Previously we decided that ESP should be mounted with umask=0077
See https://bugs.launchpad.net/ubuntu/+source/partman-efi/+bug/1390183
This is also documented in https://wiki.ubuntu.com/FSTAB
However, in GCE instance /boot/efi is not mounted with umask=0077 fstab is:
LABEL=cloudimg-rootfs / ext4 defaults 0 0 LABEL=UEFI /boot/efi vfat defaults 0 0
And in mount options are: (rw,relatime,fmask=0022,dmask=0022,codepage=437,iocharset=iso8859-1,shortname=mixed,errors=remount-ro)
fstab should be fixed to specify "umask=0077" instead of "defaults" for the ESP partition
Previously we decided that ESP should be mounted with umask=0077
See https:/ /bugs.launchpad .net/ubuntu/ +source/ partman- efi/+bug/ 1390183
This is also documented in https:/ /wiki.ubuntu. com/FSTAB
However, in GCE instance /boot/efi is not mounted with umask=0077
fstab is:
LABEL=cloudimg- rootfs / ext4 defaults 0 0
LABEL=UEFI /boot/efi vfat defaults 0 0
And in mount options are: fmask=0022, dmask=0022, codepage= 437,iocharset= iso8859- 1,shortname= mixed,errors= remount- ro)
(rw,relatime,
fstab should be fixed to specify "umask=0077" instead of "defaults" for the ESP partition