Verification-done for trusty for grub2 and grub2-signed:
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-=====================================-====================================================-============-===============================================================================
ii grub-efi-amd64 2.02~beta2-9ubuntu1.16 amd64 GRand Unified Bootloader, version 2 (EFI-AMD64 version)
ii grub-efi-amd64-signed 1.34.18+2.02~beta2-9ubuntu1.16 amd64 GRand Unified Bootloader, version 2 (EFI-AMD64 version, signed)
Chainloading works correctly now, and normal loading of a Linux kernel to boot to Ubuntu also works correctly. Loading an unsigned kernel is still allowed, but debug mode does show the expected verification behavior happening at boot.
Verification-done for trusty for grub2 and grub2-signed:
Desired= Unknown/ Install/ Remove/ Purge/Hold Not/Inst/ Conf-files/ Unpacked/ halF-conf/ Half-inst/ trig-aWait/ Trig-pend /Reinst- required (Status,Err: uppercase=bad) ======= ======= ======= ======= ======- ======= ======= ======= ======= ======= ======= ======= ===-=== ======= ==-==== ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ===== 9ubuntu1. 16 amd64 GRand Unified Bootloader, version 2 (EFI-AMD64 version) amd64-signed 1.34.18+ 2.02~beta2- 9ubuntu1. 16 amd64 GRand Unified Bootloader, version 2 (EFI-AMD64 version, signed)
| Status=
|/ Err?=(none)
||/ Name Version Architecture Description
+++-===
ii grub-efi-amd64 2.02~beta2-
ii grub-efi-
Chainloading works correctly now, and normal loading of a Linux kernel to boot to Ubuntu also works correctly. Loading an unsigned kernel is still allowed, but debug mode does show the expected verification behavior happening at boot.