compare grub efi during build
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
grub2-signed (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Focal |
Fix Released
|
Undecided
|
Unassigned | ||
Groovy |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
[Impact]
* When resigning grub in a PPA, one can satisfy the build-depends from the main Ubuntu Archive, without PPA signature ready yet.
* In such cases, grub2-signed is missbuilt with signature from an old PPA build attached to a newer binary, resulting in validation errors.
* Add a check to ensure that signed grub & build-depends grub are the same
[Test Case]
* Copy grub2 from -updates into PPA and await signing
* Copy grub2-signed from Ubuntu Archive -proposed into PPA
* Observe that grub2-signed FTBFS, instead of successfully producing uninstallable/
* Copy grub2 from -proposed into PPA, and await signing
* Retry grub2-signed build, which should now succeed
[Regression Potential]
* Only a build-time quickcheck is added, without any other changes of how signed grub efi images are assembled.
[Other Info]
* Previously this issue resulted in miss built UC20 grub copies
Changed in grub2-signed (Ubuntu Groovy): | |
status: | New → Incomplete |
status: | Incomplete → Fix Released |
Hello Dimitri, or anyone else affected,
Accepted grub2-signed into focal-proposed. The package will build now and be available at https:/ /launchpad. net/ubuntu/ +source/ grub2-signed/ 1.142.6 in a few hours, and then in the -proposed repository.
Please help us by testing this new package. See https:/ /wiki.ubuntu. com/Testing/ EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.
If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification- needed- focal to verification- done-focal. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed- focal. In either case, without details of your testing we will not be able to proceed.
Further information regarding the verification process can be found at https:/ /wiki.ubuntu. com/QATeam/ PerformingSRUVe rification . Thank you in advance for helping!
N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.