Enable suppression of /EndEntire message

Bug #2073634 reported by Lauren Brock
18
This bug affects 2 people
Affects Status Importance Assigned to Milestone
OEM Priority Project
New
Undecided
Unassigned
grub2 (Ubuntu)
Status tracked in Oracular
Focal
Confirmed
Undecided
Unassigned
Jammy
Confirmed
Undecided
Unassigned
Noble
Confirmed
Undecided
Unassigned
Oracular
Fix Released
Undecided
Mate Kukri

Bug Description

Many Ubuntu Core customers require a boot sequence that displays a custom splash image up until ubuntu-frame loads. Unfortunately, GRUB often (if not always) interrupts this process, printing two "/EndEntire" messages to the display. Ideally, this should be able to be suppressed via configuration, at least on devices running Ubuntu Core, as it likely desirable behavior on Classic systems.

CVE References

Revision history for this message
Mate Kukri (mkukri) wrote :

Are you sure that this is printed by GRUB? I think it is systemd-stub that is printing this, which isn't used in classic at all.

Revision history for this message
Lauren Brock (lauren-brock) wrote :

Hi Mate,

Pretty certain -- I double-checked the systemd-stub codebase, and was unable to find "EndEntire" anywhere, but it definitely exists in GRUB:

lauren@gemini ~/w/grub2 (ubuntu/devel)> rg EndEntire
grub-core/kern/efi/efi.c
588: grub_printf ("/EndEntire\n");

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in grub2 (Ubuntu):
status: New → Confirmed
Revision history for this message
Mate Kukri (mkukri) wrote :

Yeah looks like it is very much a grub thing

Revision history for this message
Mate Kukri (mkukri) wrote :

Looks like this is Oracular, Noble, Jammy and Focal job all in one.
One fix in Oracular, and 3 SRUs. I'm somewhat skeptical that this change fully satisfies SRU policy, but I'll try to make a case for this.

tags: added: foundations-todo
Changed in grub2 (Ubuntu):
assignee: nobody → Mate Kukri (mkukri)
Revision history for this message
Mate Kukri (mkukri) wrote :

Ah the reason I thought this wasn't a thing is because *only* the chainloader command prints it, not the linux command, which GRUB 2.12 can use to boot UKIs....

Either way this message should be gated behind some kind of debug flag, so I am on it.

Changed in grub2 (Ubuntu Noble):
status: New → Confirmed
Changed in grub2 (Ubuntu Jammy):
status: New → Confirmed
Changed in grub2 (Ubuntu Focal):
status: New → Confirmed
Mate Kukri (mkukri)
Changed in grub2 (Ubuntu Oracular):
status: Confirmed → In Progress
Rex Tsai (chihchun)
tags: added: oem-priority
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (7.6 KiB)

This bug was fixed in the package grub2 - 2.12-5ubuntu4

---------------
grub2 (2.12-5ubuntu4) oracular; urgency=medium

  * Merge from Debian unstable; remaining changes:
    - Add Ubuntu sbat data
    - build-efi-images: do not produce -installer.efi.signed. LP #1863994
    - grub-common: Install canonical-uefi-ca.crt
    - Check signatures
    - Support installing to multiple ESP (LP #1871821)
    - Split out unsigned artefacts into grub2-unsigned
    - Vcs-Git: Point to ubuntu packaging branch
    - Relax dependencies on grub-common and grub2-common
    - UBUNTU: Do not link grub-efi-*-unsigned docs to grub-common
    - UBUNTU: Default timeout changes
    - UBUNTU: Replace grub-install-extra-removable
    - UBUNTU: Revert "Add jfs module to signed UEFI images. Closes: #950959"
    - UBUNTU: Revert "Add f2fs module to signed UEFI images"
    - UBUNTU: Drop luks2
    - Install grub-initrd-fallback.service again
    - Build using -O1 on s390x to avoid misoptimization
    - grub-check-signatures: Support gzip compressed kernels
    - forward port fix for LP #1926748
    - Forward port the fix for LP #1930742 and make it conditional (xenial/bionic only)
    - Build grub2-unsigned packages with xz compression
    - Drop i386 from grub-efi-amd64*
    - Turn depends on grub-efi-amd64/arm64 unversioned
    - Revert "Have -bin packages Break pre-2.12 -signed packages"
    - Install grub-sort-version
    - rules: Add DPKG_BUILDPACKAGE_OPTIONS to generate-grub2-unsigned
    - d/postinst.in: Make empty "grub-pc/install_devices" non-fatal in "noninteractive" mode
    - Add debconf options "grub-{efi,pc}/cloud_style_installation"
    - grub-common.service: Add After/Requires=boot-complete.target (LP #1992643)
    - d/postinst.in: Remove upgrade check for GRUB version we can no longer upgrade from
    - Removed patches:
      + install-signed.patch with
      + grub-install-extra-removable.patch
      + grub-install-removable-shim.patch
    - Added patches:
      + ubuntu-install-signed.patch
      + ubuntu-grub-install-extra-removable.patch
      + ubuntu-zfs-enhance-support.patch
      + ubuntu-zfs-mkconfig-ubuntu-recovery.patch
      + ubuntu-zfs-mkconfig-ubuntu-distributor.patch
      + ubuntu-zfs-mkconfig-signed-kernel.patch
      + ubuntu-zfs-gfxpayload-keep-default.patch
      + ubuntu-zfs-gfxpayload-dynamic.patch
      + ubuntu-zfs-vt-handoff.patch
      + ubuntu-zfs-mkconfig-recovery-title.patch
      + ubuntu-zfs-insmod-xzio-and-lzopio-on-xen.patch
      + ubuntu-support-initrd-less-boot.patch
      + ubuntu-shorter-version-info.patch
      + ubuntu-add-initrd-less-boot-fallback.patch
      + ubuntu-mkconfig-leave-breadcrumbs.patch
      + ubuntu-fix-lzma-decompressor-objcopy.patch
      + ubuntu-add-devicetree-command-support.patch
      + ubuntu-boot-from-multipath-dependent-symlink.patch
      + ubuntu-resilient-boot-ignore-alternative-esps.patch
      + ubuntu-resilient-boot-boot-order.patch
      + ubuntu-speed-zsys-history.patch
      + ubuntu-dont-verify-loopback-images.patch
      + ubuntu-recovery-dis_ucode_ldr.patch
      + ubuntu-add-initrd-less-boot-messages.patch
      + rhboot-f34-make-exit-take-a-return-code.patch
      + rhboot-...

Read more...

Changed in grub2 (Ubuntu Oracular):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.