[Bug 1790709] Re: Backport gnu-efi 3.0.8 to all supported releases for SHIM

[Steve Langasek]

Hello Mathieu, or anyone else affected,

Accepted gnu-efi into bionic-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/gnu-
efi/3.0.8-0ubuntu1~18.04.1 in a few hours, and then in the -proposed
repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.  Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested and change the tag from
verification-needed-bionic to verification-done-bionic. If it does not
fix the bug for you, please add a comment stating that, and change the
tag to verification-failed-bionic. In either case, without details of
your testing we will not be able to proceed.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance!

** Changed in: gnu-efi (Ubuntu Bionic)
       Status: New => Fix Committed

** Tags added: verification-needed verification-needed-bionic

** Changed in: gnu-efi (Ubuntu Xenial)
       Status: New => Fix Committed

** Tags added: verification-needed-xenial

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gnu-efi in Ubuntu.
https://bugs.launchpad.net/bugs/1790709

Title:
  Backport gnu-efi 3.0.8 to all supported releases for SHIM

Status in gnu-efi package in Ubuntu:
  Fix Released
Status in syslinux package in Ubuntu:
  In Progress
Status in gnu-efi source package in Trusty:
  Fix Committed
Status in gnu-efi source package in Xenial:
  Fix Committed
Status in gnu-efi source package in Bionic:
  Fix Committed
Status in syslinux source package in Bionic:
  New

Bug description:
  [Impact]
  All users on UEFI systems.

  Gnu-efi needs to be backported everywhere to support new shim
  releases. This applies to bionic, xenial, and trusty.

  This is to properly build the new shim releases on these releases of
  Ubuntu.

  [Test cases]
  -- build tests --
  Validate that the following reverse-dependencies build correctly:

  Reverse-Build-Depends-Indep
  ===========================
  * syslinux

  Reverse-Build-Depends
  =====================
  * dell-recovery
  * efitools
  * fwupd
  * fwupdate
  * kexec-tools
  * refind
  * sbsigntool
  * shim
  * systemd

  Rebuild tests will happen in
  https://launchpad.net/~cyphermox/+archive/ubuntu/rebuild-tests

  
  == Functionality tests ==

  Run the following tests after the packages have been rebuilt against
  the new gnu-efi.

  === mokutil ===
  Validate that mokutil can process:
  - Certificate import: mokutil --import <file.der>
  - List enrolled certificates: mokutil --list-enrolled
  - Set verbosity: mokutil --set-verbosity true

  Reboot, and validate that MokManager processes the requested changes.

  
  [Regression potential]
  gnu-efi is a library that supports applications in handling EFI variables in and outside of the runtime environment, along with supporting standard library features for EFI applications. As such, any application that makes uses of EFI variables on a running system or as their own EFI application should be validated against possible corruption of the contents of the variables, as well as doing smoketesting of the EFI applications themselves for incorrect behavior, crashes, and other runtime issues.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnu-efi/+bug/1790709/+subscriptions