
The following packages will be upgraded:
  grub-common grub-efi-amd64 grub-efi-amd64-bin grub-efi-amd64-signed grub2-common
5 upgraded, 0 newly installed, 0 to remove and 110 not upgraded.
Need to get 3561 kB of archives.
After this operation, 6137 kB of additional disk space will be used.
Do you want to continue?

Horay, grub2-common is being upgraded.

$ grub-mkimage -O x86_64-efi -o foo -p /boot/grub --verbose
...
lots of text

The image is successfully created.

[Dimitri John Ledkov (xnox)]

On focal:

# dpkg-query -W | grep grub
grub-common 2.04-1ubuntu26.9
grub-efi-amd64 2.04-1ubuntu26.9
grub-efi-amd64-bin 2.04-1ubuntu26.9
grub-efi-amd64-signed 1.142.11+2.04-1ubuntu26.9
grub2-common 2.04-1ubuntu26.9

grub2-common from release is good enough for one grub (it is same major series).

Hence installing onegrub doesn't need to upgrade grub2-common

# apt install grub-efi-amd64-signed
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
  grub-efi-amd64 grub-efi-amd64-bin
Recommended packages:
  efibootmgr secureboot-db
The following packages will be upgraded:
  grub-efi-amd64 grub-efi-amd64-bin grub-efi-amd64-signed
3 upgraded, 0 newly installed, 0 to remove and 14 not upgraded.
Need to get 1256 kB of archives.
After this operation, 351 kB of additional disk space will be used.
Do you want to continue? [Y/n]

grub-mkimage -O x86_64-efi -o foo -p /boot/grub --verbose; works

and if i choose to upgrade grub-common too, it also still works.

[Dimitri John Ledkov (xnox)]

Similar on groovy

# dpkg-query -W | grep grub
grub-common 2.04-1ubuntu35.4
grub-efi-amd64 2.04-1ubuntu35.4
grub-efi-amd64-bin 2.04-1ubuntu35.4
grub-efi-amd64-signed 1.155.4+2.04-1ubuntu35.4
grub2-common 2.04-1ubuntu35.4

# apt install grub-efi-amd64-signed
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
  grub-efi-amd64 grub-efi-amd64-bin
Recommended packages:
  efibootmgr secureboot-db
The following packages will be upgraded:
  grub-efi-amd64 grub-efi-amd64-bin grub-efi-amd64-signed
3 upgraded, 0 newly installed, 0 to remove and 144 not upgraded.
Need to get 1256 kB of archives.
After this operation, 356 kB of additional disk space will be used.
Do you want to continue?

grub-mkimage -O x86_64-efi -o foo -p /boot/grub --verbose; works

and if i choose to upgrade grub-common too, it also still works.

[Launchpad Janitor (janitor)]

This bug was fixed in the package grub2-signed - 1.167

---------------
grub2-signed (1.167) hirsute; urgency=medium

  * grub-efi-amd64-signed: add depends on grub2-common with support for
    R_X86_64_PLT32 relocations. LP: #1920008

 -- Dimitri John Ledkov <email address hidden> Thu, 18 Mar 2021 11:17:14 +0000

[Łukasz Zemczak (sil2100)]

The verification of the Stable Release Update for grub2-signed has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

[Eugenio Perea (eugenio-perea)]

Hi. I got here through the bug link on Software Updater. I apologize if this is not the place to report this. I'm facing an unmet dependencies problem:
--
grub-efi-amd64-signed: Depends: grub2-common (>= 2.02~beta2-36ubuntu3.31) but 2.04-1ubuntu35.6 is to be installed
--
It says equal or greater than 2.02, and the proposed package is 2.04, so it should be accepted, but it's not. Any ideas on how to proceed?

[Launchpad Janitor (janitor)]

This bug was fixed in the package grub2-signed - 1.167

---------------
grub2-signed (1.167) hirsute; urgency=medium

  * grub-efi-amd64-signed: add depends on grub2-common with support for
    R_X86_64_PLT32 relocations. LP: #1920008

 -- Dimitri John Ledkov <email address hidden> Thu, 18 Mar 2021 11:17:14 +0000

[Launchpad Janitor (janitor)]

This bug was fixed in the package grub2-signed - 1.167~16.04.1

---------------
grub2-signed (1.167~16.04.1) xenial; urgency=medium

  * Use debhelper-compat 9 for ease of SRUs to Bionic and earlier. LP:
    #1920008

grub2-signed (1.167~16.04.0) xenial; urgency=medium

  * grub-efi-amd64-signed: add depends on grub2-common with support for
    R_X86_64_PLT32 relocations. LP: #1920008

 -- Dimitri John Ledkov <email address hidden> Tue, 23 Mar 2021 11:01:58 +0000

[Launchpad Janitor (janitor)]

This bug was fixed in the package grub2-signed - 1.167~18.04.1

---------------
grub2-signed (1.167~18.04.1) bionic; urgency=medium

  * Use debhelper-compat 9 for ease of SRUs to Bionic and earlier. LP:
    #1920008

grub2-signed (1.167~18.04.0) bionic; urgency=medium

  * grub-efi-amd64-signed: add depends on grub2-common with support for
    R_X86_64_PLT32 relocations. LP: #1920008

 -- Dimitri John Ledkov <email address hidden> Tue, 23 Mar 2021 11:01:58 +0000