shim can end up being removed
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
shim-signed (Ubuntu) |
Fix Released
|
Undecided
|
Julian Andres Klode | ||
Bionic |
Fix Released
|
Undecided
|
Unassigned | ||
Focal |
Fix Released
|
Undecided
|
Unassigned | ||
Groovy |
Fix Released
|
Undecided
|
Julian Andres Klode |
Bug Description
[Impact]
System unbootable because shim-signed was marked auto and removed during upgrade.
[Test case]
Install shim-signed, mark autoremovable, and ensure that
1. autoremove does not remove it
2. removing manual triggers essential remove warning
[Regression potential]
Scripts removing shim-signed will fail and need to pass --allow-
[Original bug report]
I just did a set of package updates in focal that ended up with shim shim-signed mokutil being autoremoved.
I rebooted without noticing, and had to manually recover the system thereafter. :(
Julian says there was a period of time where these were marked auto. I suppose that I installed during this window, and now some dependency change meant that as far as apt was concerned they weren't required any more.
Can we please consider never proposing these packages for autoremoval? apt has NeverAutoRemove for this which could be used, or some other appropriate method.
tags: | added: fr-807 |
tags: | removed: rls-ff-incoming |
Changed in shim (Ubuntu Focal): | |
status: | Confirmed → Won't Fix |
status: | Won't Fix → New |
Changed in shim (Ubuntu Groovy): | |
status: | Confirmed → Triaged |
no longer affects: | shim (Ubuntu) |
no longer affects: | apt (Ubuntu) |
no longer affects: | apt (Ubuntu Focal) |
no longer affects: | apt (Ubuntu Groovy) |
no longer affects: | shim (Ubuntu Focal) |
no longer affects: | shim (Ubuntu Groovy) |
Changed in shim-signed (Ubuntu Groovy): | |
status: | New → Triaged |
Changed in shim-signed (Ubuntu Groovy): | |
assignee: | nobody → Julian Andres Klode (juliank) |
description: | updated |
description: | updated |
description: | updated |
I've marked apt as affected because it ships /etc/apt/ apt.conf. d/01autoremove but I suppose each of the affected packages could also supply their own snippets.