[Bug 1075181] Re: Backport UEFI Secure Boot support for Ubuntu 12.04.2

[Colin Watson]

** Also affects: livecd-rootfs (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: livecd-rootfs (Ubuntu)
   Importance: Undecided => High

** Changed in: livecd-rootfs (Ubuntu)
       Status: New => Fix Released

** Changed in: livecd-rootfs (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: livecd-rootfs (Ubuntu Precise)
       Status: New => Triaged

** Changed in: livecd-rootfs (Ubuntu Precise)
    Milestone: None => ubuntu-12.04.2

** Changed in: livecd-rootfs (Ubuntu Precise)
     Assignee: (unassigned) => Colin Watson (cjwatson)

** Also affects: ubuntu-defaults-builder (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: ubuntu-defaults-builder (Ubuntu)
   Importance: Undecided => High

** Changed in: ubuntu-defaults-builder (Ubuntu)
       Status: New => Fix Released

** Changed in: ubuntu-defaults-builder (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: ubuntu-defaults-builder (Ubuntu Precise)
       Status: New => Triaged

** Changed in: ubuntu-defaults-builder (Ubuntu Precise)
    Milestone: None => ubuntu-12.04.2

** Changed in: ubuntu-defaults-builder (Ubuntu Precise)
     Assignee: (unassigned) => Colin Watson (cjwatson)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to livecd-rootfs in Ubuntu.
https://bugs.launchpad.net/bugs/1075181

Title:
  Backport UEFI Secure Boot support for Ubuntu 12.04.2

Status in Ubuntu CD image build software:
  Triaged
Status in “base-installer” package in Ubuntu:
  Fix Released
Status in “debian-installer” package in Ubuntu:
  Fix Released
Status in “grub-installer” package in Ubuntu:
  Fix Released
Status in “grub2” package in Ubuntu:
  Fix Released
Status in “grub2-signed” package in Ubuntu:
  Fix Released
Status in “linux-lts-quantal” package in Ubuntu:
  Invalid
Status in “linux-signed” package in Ubuntu:
  In Progress
Status in “livecd-rootfs” package in Ubuntu:
  Fix Released
Status in “sbsigntool” package in Ubuntu:
  Fix Released
Status in “shim” package in Ubuntu:
  Fix Released
Status in “shim-signed” package in Ubuntu:
  Fix Released
Status in “ubiquity” package in Ubuntu:
  Fix Released
Status in “ubuntu-defaults-builder” package in Ubuntu:
  Fix Released
Status in “base-installer” source package in Precise:
  In Progress
Status in “debian-installer” source package in Precise:
  Triaged
Status in “grub-installer” source package in Precise:
  Triaged
Status in “grub2” source package in Precise:
  In Progress
Status in “grub2-signed” source package in Precise:
  Triaged
Status in “linux-lts-quantal” source package in Precise:
  Fix Committed
Status in “linux-signed” source package in Precise:
  In Progress
Status in “livecd-rootfs” source package in Precise:
  Triaged
Status in “sbsigntool” source package in Precise:
  Triaged
Status in “shim” source package in Precise:
  Triaged
Status in “shim-signed” source package in Precise:
  Triaged
Status in “ubiquity” source package in Precise:
  Triaged
Status in “ubuntu-defaults-builder” source package in Precise:
  Triaged

Bug description:
  [Impact]

  Since systems are beginning to come out with UEFI Secure Boot enabled
  by default if they haven't already, we need to backport this support
  from 12.10 to 12.04.2.  This is a complex set of enablement patches
  across a number of packages.  Most of them will be fairly
  straightforward backports, but there are a few known warts:

   * The grub2 support was built on 2.00, and depends on first backporting a number of other patches (mostly Unicode handling changes and UEFI variable support) to 1.99.
   * 12.04.2 will have an alternate install image, which was removed from 12.10.  Installer support here should be mostly the same as for the server image, but we have stricter space constraints and may need to adjust the way the signed kernel is delivered to deal with this.  Andy Whitcroft and I have a plan for this which we'll implement between us in raring.

  [Test Case]

  The desktop, server, and alternate install images should all boot and
  install on an SB-enabled system.  I would recommend testing
  installations from both a CD and a USB stick.  After each
  installation, use debsums to check that kernel checksums are correct.

  [Regression Potential]

  Check that non-SB installations of all these images still work.  For
  this, it is sufficient to test with either a CD or a USB stick, but
  not necessarily both.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-cdimage/+bug/1075181/+subscriptions