| 2022-06-30 12:23:40 |
Ivan Kapelyukhin |
bug |
|
|
added bug |
| 2022-06-30 12:49:49 |
Ivan Kapelyukhin |
description |
[Impact]
* ARM64 images fail to boot when secureboot is enabled, this is due to Focal and Bionic
images having unsigned `shim` and `grub-efi-arm64`
[Test Plan]
* Build an ARM64 image and create and ensure that it boots when secureboot is enabled
[Where problems could occur]
* A lot of different derivative images inherit from `disk-image-uefi.binary`, this change
has the potential to tamper with the arcane matters related to boot
[Other Info]
* This is a backport, images of Jammy and newer have had those changes since release |
[Impact]
* ARM64 images fail to boot when secureboot is enabled, this is due to Focal and Bionic
images having unsigned `shim` and `grub-efi-arm64`
[Test Plan]
* Build an ARM64 image and ensure that it boots when secureboot is enabled
[Where problems could occur]
* A lot of different derivative images inherit from `disk-image-uefi.binary`, this change
has the potential to tamper with the arcane matters related to boot
[Other Info]
* This is a backport, images of Jammy and newer have had those changes since release |
|
| 2022-07-01 11:37:23 |
Utkarsh Gupta |
nominated for series |
|
Ubuntu Impish |
|
| 2022-07-01 11:37:23 |
Utkarsh Gupta |
bug task added |
|
livecd-rootfs (Ubuntu Impish) |
|
| 2022-07-01 11:37:23 |
Utkarsh Gupta |
nominated for series |
|
Ubuntu Bionic |
|
| 2022-07-01 11:37:23 |
Utkarsh Gupta |
bug task added |
|
livecd-rootfs (Ubuntu Bionic) |
|
| 2022-07-01 11:37:23 |
Utkarsh Gupta |
nominated for series |
|
Ubuntu Jammy |
|
| 2022-07-01 11:37:23 |
Utkarsh Gupta |
bug task added |
|
livecd-rootfs (Ubuntu Jammy) |
|
| 2022-07-01 11:37:23 |
Utkarsh Gupta |
nominated for series |
|
Ubuntu Focal |
|
| 2022-07-01 11:37:23 |
Utkarsh Gupta |
bug task added |
|
livecd-rootfs (Ubuntu Focal) |
|
| 2022-07-01 11:37:30 |
Utkarsh Gupta |
livecd-rootfs (Ubuntu): status |
New |
Fix Released |
|
| 2022-07-01 11:37:35 |
Utkarsh Gupta |
livecd-rootfs (Ubuntu Jammy): status |
New |
Fix Released |
|
| 2022-07-01 12:05:16 |
Utkarsh Gupta |
livecd-rootfs (Ubuntu Impish): status |
New |
Fix Released |
|
| 2022-07-06 11:16:00 |
Andrew Cloke |
description |
[Impact]
* ARM64 images fail to boot when secureboot is enabled, this is due to Focal and Bionic
images having unsigned `shim` and `grub-efi-arm64`
[Test Plan]
* Build an ARM64 image and ensure that it boots when secureboot is enabled
[Where problems could occur]
* A lot of different derivative images inherit from `disk-image-uefi.binary`, this change
has the potential to tamper with the arcane matters related to boot
[Other Info]
* This is a backport, images of Jammy and newer have had those changes since release |
[Impact]
* ARM64 images fail to boot when secureboot is enabled, this is due to Focal and Bionic
images having unsigned `shim` and `grub-efi-arm64`
[Test Plan]
* Build an ARM64 image and ensure that it boots when secureboot is enabled
[Where problems could occur]
* A lot of different derivative images inherit from `disk-image-uefi.binary`, this change
has the potential to tamper with the arcane matters related to boot
[Other Info]
* This is a backport, images of Jammy and newer have had those changes since release
* There is an SRU exception for livecd-rootfs described here: https://wiki.ubuntu.com/StableReleaseUpdates#livecd-rootfs |
|
| 2022-07-06 11:23:57 |
Andrew Cloke |
description |
[Impact]
* ARM64 images fail to boot when secureboot is enabled, this is due to Focal and Bionic
images having unsigned `shim` and `grub-efi-arm64`
[Test Plan]
* Build an ARM64 image and ensure that it boots when secureboot is enabled
[Where problems could occur]
* A lot of different derivative images inherit from `disk-image-uefi.binary`, this change
has the potential to tamper with the arcane matters related to boot
[Other Info]
* This is a backport, images of Jammy and newer have had those changes since release
* There is an SRU exception for livecd-rootfs described here: https://wiki.ubuntu.com/StableReleaseUpdates#livecd-rootfs |
[Impact]
* This is a backport to focal and bionic of arm64 secureboot enablement work that has already been released in jammy.
* Users wishing to use secureboot to boot ARM64 bionic and focal cloud images will fail. This is due to the bionic and focal images including incorrect grub EFI binaries. The correct grub EFI binaries, that are included in jammy arm64 cloud images are `shim-signed` and `grub-efi-arm64-signed`.
[Test Plan]
* Build an ARM64 image and ensure that it boots when secureboot is enabled
[Where problems could occur]
* A lot of different derivative images inherit from `disk-image-uefi.binary`, this change
has the potential to tamper with the arcane matters related to boot
[Other Info]
* This is a backport, images of Jammy and newer have had those changes since release
* There is an SRU exception for livecd-rootfs described here: https://wiki.ubuntu.com/StableReleaseUpdates#livecd-rootfs |
|
| 2022-07-06 11:29:09 |
Andrew Cloke |
description |
[Impact]
* This is a backport to focal and bionic of arm64 secureboot enablement work that has already been released in jammy.
* Users wishing to use secureboot to boot ARM64 bionic and focal cloud images will fail. This is due to the bionic and focal images including incorrect grub EFI binaries. The correct grub EFI binaries, that are included in jammy arm64 cloud images are `shim-signed` and `grub-efi-arm64-signed`.
[Test Plan]
* Build an ARM64 image and ensure that it boots when secureboot is enabled
[Where problems could occur]
* A lot of different derivative images inherit from `disk-image-uefi.binary`, this change
has the potential to tamper with the arcane matters related to boot
[Other Info]
* This is a backport, images of Jammy and newer have had those changes since release
* There is an SRU exception for livecd-rootfs described here: https://wiki.ubuntu.com/StableReleaseUpdates#livecd-rootfs |
[Impact]
* This is a backport to focal and bionic of arm64 secureboot enablement work that has already been released in jammy.
* Users wishing to use secureboot to boot ARM64 bionic and focal cloud images will fail. This is due to the bionic and focal images including incorrect grub EFI binaries. The correct grub EFI binaries, that are included in jammy arm64 cloud images are `shim-signed` and `grub-efi-arm64-signed`.
[Test Plan]
* Create bionic and focal arm64 images using the updated livecd-rootfs
* Test that both bionic and focal arm64 images boot successfully on a cloud platform that requires secureboot
* Test that non-secureboot functionality has not regressed by testing that both bionic and focal images successfully boot on a cloud platform where secureboot is not required
[Where problems could occur]
* A lot of different derivative images inherit from `disk-image-uefi.binary`, this change
has the potential to tamper with the arcane matters related to boot
[Other Info]
* This is a backport, images of Jammy and newer have had those changes since release
* There is an SRU exception for livecd-rootfs described here: https://wiki.ubuntu.com/StableReleaseUpdates#livecd-rootfs |
|
| 2022-07-06 13:45:20 |
Łukasz Zemczak |
livecd-rootfs (Ubuntu Focal): status |
New |
Fix Committed |
|
| 2022-07-06 13:45:23 |
Łukasz Zemczak |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2022-07-06 13:45:24 |
Łukasz Zemczak |
bug |
|
|
added subscriber SRU Verification |
| 2022-07-06 13:45:27 |
Łukasz Zemczak |
tags |
|
verification-needed verification-needed-focal |
|
| 2022-07-06 13:48:54 |
Łukasz Zemczak |
livecd-rootfs (Ubuntu Bionic): status |
New |
Fix Committed |
|
| 2022-07-06 13:48:59 |
Łukasz Zemczak |
tags |
verification-needed verification-needed-focal |
verification-needed verification-needed-bionic verification-needed-focal |
|
| 2022-07-06 14:48:26 |
Ivan Kapelyukhin |
tags |
verification-needed verification-needed-bionic verification-needed-focal |
verification-done-focal verification-needed verification-needed-bionic |
|
| 2022-07-11 06:55:25 |
Ivan Kapelyukhin |
tags |
verification-done-focal verification-needed verification-needed-bionic |
verification-done verification-done-bionic verification-done-focal |
|
| 2022-07-11 07:14:55 |
Launchpad Janitor |
livecd-rootfs (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
| 2022-07-11 07:15:25 |
Łukasz Zemczak |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2022-07-11 07:28:19 |
Launchpad Janitor |
livecd-rootfs (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|
